Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32322d3232203d3e20323731373132.roa
File:                     3137372e32312e3134382e302f32322d3232203d3e20323731373132.roa (raw, json)
Hash identifier:          Isz8xRWFvTfrqZhZpRoXXfk/iGxw70KJvON0GG8anSw=
Subject key identifier:   53:B6:A1:67:EF:CF:B1:E1:C6:16:A7:DD:AA:7B:28:93:45:73:39:5E
Certificate issuer:       /CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
Certificate serial:       7FBE745DD84908C216395DBB2EB0A7EE098C7EEC
Authority key identifier: 56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32322d3232203d3e20323731373132.roa
Signing time:             Tue 21 Jan 2025 21:04:02 +0000
ROA not before:           Tue 21 Jan 2025 20:59:02 +0000
ROA not after:            Tue 20 Jan 2026 21:04:02 +0000
asID:                     271712
IP address blocks:        177.21.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:74:5d:d8:49:08:c2:16:39:5d:bb:2e:b0:a7:ee:09:8c:7e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Validity
            Not Before: Jan 21 20:59:02 2025 GMT
            Not After : Jan 20 21:04:02 2026 GMT
        Subject: CN=53B6A167EFCFB1E1C616A7DDAA7B28934573395E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:ed:4d:02:a4:cb:f2:54:1d:7c:62:58:da:
                    42:a8:e9:6c:cf:a9:5e:e4:13:49:4e:f3:25:3b:d6:
                    7b:cf:4a:2e:6a:5c:80:3b:c9:52:a6:61:7c:fd:03:
                    77:67:a0:98:d3:f2:c4:80:c3:26:62:81:fc:85:f6:
                    ce:f5:c7:55:4d:69:d8:4d:ef:e9:95:ed:8a:6c:f4:
                    09:a3:28:1a:14:0f:74:d1:5a:8b:e7:44:5c:9e:be:
                    e6:8c:57:78:a4:0f:bd:75:86:3c:ac:71:eb:3f:0d:
                    bd:a3:74:ed:2a:e6:ef:a8:a3:9c:9e:e3:13:76:f2:
                    bb:21:34:0a:4d:b3:4e:26:88:f8:d7:45:a2:ff:c1:
                    46:26:f5:7d:45:8c:a6:ae:98:89:ae:89:07:36:06:
                    b2:ea:34:d1:bc:04:43:73:96:25:5e:28:16:a1:71:
                    00:1c:cc:eb:4a:18:af:86:c5:8f:14:e1:0b:61:d0:
                    98:9a:f9:04:e5:29:ec:70:00:61:82:a1:a3:19:74:
                    2f:14:9b:4c:ae:3e:0c:59:bd:e2:50:ef:b7:ee:c3:
                    ee:fe:44:ba:0e:bc:4e:1e:35:ec:96:c9:8b:1f:c1:
                    98:d2:bb:26:87:52:67:0b:f3:31:a0:10:a5:94:95:
                    1d:bb:9f:62:a7:a7:ee:53:19:c7:a8:3b:d7:76:26:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B6:A1:67:EF:CF:B1:E1:C6:16:A7:DD:AA:7B:28:93:45:73:39:5E
            X509v3 Authority Key Identifier:
                keyid:56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32322d3232203d3e20323731373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:93:6e:a8:57:dc:f4:44:7f:b6:c2:2a:66:fb:75:2d:6e:42:
         3c:69:77:db:41:2d:12:dc:07:d8:2f:50:19:0b:51:37:44:8b:
         a2:48:d1:fa:8b:1e:95:aa:5c:ab:8c:bf:f5:22:83:15:8f:bd:
         d0:0b:d1:6d:f1:69:a9:e2:d3:ca:de:2c:f8:42:a8:2a:d3:16:
         ce:a9:ca:e5:d0:fe:98:c4:ad:50:79:88:c7:5e:aa:05:fe:b1:
         16:1b:49:6d:17:99:d0:72:82:cd:6d:56:36:e8:d2:7e:be:56:
         60:c4:19:d6:7e:fd:d8:ef:5d:0a:2b:9e:f9:07:40:84:2e:72:
         e3:fd:3d:cd:4e:78:e3:bb:73:5e:cd:09:dd:31:fa:c5:d8:0f:
         cc:d4:ad:00:82:f9:f4:db:36:17:b0:79:fb:52:ff:40:22:d4:
         f8:d7:88:f5:f9:3e:05:17:f5:d6:48:89:b0:38:00:e1:d0:3a:
         5f:4b:77:93:e6:8a:9d:dc:36:7d:5b:e1:b2:59:37:6c:52:70:
         19:10:31:10:4c:8a:97:01:98:d2:a8:ea:b1:21:2e:2b:f3:a5:
         4c:53:b4:4b:66:42:a5:45:3c:74:83:96:51:e8:d5:e3:5b:ae:
         36:39:11:8a:82:fe:71:de:c5:4f:b7:96:61:00:4b:d2:66:7c:
         cb:78:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:30:46 2025 by rpki-client