Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=
Subject key identifier:   C4:65:3E:08:4E:CD:B3:F5:73:C3:70:6E:87:39:1F:D9:A6:CA:96:E3
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       4436762C2B4E618064BD4F72610857ECDB8C8ED3
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262903
IP address blocks:        177.23.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:76:2c:2b:4e:61:80:64:bd:4f:72:61:08:57:ec:db:8c:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:79:ae:b0:42:78:7e:16:9d:25:46:0b:d3:
                    68:07:08:30:a5:8c:6d:97:1d:78:12:20:68:09:ee:
                    1b:f3:21:ba:a4:53:72:e4:54:e1:17:a4:d1:f6:23:
                    44:c8:b1:59:24:0d:6c:44:cc:93:b8:93:34:e8:1a:
                    16:84:d9:45:86:6e:52:88:af:b7:ff:34:9b:6b:16:
                    a5:f1:12:9b:25:18:43:ee:de:1e:1c:2a:fd:c6:70:
                    7a:f2:cf:d1:5d:cb:c1:e9:d5:07:df:28:55:48:03:
                    e8:20:e7:cf:64:df:a0:36:b5:35:18:39:7d:cf:a6:
                    83:b9:d5:c5:bd:c6:38:80:62:99:14:bf:3f:17:34:
                    95:a1:f2:df:44:9e:88:54:ae:a8:ad:e3:4a:61:42:
                    ca:38:a6:72:ef:52:12:db:85:6f:ac:34:ad:25:fb:
                    27:9a:b0:26:41:13:2e:c4:13:9a:39:16:9c:6f:45:
                    ad:dc:ac:18:f0:10:dc:90:2f:92:85:55:76:6c:75:
                    46:2b:88:d6:ca:30:d2:3d:48:41:87:47:d5:59:55:
                    fe:51:33:18:73:79:84:85:47:83:8b:38:ff:e8:84:
                    ef:38:43:59:21:3b:40:32:7a:5f:70:93:15:81:eb:
                    db:1a:3b:fa:50:5d:36:a8:31:11:0e:52:3f:a0:e9:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:65:3E:08:4E:CD:B3:F5:73:C3:70:6E:87:39:1F:D9:A6:CA:96:E3
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:0f:45:4e:a7:e0:d7:f2:cf:6d:ac:1a:37:95:e4:c0:38:a7:
         60:b8:41:8e:3d:8a:36:9f:cb:1e:d5:0f:90:d1:ca:1f:7a:cf:
         e2:af:90:49:46:2d:73:98:78:ae:64:74:01:09:73:b6:b0:55:
         0c:d4:5d:19:02:a1:3d:df:ee:ca:27:60:94:b2:5d:2d:7a:4b:
         72:5c:71:32:a3:93:3f:e0:38:d1:0a:72:5d:5a:58:bf:30:e5:
         f1:b2:13:f2:42:c3:a5:fb:a4:8e:17:6c:18:53:39:57:16:bd:
         2a:c5:20:f0:a7:26:b6:88:3a:35:f0:f6:da:40:22:ee:db:06:
         fe:6f:ce:21:14:fe:61:e7:33:db:e2:f5:77:c5:13:e8:af:f2:
         c4:20:b0:9d:07:12:e2:d5:35:c8:19:91:7f:1c:e0:d0:c2:81:
         ba:e4:5a:0f:d7:1f:c7:c6:71:2f:a2:63:21:6f:8c:c5:cb:e5:
         a1:c3:87:25:42:64:c6:62:7e:e9:c1:43:7c:8d:19:0f:d0:10:
         db:a2:ee:97:d1:a9:13:9f:95:5e:0f:4f:fc:6e:ca:10:cc:2f:
         cc:97:74:48:fc:c3:2d:80:ed:32:1d:ad:31:36:3f:f0:b0:1f:
         97:8c:b8:c5:5e:07:1e:5e:43:68:fc:13:99:80:e7:c8:b7:1e:
         1a:93:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:28:31 2025 by rpki-client