Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3232203d3e203532363936.roa
File:                     3137372e37332e34342e302f32322d3232203d3e203532363936.roa (raw, json)
Hash identifier:          hnFjdgsj8UhlBGTe6kHrEXnxTDNov2NkyrEw34bVUuw=
Subject key identifier:   E7:B4:6C:96:1B:55:03:BA:11:43:0C:25:4B:3A:48:45:61:71:E1:C7
Certificate issuer:       /CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
Certificate serial:       5E1E8C3F32CC37952BD3644AD6F8C2157ADFD583
Authority key identifier: C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3232203d3e203532363936.roa
Signing time:             Wed 07 Feb 2024 05:40:49 +0000
ROA not before:           Wed 07 Feb 2024 05:35:49 +0000
ROA not after:            Wed 05 Feb 2025 05:40:49 +0000
asID:                     52696
IP address blocks:        177.73.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1e:8c:3f:32:cc:37:95:2b:d3:64:4a:d6:f8:c2:15:7a:df:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
        Validity
            Not Before: Feb  7 05:35:49 2024 GMT
            Not After : Feb  5 05:40:49 2025 GMT
        Subject: CN=E7B46C961B5503BA11430C254B3A48456171E1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:ca:79:d2:b9:54:14:6b:d4:f3:bb:f6:ab:
                    71:08:30:ec:36:fe:f0:88:51:08:7d:63:e6:6a:d6:
                    b7:c8:4d:34:71:d6:44:f3:f4:f8:3c:8d:a7:fb:e6:
                    05:6e:21:3e:63:c5:b4:d0:eb:69:57:64:a8:34:19:
                    ad:fb:54:8a:13:3c:28:e0:54:2f:96:8d:d6:a8:c0:
                    c7:b4:17:80:bd:c1:7e:3b:b6:ea:18:6b:73:77:90:
                    6b:ed:d9:97:fa:a0:1e:18:3f:21:36:f8:e9:1b:84:
                    8b:2c:82:6d:72:5d:7d:a1:11:ae:40:9e:24:a4:a2:
                    d8:63:f3:24:43:a6:1f:ef:92:ed:a8:be:d7:0e:34:
                    f0:01:67:17:fc:b5:25:cf:a2:28:8c:24:c3:c6:4c:
                    39:fc:52:49:72:58:70:91:7c:e8:7b:fd:ae:21:76:
                    8d:c5:14:fb:06:bf:47:1d:9d:bd:a6:82:08:5d:20:
                    c3:b6:3f:9c:9d:94:7f:3c:d4:82:2f:5f:d8:50:13:
                    d3:16:ce:38:43:e4:f6:b8:be:a8:80:28:d0:85:85:
                    66:62:18:0c:13:3c:83:4f:3f:8d:a7:67:5a:d9:42:
                    89:f7:97:9e:dd:c3:11:a1:92:c5:f6:a3:b2:f9:48:
                    b0:64:5a:58:6a:81:9e:12:ef:fa:92:4a:58:57:a8:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:6C:96:1B:55:03:BA:11:43:0C:25:4B:3A:48:45:61:71:E1:C7
            X509v3 Authority Key Identifier:
                keyid:C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3232203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:16:c2:aa:d1:4c:1f:bf:bc:96:45:41:d6:ce:a2:06:8e:69:
         02:59:ae:32:8a:9c:f8:26:bd:19:41:bd:0a:2b:c7:cf:c6:f1:
         27:a7:7f:1a:4e:9f:e6:66:be:35:fd:1b:ac:31:a0:15:88:a2:
         00:a8:e7:ac:f0:c5:72:c0:ad:ac:bf:be:44:60:5f:a2:28:2c:
         29:da:ee:2e:7d:65:5a:67:81:e8:10:ab:d8:45:19:f0:94:9f:
         35:79:39:5a:5b:6d:2c:04:7f:68:30:98:a1:e7:9a:b2:67:10:
         b1:ca:81:0c:70:2b:b2:18:92:77:a2:00:93:0a:ce:92:28:30:
         b7:7a:b0:b0:ae:fa:e6:33:9d:cb:1c:40:fa:a2:fa:b5:08:10:
         ee:3f:8e:e5:57:c6:12:2f:2d:65:ce:a8:d2:bf:7c:7e:d7:d6:
         d8:99:0e:6b:a7:a0:a0:e0:1a:00:00:4e:b5:57:0c:44:8f:46:
         dc:b1:df:83:5e:ce:b3:f8:22:7d:3d:1f:d1:bf:d6:fd:eb:d9:
         65:51:d0:fd:bf:58:28:dd:57:fc:e8:01:10:2d:5b:f7:4f:56:
         87:df:9a:02:38:49:5e:53:8c:6f:29:6a:94:a3:a4:9f:16:37:
         81:6d:42:f0:37:79:86:8a:9f:03:5c:d1:81:cf:81:48:a8:38:
         90:b7:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:46:34 2025 by rpki-client