Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32312d3231203d3e20323633303834.roa
File:                     3137372e32312e35362e302f32312d3231203d3e20323633303834.roa (raw, json)
Hash identifier:          YobSzzR3e8pCmlQ5C//l/Z+eE2kkLlICHILVjxBI+vU=
Subject key identifier:   2A:CE:AD:9D:BC:AA:8F:20:01:6A:31:BB:78:A1:9F:C8:4F:F8:06:B5
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       72D1B0437829D7FBC9522C4454F6D207917B62A9
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32312d3231203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 18:21:25 +0000
ROA not before:           Wed 24 Apr 2024 18:16:25 +0000
ROA not after:            Wed 23 Apr 2025 18:21:25 +0000
asID:                     263084
IP address blocks:        177.21.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d1:b0:43:78:29:d7:fb:c9:52:2c:44:54:f6:d2:07:91:7b:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 18:16:25 2024 GMT
            Not After : Apr 23 18:21:25 2025 GMT
        Subject: CN=2ACEAD9DBCAA8F20016A31BB78A19FC84FF806B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:ca:34:38:ce:fd:03:f6:ca:b8:ad:bf:7b:
                    37:8b:66:84:4e:8c:63:55:fe:42:31:3a:0b:6c:68:
                    3d:fe:5d:eb:64:b6:67:6b:dd:d6:fb:72:9c:0d:93:
                    9e:ec:01:23:d5:be:48:39:5e:14:3e:36:e4:40:81:
                    e2:1c:ca:51:f2:8d:4e:fa:00:5d:f1:3e:a3:65:f4:
                    a1:39:77:fc:a3:44:a4:e3:b3:43:71:f8:03:c1:4e:
                    92:70:c6:76:eb:b4:f5:34:92:49:54:1d:3d:69:d4:
                    f4:7c:68:66:19:a9:ed:c6:56:87:c2:0f:f6:86:cf:
                    f7:ba:06:e6:7a:8c:52:56:cc:53:e7:18:08:f6:53:
                    6c:58:de:d1:98:26:a8:1e:f0:12:a0:ad:eb:60:0a:
                    30:35:34:03:b9:b8:a0:92:ec:e4:2e:7a:60:a7:97:
                    8d:60:d0:02:ff:23:89:25:a7:80:00:b3:e8:c6:4a:
                    58:5c:a8:9a:8b:e2:7c:24:b7:ff:18:0b:0c:6c:f2:
                    6b:e3:7d:3a:0f:96:ac:ff:98:51:9c:5c:8e:5f:74:
                    2a:8e:4f:57:44:6c:24:3a:2b:dd:28:97:1a:66:5f:
                    05:6d:f9:9a:27:7d:38:2a:1c:be:71:ab:7f:7b:6d:
                    11:b2:aa:33:35:cf:1e:1d:95:27:a9:00:cb:24:63:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:AD:9D:BC:AA:8F:20:01:6A:31:BB:78:A1:9F:C8:4F:F8:06:B5
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32312d3231203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:05:d9:ac:28:3d:97:5a:a1:fa:0a:93:74:50:86:f5:f5:
         5f:04:94:e2:62:c3:7d:63:8e:bb:60:9f:0a:ee:02:d5:73:b6:
         85:b3:eb:41:f5:41:88:ac:cc:44:f5:fa:9d:07:df:e8:d0:57:
         9c:21:cf:a6:01:63:4f:ed:c9:54:85:39:be:3c:26:dc:42:ba:
         63:8c:23:07:df:b4:44:47:53:1b:b0:95:8c:3c:6d:26:97:42:
         a2:7d:65:fa:59:fd:b2:9a:b3:39:55:be:49:f7:88:43:99:6c:
         f8:81:43:b3:99:e3:44:e7:78:0f:2b:94:b9:a0:c8:34:d0:91:
         6f:bf:b3:f0:3b:f1:16:70:a8:f1:04:17:27:79:73:ed:1f:27:
         a8:c3:4a:f7:6a:b8:16:d4:e3:6d:30:0b:18:ad:ec:df:aa:2b:
         2b:ce:1b:8e:ae:fe:be:7d:46:b4:6a:a4:a1:cf:c5:b8:a6:7f:
         6c:74:7a:84:c8:a7:ed:fd:7c:b4:2c:76:5e:d5:2c:61:c3:b9:
         a2:95:8b:95:4f:85:8d:73:4c:22:e9:5d:8f:7e:b8:65:e4:56:
         bd:47:77:cf:a2:c9:b2:a2:ab:81:df:e0:f7:d5:ef:54:30:03:
         c8:4b:1f:04:f8:30:d5:a0:52:02:29:03:af:7a:bd:08:50:42:
         12:57:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:45 2025 by rpki-client