Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e20323033.roa
File:                     3137392e39362e3137362e302f32312d3332203d3e20323033.roa (raw, json)
Hash identifier:          +NxDqTOJEc5Fii8XMNLu4R0JVyOyO6BjZaKT/Wkz6BI=
Subject key identifier:   73:E0:0D:FF:64:2B:6F:4D:9C:86:37:F7:2B:D1:1E:39:A0:2E:28:7F
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       4030EC8D373DB387544216235918882492FAF5A8
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e20323033.roa
Signing time:             Thu 23 Nov 2023 17:10:15 +0000
ROA not before:           Thu 23 Nov 2023 17:05:15 +0000
ROA not after:            Thu 21 Nov 2024 17:10:15 +0000
asID:                     203
IP address blocks:        179.96.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:30:ec:8d:37:3d:b3:87:54:42:16:23:59:18:88:24:92:fa:f5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 23 17:05:15 2023 GMT
            Not After : Nov 21 17:10:15 2024 GMT
        Subject: CN=73E00DFF642B6F4D9C8637F72BD11E39A02E287F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:28:65:04:57:db:fd:f7:05:a0:d5:4a:29:
                    b9:95:b2:40:49:e2:6c:34:5d:7e:d2:35:42:49:ae:
                    58:66:b1:fb:b7:06:b2:68:9a:cb:3c:7b:77:00:56:
                    71:65:19:6b:b8:f5:fc:0b:78:e8:b5:58:39:77:30:
                    10:6c:9d:13:7f:ae:9e:d9:ba:78:d8:22:91:db:8d:
                    cf:bb:4d:a3:b6:fd:ef:c8:94:76:3a:98:03:a3:d5:
                    1a:18:c6:41:65:c4:7c:10:3f:1d:cb:4c:e6:61:e0:
                    59:cb:05:f4:b1:72:ff:6d:2d:f6:96:f8:37:d0:c7:
                    b5:a6:ea:89:a2:97:cc:6c:37:2b:b5:8c:83:c8:97:
                    f6:7e:05:e8:ff:a4:6f:a8:9f:07:f0:95:db:2a:7f:
                    65:f1:36:da:fc:57:49:0b:da:1a:4e:3a:76:00:33:
                    43:09:e0:15:c4:90:53:8b:7b:96:e9:af:fc:a3:66:
                    42:09:50:d1:67:46:49:8a:c7:9b:06:25:1f:5a:71:
                    5d:13:79:7d:23:51:08:6c:85:67:45:64:ae:90:aa:
                    ce:73:a8:ca:7f:1a:d0:eb:89:20:35:45:2f:47:b5:
                    61:28:66:b2:d4:92:5f:47:8c:bb:47:59:16:8e:58:
                    28:07:66:39:ab:94:fa:5a:15:32:48:25:9b:8a:a2:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E0:0D:FF:64:2B:6F:4D:9C:86:37:F7:2B:D1:1E:39:A0:2E:28:7F
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:92:27:f2:26:4e:18:d9:ff:78:9b:b4:39:42:ed:5e:f5:
         00:cd:02:fb:af:c1:63:be:05:23:6b:65:4a:85:09:7d:ce:09:
         8a:c4:2f:fd:71:4a:ae:c4:5d:92:3b:2f:46:f7:95:d0:f4:49:
         c7:9d:9c:39:fe:a5:4f:d8:16:25:ee:4c:43:2a:4d:b1:c9:23:
         8b:ec:a6:c6:ef:a9:56:d5:6a:49:77:93:1e:68:df:38:99:4c:
         9a:e8:8f:f7:54:fa:39:7f:73:68:d0:20:f6:9b:a5:00:18:ce:
         2b:39:47:ae:bb:d3:83:1c:f2:98:9b:bb:e8:34:31:1a:65:70:
         1c:38:98:62:cc:a5:eb:25:d1:f8:c0:7c:32:45:f5:2e:3d:56:
         6b:27:62:0b:2f:49:27:fd:0c:bf:3d:de:de:87:48:9f:67:83:
         4b:c7:e4:74:10:ab:60:78:a0:33:63:cc:ac:81:bc:da:fc:28:
         5c:39:33:d0:00:ca:5d:d4:f8:35:5a:e9:86:f4:dc:4c:a3:7d:
         c2:4f:d4:8a:c2:bc:4e:bb:33:e6:89:06:fe:d9:c6:47:6b:b0:
         93:fc:3d:e1:db:b8:6d:83:3a:a3:f3:49:cb:39:70:a6:15:12:
         6e:16:dd:68:30:7f:0e:2c:db:96:31:9e:52:2e:a4:1f:51:71:
         d7:2d:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:04 2025 by rpki-client