Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3231203d3e203532383037.roa
File:                     3137372e35332e34302e302f32312d3231203d3e203532383037.roa (raw, json)
Hash identifier:          e/n0WW3jBpUfG0taEYapLXxMvb+gHQfPJG3iBy1BPr0=
Subject key identifier:   7D:23:D5:DB:D9:AA:5A:41:2F:1E:5D:52:F3:16:28:EA:54:E2:9D:53
Certificate issuer:       /CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Certificate serial:       3487FBE9AE19F49665A188C31350D2D2CC14A8EE
Authority key identifier: 81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3231203d3e203532383037.roa
Signing time:             Fri 23 Aug 2024 19:53:27 +0000
ROA not before:           Fri 23 Aug 2024 19:48:27 +0000
ROA not after:            Fri 22 Aug 2025 19:53:27 +0000
asID:                     52807
IP address blocks:        177.53.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:87:fb:e9:ae:19:f4:96:65:a1:88:c3:13:50:d2:d2:cc:14:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
        Validity
            Not Before: Aug 23 19:48:27 2024 GMT
            Not After : Aug 22 19:53:27 2025 GMT
        Subject: CN=7D23D5DBD9AA5A412F1E5D52F31628EA54E29D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:b4:de:87:db:c5:50:b9:82:17:43:cd:13:
                    69:d0:c1:49:ee:ff:aa:ef:ee:7e:b7:0d:5c:78:d7:
                    04:b0:63:26:8f:89:08:1f:28:8f:9d:93:06:71:ef:
                    54:4e:8b:bb:4a:7e:3d:e5:53:66:2a:11:30:83:5f:
                    70:78:6c:66:08:63:48:0c:66:5d:23:74:ca:7e:0b:
                    56:06:de:2e:b4:5c:5b:a7:71:19:a2:aa:35:c8:cf:
                    f6:cb:fb:39:0a:68:1f:7e:c7:9e:a7:ba:09:e8:1a:
                    4d:d4:94:fd:ab:c9:e7:71:68:7d:e8:d3:37:8c:77:
                    da:f8:eb:30:2a:3f:e9:80:a9:d4:0c:ce:01:ae:52:
                    00:2e:8d:a8:0c:bb:cf:7e:24:df:0d:83:ac:a0:26:
                    3e:9a:cd:29:89:8e:17:32:99:ed:5d:fb:98:d7:d1:
                    05:8c:7f:36:e9:3c:af:1b:8c:a4:9e:c6:a2:b6:71:
                    b3:e6:4f:a1:f5:0b:8f:08:4d:40:21:18:58:7a:ef:
                    41:e8:f1:88:4c:75:f9:23:aa:54:f8:23:c9:9d:c6:
                    05:73:92:d4:6e:c3:81:5d:b2:50:ae:8c:f1:e9:a9:
                    22:53:87:c9:f8:09:62:af:e5:ef:fc:78:66:1f:c8:
                    b2:fd:73:4b:31:21:c6:43:68:2f:ba:31:9a:f1:c9:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:D5:DB:D9:AA:5A:41:2F:1E:5D:52:F3:16:28:EA:54:E2:9D:53
            X509v3 Authority Key Identifier:
                keyid:81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3231203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:a9:e9:62:a4:45:ad:51:61:ab:61:45:0d:26:e8:14:20:
         53:0c:fb:7c:8e:33:83:b6:fd:23:51:ca:0d:83:e8:aa:10:ba:
         17:39:08:21:af:5a:f6:b1:a0:7c:f9:0e:45:8b:3e:b5:34:3d:
         7b:7a:b9:dc:f9:1b:6c:3b:df:a6:0b:b5:07:04:1a:f0:44:0c:
         95:32:1d:0f:d2:bf:03:e5:3c:73:14:5d:cf:a4:4b:90:d4:0f:
         75:73:0e:93:ee:1f:91:00:76:82:89:85:45:40:33:56:7f:8d:
         92:b3:6b:36:2e:1a:7b:8c:b9:04:c9:66:d2:24:37:af:e2:f8:
         16:17:df:82:6f:69:4e:f6:cd:61:23:a7:4a:aa:8b:2b:72:da:
         e1:a3:8f:9e:c9:70:12:72:3f:51:76:1f:3d:10:a6:64:43:c3:
         b3:42:57:1d:19:67:be:bb:e7:b6:8d:f7:f8:64:1d:cd:c4:94:
         8f:ce:f5:71:17:43:d6:67:e0:e0:cf:28:25:fa:b6:1c:ca:33:
         6a:dd:3d:fb:a8:08:32:1b:fe:bb:a7:12:14:d3:27:42:a3:59:
         ce:3c:fc:36:34:5c:1b:0b:be:03:35:5f:cf:38:28:9d:d0:c6:
         b6:39:13:e2:00:7a:82:93:6a:25:10:35:7c:07:ca:1d:8e:bc:
         58:95:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:48 2025 by rpki-client