Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
File:                     3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (raw, json)
Hash identifier:          OVqWissp0J4ldmukW0ysMHfMdJEiIG8X+padmpJcdzE=
Subject key identifier:   61:6E:EE:22:92:B8:C4:5C:67:C7:7F:41:45:C3:7B:B4:43:F6:41:68
Certificate issuer:       /CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
Certificate serial:       39C746B9BC00FD568F3B12B9B137F249BE8A0699
Authority key identifier: 17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
Signing time:             Wed 27 Mar 2024 13:10:59 +0000
ROA not before:           Wed 27 Mar 2024 13:05:59 +0000
ROA not after:            Wed 26 Mar 2025 13:10:59 +0000
asID:                     262676
IP address blocks:        187.73.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:46:b9:bc:00:fd:56:8f:3b:12:b9:b1:37:f2:49:be:8a:06:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
        Validity
            Not Before: Mar 27 13:05:59 2024 GMT
            Not After : Mar 26 13:10:59 2025 GMT
        Subject: CN=616EEE2292B8C45C67C77F4145C37BB443F64168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:05:51:d4:cb:4b:53:1c:8d:75:7d:56:90:
                    c9:9d:de:ad:00:71:d6:08:ae:76:41:e3:61:30:21:
                    c3:01:fc:fd:ec:7a:b4:ce:a5:34:79:0c:17:1d:19:
                    06:79:f7:73:45:6e:c7:1b:a4:52:a9:a1:30:e1:36:
                    94:45:47:1b:87:2f:c9:d6:49:8c:f0:c2:e0:43:29:
                    6e:96:8c:62:b3:06:82:55:5d:2c:e1:6d:c0:a8:69:
                    60:89:50:82:2b:50:4e:db:43:fd:2e:7e:ee:d0:69:
                    57:3c:cd:93:99:c4:37:7d:99:57:e8:b2:87:ab:dd:
                    5e:69:e9:a5:86:f9:7d:35:42:57:bc:d1:b2:de:46:
                    86:63:ca:88:87:6b:be:4a:fa:6f:28:fd:7c:94:45:
                    a4:2e:6c:74:d6:58:f8:6d:49:1e:d9:e6:7f:9d:29:
                    7a:f3:b7:59:c8:16:9b:79:e8:7b:d7:ff:c6:f6:37:
                    48:2b:4d:6a:fd:8a:04:11:2a:82:71:18:67:24:85:
                    37:66:bc:99:b3:19:2f:6c:94:6e:cb:4b:a3:08:56:
                    3c:02:a8:e5:32:d2:5c:69:5a:6f:b8:52:c0:a5:e2:
                    1d:c3:51:a9:2c:93:37:28:6f:86:77:ab:b5:22:ba:
                    50:51:cb:e0:e3:b0:da:74:c4:0f:58:df:39:47:55:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:EE:22:92:B8:C4:5C:67:C7:7F:41:45:C3:7B:B4:43:F6:41:68
            X509v3 Authority Key Identifier:
                keyid:17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:70:69:50:56:4b:0a:40:4b:04:d5:48:0a:a2:8b:98:c6:ce:
         84:67:a4:ff:06:96:df:62:1b:0d:64:dd:43:1e:10:fb:c3:61:
         21:d1:38:2a:44:1f:dd:73:08:3d:f3:cc:a1:0a:3a:9a:5e:f1:
         64:db:d1:82:01:3f:b3:d8:f0:cb:a9:0c:10:8a:cb:cf:27:0c:
         d3:5b:16:ed:d0:10:77:62:81:b4:9c:c9:23:c2:57:a5:db:ec:
         b4:e7:34:54:a5:66:2e:6a:80:8a:ba:69:ef:77:c7:f4:9a:8e:
         8b:49:98:6f:41:c2:57:4c:84:c6:64:c0:f1:f0:ad:51:f5:ce:
         99:c8:db:b1:7a:fc:1b:20:5e:db:a9:7b:1f:8b:ec:6d:75:0a:
         b1:36:0f:ef:08:4a:a8:79:ba:b2:dc:64:e7:bb:70:d2:6b:b0:
         ef:e6:d3:10:a9:ba:d3:1f:c8:9b:a0:d5:8a:d8:80:df:cf:9f:
         7d:fa:35:90:70:d7:bd:4a:94:72:9e:dc:9f:b4:e6:bb:a3:07:
         a5:c1:d6:cc:a8:05:f4:37:6b:e4:60:95:43:89:18:f9:73:06:
         6b:06:fa:ee:a6:ac:7f:32:50:3a:8c:f0:a2:3b:e2:96:28:2a:
         01:28:d3:81:56:80:ef:63:3e:db:99:d8:34:6e:71:07:49:fe:
         d0:05:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:05:29 2025 by rpki-client