Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
File:                     3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=
Subject key identifier:   54:CE:4A:CC:97:56:AD:CC:1B:7B:1F:47:17:79:FB:A2:80:5F:6F:D0
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       6971B4DBEDA9F3549131A98ED97EDD7234C5F4AD
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262903
IP address blocks:        177.86.104.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:71:b4:db:ed:a9:f3:54:91:31:a9:8e:d9:7e:dd:72:34:c5:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:fb:4d:d7:6d:c6:e7:8a:4a:0e:75:d9:b3:
                    39:d0:c5:bc:ad:f9:de:4a:6d:db:41:9e:e5:e0:10:
                    3f:70:3e:e5:cb:80:3f:e2:59:a5:ac:b6:16:d3:ba:
                    d4:f6:8b:21:d7:f9:5c:43:e1:13:97:8b:dd:8e:d8:
                    6f:d0:b6:29:59:09:3d:de:de:cf:94:a5:17:8f:b6:
                    13:51:74:7f:06:68:7a:a5:9e:b1:31:c2:0d:6f:f5:
                    46:3f:52:6b:de:95:ae:f3:51:da:94:3c:fb:51:a9:
                    59:87:dc:7c:1b:72:13:7d:3e:11:c1:ef:17:b7:3a:
                    1f:e9:0e:9d:8e:3b:09:50:93:c7:26:19:3d:c7:ff:
                    e7:bf:43:8b:6d:ad:a5:bf:54:ad:5a:83:f1:97:fd:
                    03:44:dc:c1:4a:57:a8:f7:6d:b0:31:ed:02:26:8a:
                    08:31:30:07:71:ae:fe:89:f4:dc:0c:7a:84:a2:61:
                    18:ab:07:1d:c5:9a:2f:d2:33:96:53:65:1c:cf:d8:
                    b0:ba:86:ca:63:ed:97:d0:5e:d3:fd:48:4c:84:68:
                    3c:28:d0:c4:c0:d1:00:d6:96:89:77:1a:c7:b5:4a:
                    b0:1e:60:b6:fa:a1:c3:0b:32:f7:cb:bc:c0:82:78:
                    c5:54:1e:b9:d5:c2:36:99:3f:f3:05:6f:75:44:b4:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CE:4A:CC:97:56:AD:CC:1B:7B:1F:47:17:79:FB:A2:80:5F:6F:D0
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:71:fd:df:22:e3:67:fa:10:54:b5:fb:23:eb:8d:45:ca:
         2b:27:06:2b:b9:3b:b5:30:90:f2:ae:48:d8:99:27:10:6c:8b:
         7b:9c:82:e8:37:cb:39:c3:e0:64:f9:92:74:76:8b:d8:c4:26:
         88:8e:6e:62:e6:3f:79:c0:e5:01:ff:52:ee:52:cf:3b:fc:ba:
         92:6c:43:83:60:f8:09:95:ec:23:3b:50:57:1d:fd:c4:2d:91:
         8c:f4:52:f2:0b:93:f9:c5:ce:3d:79:93:35:a1:27:b8:ea:00:
         d4:9f:c5:86:5a:4f:8e:42:15:1e:3a:2f:01:c0:16:d7:bc:37:
         98:df:ec:10:c7:60:83:db:71:7b:20:03:b9:5e:8a:fe:c2:cd:
         b3:ee:15:ae:81:63:07:e7:e3:b8:af:dd:43:69:f9:e0:1e:96:
         ad:28:bd:cb:ce:2c:98:f6:8c:33:82:40:c6:05:f8:e0:5f:33:
         22:af:19:57:5c:a1:0e:8e:67:8c:1d:99:fe:c5:24:0c:b0:ac:
         a8:24:2d:0c:07:fe:a9:85:2d:1e:fe:9b:13:58:67:38:2c:1e:
         4d:3d:6b:06:79:9f:ce:4e:88:fe:ad:d6:f0:3c:c6:00:6b:20:
         e4:cd:e2:90:de:e9:d4:b3:24:cc:1c:39:ad:27:7e:ab:14:d9:
         46:d6:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:53:15 2025 by rpki-client