Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          N0xLCVqnUqhws16AGhWK4P2L3tiaNcmAu0+38yocPpE=
Subject key identifier:   DF:62:3C:03:5E:95:E7:77:60:80:D8:4C:03:16:6D:E8:E4:B7:78:56
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       09BCF97A9B2F9D1B41674FDC23E16ADBF4288A8A
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     52977
IP address blocks:        177.39.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bc:f9:7a:9b:2f:9d:1b:41:67:4f:dc:23:e1:6a:db:f4:28:8a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=DF623C035E95E7776080D84C03166DE8E4B77856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:b7:40:be:13:ac:af:67:ab:5e:7d:77:d6:
                    e8:12:b3:91:bb:63:88:4c:2b:11:1b:46:10:52:e4:
                    a5:18:75:b9:41:4c:d7:1e:44:58:1e:38:34:bd:fb:
                    c2:7b:72:f0:71:15:4a:b5:c9:e0:b1:2e:4e:44:51:
                    fc:88:6b:19:1a:f1:02:b2:3b:c3:ac:03:98:a6:42:
                    6c:39:21:df:5b:f9:e5:14:3f:1c:49:78:43:85:f4:
                    3a:e4:8f:e0:84:17:97:e1:b2:ff:51:a2:39:d0:94:
                    f8:ab:88:b6:94:e1:36:80:90:01:ad:9e:6c:4e:f3:
                    a9:da:bb:8b:cb:78:06:e3:8d:28:8e:13:00:f2:1e:
                    1c:43:ad:92:4d:7a:85:0b:07:aa:fc:ae:90:b6:cd:
                    a6:a7:cb:f3:d9:8a:9c:ee:53:9f:0e:69:31:5a:1c:
                    f9:a0:a8:f8:2a:f1:1f:e2:a7:51:d1:da:c1:a7:de:
                    11:27:3d:f7:55:6a:4f:2f:33:d6:e4:3f:8e:5c:2a:
                    e5:e6:8f:be:9c:83:19:19:ae:c2:17:59:92:1f:14:
                    5c:18:96:8b:5c:5a:5c:53:95:a1:b7:18:e7:39:c1:
                    e0:6e:03:f8:26:84:ba:e3:db:c5:43:f5:77:ed:9f:
                    11:7a:10:30:85:88:0f:af:02:a7:5b:0d:1d:eb:fb:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:3C:03:5E:95:E7:77:60:80:D8:4C:03:16:6D:E8:E4:B7:78:56
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:0e:a0:ae:e5:80:ea:bc:50:cd:fb:78:3e:89:9a:43:ea:
         61:12:5b:94:fb:15:04:02:30:45:e3:33:00:04:b4:61:c5:88:
         87:03:90:25:f2:cf:e0:91:94:64:f0:7f:82:97:89:99:d4:56:
         ba:49:ed:e2:72:33:ff:69:8f:1b:40:03:3c:f3:d5:1c:d1:c7:
         da:8a:2c:a5:f6:dd:41:1a:9d:82:d6:1e:08:d3:fb:42:55:e6:
         cd:e2:4f:3e:1a:3a:de:53:d9:27:d8:d3:0d:56:87:5e:38:ac:
         b3:22:cf:8f:ac:18:6a:da:35:da:19:58:50:b4:35:e7:6b:23:
         15:3f:2a:da:8b:40:39:8f:5b:90:e6:10:2e:05:ba:84:4b:b7:
         70:5e:7f:72:77:e9:ca:d7:e2:08:dd:8b:6d:92:c9:f1:93:00:
         34:b2:fe:7c:ec:ab:73:34:8d:0f:20:11:f8:15:4f:60:85:99:
         55:1d:b3:4b:23:10:9d:5d:e6:f1:8e:f3:4f:22:85:f3:19:1d:
         43:23:42:8a:bc:86:b9:e3:2f:25:50:a5:d5:43:a6:68:1b:d6:
         6a:fa:04:4e:09:03:76:67:78:38:56:25:a8:57:62:90:33:21:
         b2:ad:c7:25:c0:c8:87:5d:19:33:6c:ba:3a:32:9b:e1:8a:2b:
         1b:e9:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:07 2025 by rpki-client