Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          wsJ4xfkuiU0ovBvGbwBkOX+20okKXmHHDkpgkjQPccg=
Subject key identifier:   4C:E0:74:99:DE:8A:D3:BE:EF:00:93:6A:03:71:BC:57:00:F3:31:A7
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       72B2894330FD5CCA3FD4D7FF292308FC04334966
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        177.39.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b2:89:43:30:fd:5c:ca:3f:d4:d7:ff:29:23:08:fc:04:33:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=4CE07499DE8AD3BEEF00936A0371BC5700F331A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:40:1e:9c:74:29:16:a0:9e:44:4a:19:ee:
                    08:fe:b9:30:62:91:f7:02:42:28:63:79:69:c1:20:
                    e0:13:11:2c:a7:4d:99:05:f4:ba:cc:0f:80:e2:d5:
                    36:a6:35:42:b9:30:27:e6:f4:f0:6c:57:10:17:62:
                    86:bc:d7:ca:7b:d0:dd:d0:c1:02:85:aa:da:19:f0:
                    46:0a:a1:34:67:87:c2:0a:a3:01:03:24:b2:50:d3:
                    3e:ba:cc:e8:42:f1:80:51:19:8c:fc:eb:3e:6e:79:
                    a5:66:0a:af:7a:61:bf:81:03:22:af:3a:c0:21:73:
                    9a:6a:2b:91:4c:9a:f4:c2:02:de:4d:5c:96:64:e5:
                    4e:d3:d8:23:f0:25:fd:e8:3a:77:45:2a:0e:3f:a5:
                    71:b2:4a:71:d4:8c:49:55:93:9f:36:46:7d:81:aa:
                    a9:ca:e1:4a:c3:9a:e9:d2:d2:74:84:64:51:5a:2f:
                    37:ac:5d:9c:45:df:13:e7:5e:27:d4:09:cb:a3:6c:
                    1b:21:6e:da:c2:95:f0:fa:89:32:aa:ba:ee:9c:4a:
                    ff:42:18:fa:02:55:83:9c:b1:81:20:6c:be:ef:8e:
                    49:9f:ae:f0:e5:4a:61:d7:35:98:d1:04:ed:c2:d4:
                    16:43:01:7b:e7:61:7a:36:19:17:5a:af:65:f2:f5:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E0:74:99:DE:8A:D3:BE:EF:00:93:6A:03:71:BC:57:00:F3:31:A7
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:7d:08:de:e8:82:98:a4:0d:f2:fd:44:c0:98:73:fb:3c:
         fb:17:df:c2:a5:2a:2e:97:43:88:39:05:3f:5a:42:06:73:93:
         84:76:89:27:d2:f0:52:a6:37:85:cf:47:71:b3:6b:6b:b6:9d:
         b5:dd:ed:b0:f8:a7:50:e5:d9:3f:a2:e9:d3:ce:4b:a2:09:80:
         4d:75:8a:13:f4:e4:f2:14:7f:ed:58:a2:bc:1a:6f:76:0e:f3:
         24:77:81:e2:f0:36:be:ac:60:05:56:75:5e:4c:6d:2b:f7:2a:
         37:de:30:1c:54:21:e0:e6:3b:7d:0b:a0:1b:68:aa:c1:71:cc:
         dd:1f:a6:f9:ba:fa:9a:0b:a9:83:72:30:92:c8:9e:d6:7e:56:
         b8:f0:6f:ea:3b:67:5e:2d:ec:7a:09:b4:e1:fa:8a:d0:0f:19:
         a7:94:34:7b:41:e9:53:2f:97:96:97:e3:3f:6f:56:44:2a:1b:
         1f:e7:77:f5:69:25:96:9d:1f:48:05:36:2b:f5:d4:58:04:39:
         f2:ce:c8:39:bf:63:c4:19:65:96:18:5e:65:c2:98:e8:0f:af:
         c4:df:22:b2:b1:e8:5e:ae:47:68:83:89:04:40:b3:06:6d:64:
         72:c4:1e:81:d6:8f:f7:1d:99:b5:88:8e:49:4e:93:86:e0:f3:
         91:c3:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:50 2025 by rpki-client