Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=
Subject key identifier:   13:EE:65:4B:01:53:0B:F3:29:A7:C9:C5:E2:47:F0:1F:38:08:77:CA
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       5910AC5E80A3CBC6E9B51A64920E942768C775BF
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262903
IP address blocks:        177.23.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:10:ac:5e:80:a3:cb:c6:e9:b5:1a:64:92:0e:94:27:68:c7:75:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:60:e4:ba:4e:58:c6:7d:94:fe:ca:ea:98:
                    0f:20:ee:41:4b:2f:4c:21:a6:66:2d:df:a9:32:72:
                    61:92:97:45:92:03:13:fc:1c:f3:4d:f4:af:e9:17:
                    03:a3:91:ab:94:2f:8d:b3:77:50:c4:65:c3:ef:58:
                    25:e3:d6:0d:ff:de:c9:49:00:cf:fd:a0:9d:03:e6:
                    6f:c1:ec:1d:6b:8f:97:e1:7e:e7:4e:85:cd:51:1d:
                    e4:58:f0:66:77:7a:98:47:39:e7:4f:45:48:34:0f:
                    cf:58:94:d3:16:0a:7f:ff:1e:16:8e:79:0f:fe:3a:
                    c5:00:59:02:ef:7c:e5:6a:01:1f:ed:27:6a:cd:d0:
                    55:7d:b2:d9:34:b1:69:14:84:59:70:97:77:c6:46:
                    1c:7b:2a:13:28:04:2f:cc:b7:e8:b8:99:09:9f:66:
                    b1:99:b1:9c:7b:49:dc:55:3b:40:74:35:e7:b5:a8:
                    3d:44:56:1b:47:9f:97:f7:53:46:8c:3f:9d:74:df:
                    d8:3f:2c:fa:ef:45:20:5b:65:d0:38:0a:86:e5:11:
                    29:18:6a:6d:f7:b8:8f:3f:99:68:65:4e:cf:aa:81:
                    85:d0:e8:20:de:67:83:c5:23:77:78:d9:5f:59:c0:
                    d1:66:5f:77:84:5a:d0:f1:3e:7b:ab:e8:63:97:53:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:65:4B:01:53:0B:F3:29:A7:C9:C5:E2:47:F0:1F:38:08:77:CA
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:db:64:59:a1:84:a7:ca:f5:41:cc:65:9e:c9:ed:96:f5:73:
         75:d1:b1:ce:75:20:a1:91:95:ae:7d:b9:47:8e:77:fc:ed:8a:
         00:9a:f5:2d:30:fb:b7:0e:f1:00:d3:b6:36:07:1e:29:46:f4:
         54:e7:76:a0:bc:21:8c:4d:39:31:57:18:f7:49:79:c4:ae:ae:
         78:ba:84:47:e8:2e:92:f0:30:e5:da:f8:ab:2d:8e:2b:e2:4f:
         b0:12:7a:ca:10:a6:06:1f:ca:cd:5f:41:fc:13:09:b2:fa:69:
         f9:67:24:7d:ef:42:32:ae:31:51:0a:3b:23:13:87:97:80:f6:
         a8:66:a3:ac:8e:c0:39:2a:c6:13:83:1c:7d:b5:5f:2a:7b:a9:
         f6:75:1c:f0:5e:3e:25:78:e7:d8:7c:61:b4:18:fa:33:6d:48:
         b0:1f:d8:a9:15:d1:ee:a8:93:ca:57:2b:70:a9:a6:80:55:4b:
         48:38:22:4f:7e:69:40:de:99:91:c5:37:c3:f6:f8:01:9b:25:
         3e:2c:58:1b:ea:6d:9f:fd:0e:5e:9a:80:25:3e:82:a3:46:cc:
         d6:11:1a:55:94:b7:71:ee:82:2e:6c:66:7f:cf:f9:59:64:cf:
         ab:37:b4:25:09:fe:5d:8a:52:57:50:50:6d:01:b3:d8:8c:11:
         0f:23:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:14:22 2025 by rpki-client