Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137372e37342e3132382e302f32312d3234203d3e20323633363436.roa
File:                     3137372e37342e3132382e302f32312d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          d/vdZGcXw2vohVgvYqjEPu+s+yskT/7i9docZZy71yg=
Subject key identifier:   74:32:4D:78:30:44:79:C8:80:6C:86:AB:97:C7:BF:B3:61:3F:DD:4C
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       3FDFB5DC110FE633C196BDB4A718618C60A87AE0
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137372e37342e3132382e302f32312d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:41:21 +0000
ROA not before:           Fri 14 Jan 2022 23:36:21 +0000
ROA not after:            Fri 13 Jan 2023 23:41:21 +0000
asID:                     263646
IP address blocks:        177.74.128.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:df:b5:dc:11:0f:e6:33:c1:96:bd:b4:a7:18:61:8c:60:a8:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:36:21 2022 GMT
            Not After : Jan 13 23:41:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:7a:5b:df:31:b0:8c:9e:39:a9:4f:12:5c:
                    b4:0f:44:ca:37:71:35:c6:2e:6b:88:72:36:3d:03:
                    fa:cd:b1:63:99:ec:f8:f2:e5:e7:fd:34:73:42:cb:
                    07:bb:a4:d2:34:b4:38:aa:c5:ac:03:61:68:9b:38:
                    22:1c:54:30:93:e5:5d:c8:42:58:58:2b:f4:b2:ff:
                    f0:8b:f9:28:56:d5:84:92:c7:01:eb:97:ce:78:95:
                    b7:b0:57:e1:f0:44:89:13:8c:bd:08:2f:75:bf:58:
                    d8:51:39:a6:b1:c7:78:a9:08:ab:82:fb:1b:3f:85:
                    b3:d0:dd:40:61:e2:9c:8e:90:f6:18:93:d2:a9:76:
                    c6:b1:b5:82:30:38:e8:0f:d1:37:5f:93:8b:bd:37:
                    98:89:17:13:e8:7e:35:20:1c:28:64:23:ea:ab:93:
                    ee:10:e4:b6:cf:f1:a4:54:83:d6:00:4c:ea:ed:7f:
                    1a:71:86:55:b4:87:5a:c5:a6:7a:5e:a9:0a:db:64:
                    c5:9f:88:36:4a:9e:21:f4:1a:db:d3:76:64:1d:a7:
                    c0:dc:60:eb:7e:21:6c:e2:ad:ad:25:f9:32:96:a8:
                    57:da:a6:a7:8d:38:b8:b8:96:df:2a:fb:28:08:79:
                    75:f7:99:21:b0:f4:65:c8:d4:aa:74:9e:2a:fa:cb:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:4D:78:30:44:79:C8:80:6C:86:AB:97:C7:BF:B3:61:3F:DD:4C
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137372e37342e3132382e302f32312d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:3c:5b:41:ea:b7:d6:56:7f:e4:56:99:6e:15:b4:45:bf:
         fc:07:29:70:27:b3:b6:8d:ed:51:57:0f:8d:a1:cc:00:94:49:
         ba:b8:bc:fa:7d:39:eb:6e:4b:ce:6c:2e:15:37:59:f2:a1:ee:
         d8:95:aa:a6:15:e5:4a:48:75:da:d5:84:98:16:02:cb:24:3b:
         f9:08:9a:48:32:b7:71:38:df:e6:96:77:17:ce:10:e9:b4:a3:
         17:d9:b0:8c:19:02:75:ef:66:1a:a4:bf:6a:02:59:14:da:d0:
         cf:44:a7:24:ac:6b:c1:30:63:e6:67:21:64:00:0c:25:82:20:
         7c:14:e5:44:ae:d6:f8:d6:b8:47:35:8d:35:f7:c0:68:c0:ee:
         a6:80:0e:b2:98:22:5b:ff:99:3d:7b:52:2c:c1:6b:08:6b:fd:
         78:61:54:85:e6:87:ba:d0:7b:2a:ed:7f:83:57:3b:9d:2b:22:
         dd:24:38:a3:84:e5:a5:76:20:b0:2b:d4:b1:95:22:56:3c:a4:
         cd:e6:5a:9d:30:7a:6c:8c:9c:72:bb:be:72:01:d9:33:41:92:
         9c:72:f4:70:6d:b1:c2:11:94:7e:e1:2c:7e:4a:b9:71:76:dc:
         c8:92:82:ab:69:2e:22:b5:03:fe:ec:d8:55:70:8a:c8:78:4d:
         3f:e4:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:30 2025 by rpki-client