Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (raw, json)
Hash identifier:          J2rq3iD4wUQctMAI3iDXds2nXl1856vb3384ctcsjZo=
Subject key identifier:   20:4A:35:AB:C0:3E:01:22:E7:1F:D5:DF:78:52:DD:9D:22:BB:FB:EF
Certificate issuer:       /CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
Certificate serial:       32B2E2E59A7EAEF6490C60557EAB4279E1495FA1
Authority key identifier: 5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
Signing time:             Tue 20 Aug 2024 12:18:59 +0000
ROA not before:           Tue 20 Aug 2024 12:13:59 +0000
ROA not after:            Tue 19 Aug 2025 12:18:59 +0000
asID:                     52932
IP address blocks:        177.185.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:e2:e5:9a:7e:ae:f6:49:0c:60:55:7e:ab:42:79:e1:49:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
        Validity
            Not Before: Aug 20 12:13:59 2024 GMT
            Not After : Aug 19 12:18:59 2025 GMT
        Subject: CN=204A35ABC03E0122E71FD5DF7852DD9D22BBFBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:f8:a9:66:e9:5f:52:0b:36:1b:31:f0:9f:
                    e7:04:b9:d1:6e:5c:36:41:62:1b:44:36:89:9a:1c:
                    2b:e3:3c:8c:01:2e:bf:72:cf:8e:61:e8:4c:98:2b:
                    58:0b:22:83:9e:b0:78:98:0a:7c:5d:9f:9f:e5:c9:
                    1d:0f:9f:d6:5a:f1:2f:c7:66:a1:64:2c:d5:f1:c4:
                    1c:a2:89:6d:75:33:3c:e2:32:9c:7e:7a:d0:b5:bd:
                    49:16:fb:43:e1:40:f7:1f:8a:7a:09:77:8a:9c:85:
                    2c:5a:05:a0:90:36:20:0d:b5:ec:2e:1d:6f:f4:ba:
                    a4:ba:03:88:8a:da:77:0e:ef:90:39:76:c2:51:38:
                    5b:f2:ea:3f:5b:27:bb:84:8a:1b:d1:f2:21:85:47:
                    56:70:56:e0:77:de:a7:60:3d:d3:63:3a:31:b0:66:
                    1c:1f:c1:2e:45:a9:e6:86:83:c0:c2:c1:61:17:0e:
                    e4:14:7b:0b:3f:80:cf:75:89:8f:e4:21:c5:ee:51:
                    a0:8f:70:72:0d:a5:73:f6:2d:c5:77:27:e0:c4:db:
                    f2:da:7e:ea:e8:31:06:04:41:a0:ae:30:5f:0d:58:
                    1e:17:2a:5b:26:21:95:f8:3d:63:b7:bb:5d:5c:52:
                    a6:2b:15:4a:f3:8e:83:bc:d8:9c:8a:19:22:51:00:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:35:AB:C0:3E:01:22:E7:1F:D5:DF:78:52:DD:9D:22:BB:FB:EF
            X509v3 Authority Key Identifier:
                keyid:5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:36:4e:9d:94:45:80:f9:24:bf:7a:ec:7a:63:22:26:bc:a4:
         d0:a6:f4:3e:cb:2f:23:ad:4a:53:74:fc:d6:26:c8:62:a6:a0:
         17:92:23:2e:e7:be:fc:11:44:3b:d7:b5:cb:39:6b:3b:be:6c:
         b8:4a:9e:ed:09:7e:ce:e4:17:43:0a:d9:77:14:c4:a3:85:d6:
         7c:b0:0a:b0:53:d0:ef:67:73:0a:1b:24:a3:6e:27:16:b0:e9:
         c8:fa:86:22:ab:d5:43:f6:77:07:0e:cc:3f:dc:25:76:0f:6b:
         a7:72:b3:2b:06:cc:db:07:59:4d:2a:6a:e0:10:2f:3a:69:3e:
         99:5a:1e:8a:f8:f9:8d:b8:1b:82:28:97:5f:13:93:e3:4f:e3:
         3d:ee:5e:98:35:f7:e6:31:68:e1:49:c0:93:fd:0a:13:4f:bc:
         ec:e2:e3:cf:79:3b:e6:0a:81:80:f0:9f:42:d2:0c:cf:48:40:
         71:48:7a:45:d1:5d:6b:cf:69:70:6d:91:e9:ab:91:35:ca:91:
         fa:5c:64:e7:7f:04:ee:f9:d4:3f:ea:73:0b:52:a4:8c:7a:24:
         74:28:51:f1:ed:5f:06:80:2b:f0:6d:d5:39:6b:c0:6a:5b:f8:
         d0:c7:0b:f1:90:17:30:6b:fe:a2:8d:a9:ee:16:47:5f:c6:74:
         10:30:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:07 2025 by rpki-client