Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136342e302f32322d3232203d3e20323632353731.roa
File:                     3137372e37332e3136342e302f32322d3232203d3e20323632353731.roa (raw, json)
Hash identifier:          WNtps4Yld0vmrT2fNB88ntt4UM8/N+q3kD1UriYW83Q=
Subject key identifier:   9B:9A:5B:41:B7:74:D2:FF:0B:A3:B3:2E:7A:CF:34:67:B4:AE:97:19
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       0D1EA5A0B8754DB38A073F6B0191243BDB6C36E7
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136342e302f32322d3232203d3e20323632353731.roa
Signing time:             Mon 06 Dec 2021 19:10:09 +0000
ROA not before:           Mon 06 Dec 2021 19:05:09 +0000
ROA not after:            Mon 05 Dec 2022 19:10:09 +0000
asID:                     262571
IP address blocks:        177.73.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1e:a5:a0:b8:75:4d:b3:8a:07:3f:6b:01:91:24:3b:db:6c:36:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Dec  6 19:05:09 2021 GMT
            Not After : Dec  5 19:10:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:59:2b:5e:5c:18:aa:43:78:34:f1:70:55:
                    6e:7a:62:79:77:67:e0:50:b8:f8:28:29:39:0e:48:
                    9f:cf:1f:50:cd:f9:ff:60:26:57:02:00:8e:7d:ea:
                    6e:75:fc:32:fe:a1:59:f3:d9:c9:e6:88:63:99:95:
                    d2:86:1d:94:bd:90:72:d9:1c:27:7d:9c:cd:d5:61:
                    1c:bd:41:6e:60:ca:9f:f7:f9:a9:85:de:1f:d0:3f:
                    ef:ce:a9:3c:3c:a4:64:15:1f:c2:aa:4a:ef:bb:92:
                    0b:1e:d0:9a:36:32:c8:e6:4c:54:ed:59:cf:9e:9f:
                    44:c7:6e:65:2d:7f:d4:b0:e9:34:54:97:41:7e:de:
                    b3:b4:a3:aa:67:06:e5:61:45:e6:c2:ee:48:fc:b7:
                    c2:55:33:b8:1e:e8:d6:16:13:84:ce:a7:1d:3c:e8:
                    b0:fa:f9:b3:24:0e:f7:d4:60:7f:64:17:52:e8:61:
                    43:d5:24:8e:98:f9:f0:fb:a8:38:28:b0:64:5b:ce:
                    36:22:00:ff:d5:97:70:ce:78:b1:9d:c6:7f:8c:ac:
                    6b:b8:01:e2:ce:e0:84:64:c3:c4:3b:5d:08:c1:24:
                    da:fe:c0:32:fe:d8:0d:3a:c9:79:3d:1e:8d:02:84:
                    57:8e:a5:2a:53:be:f5:6e:3f:41:53:e2:1a:09:76:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9A:5B:41:B7:74:D2:FF:0B:A3:B3:2E:7A:CF:34:67:B4:AE:97:19
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/3137372e37332e3136342e302f32322d3232203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:7b:9f:00:47:a8:30:2e:14:d0:eb:ae:e0:b0:25:69:6d:
         3f:ab:c3:0c:a9:60:d9:97:22:e8:9f:33:82:2d:91:d1:1c:d0:
         56:5d:69:bf:89:43:23:da:d1:78:a0:5d:39:f7:c6:03:44:55:
         5d:b6:27:b7:75:8b:12:db:d5:8d:70:97:55:95:1b:14:47:75:
         c0:73:2d:1e:56:0e:c3:be:18:41:7a:11:0d:f0:6f:75:c2:53:
         c2:0a:90:de:41:07:58:7e:39:dc:82:03:a6:67:73:89:ae:09:
         9d:9e:f8:76:c5:fc:fb:57:29:97:ed:d1:28:cd:79:df:af:49:
         ea:b2:b4:3a:7d:3f:46:bb:d9:aa:17:9a:46:1e:dd:be:a3:f4:
         b1:7b:43:98:ef:58:22:7a:30:91:19:52:c1:2d:2e:2b:f5:97:
         ce:9d:0e:97:d4:dc:8a:03:13:7d:11:6d:0f:95:75:36:3f:8d:
         2f:ce:66:63:88:5b:59:95:7c:27:a1:37:20:b7:ff:55:a9:80:
         ba:1c:f4:fc:52:4a:8e:15:81:4b:43:d6:6d:40:c7:cf:4b:97:
         69:b4:db:b9:1e:8d:3a:73:b0:a9:06:70:09:0d:a1:1e:04:4f:
         f4:34:35:f3:69:1d:6c:fc:fd:20:fb:5b:74:46:c2:04:1d:72:
         60:a2:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:32 2025 by rpki-client