Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32342d3234203d3e20323731373132.roa
File:                     3137372e32312e3134382e302f32342d3234203d3e20323731373132.roa (raw, json)
Hash identifier:          Aoyipwt5mVROw13vBDX3PucmMHNP2DONlQpNcf8fIUc=
Subject key identifier:   B7:D0:8E:67:74:D2:27:5F:8F:85:47:4D:7D:C8:91:BF:10:04:5D:E7
Certificate issuer:       /CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
Certificate serial:       1B220E534FE2E53C392E3343DD0C6A19D1A4829D
Authority key identifier: 56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32342d3234203d3e20323731373132.roa
Signing time:             Tue 21 Jan 2025 21:04:25 +0000
ROA not before:           Tue 21 Jan 2025 20:59:25 +0000
ROA not after:            Tue 20 Jan 2026 21:04:25 +0000
asID:                     271712
IP address blocks:        177.21.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:0e:53:4f:e2:e5:3c:39:2e:33:43:dd:0c:6a:19:d1:a4:82:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Validity
            Not Before: Jan 21 20:59:25 2025 GMT
            Not After : Jan 20 21:04:25 2026 GMT
        Subject: CN=B7D08E6774D2275F8F85474D7DC891BF10045DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:48:35:8f:65:53:d3:cb:42:f8:7b:9c:37:
                    96:77:b0:da:d4:d3:6e:0c:ee:fb:a2:6b:c9:6b:6f:
                    46:30:4e:23:eb:b1:5c:80:03:53:dd:8c:91:c0:2d:
                    29:16:38:2f:43:78:75:2e:47:31:82:2f:1f:98:a1:
                    a2:18:79:55:97:2d:79:97:25:55:96:57:f5:e0:1e:
                    84:8d:1f:ed:58:14:58:89:d1:d1:df:01:b1:5b:fa:
                    15:50:56:b0:2e:40:1c:5f:cf:04:c3:9d:a2:d9:bd:
                    e0:f5:b1:bd:d9:36:c3:58:f3:d1:d1:10:12:b7:4a:
                    b4:be:d7:de:f5:70:53:43:75:90:f5:83:d7:fb:50:
                    14:b5:83:00:b6:4c:20:83:de:c3:ef:cb:54:7c:f0:
                    c7:d6:fd:67:ce:26:d7:cc:2e:0b:0c:fa:70:d1:56:
                    f5:be:7c:ac:0f:2c:7d:a5:9f:5a:c7:0d:b3:a1:eb:
                    e3:d2:6f:74:cf:8c:27:e1:05:10:9b:7e:69:3d:03:
                    12:8c:7c:6f:2d:9b:1d:d4:0f:3d:e7:6d:3b:63:56:
                    02:f0:ed:c2:71:37:08:15:f4:31:28:4c:07:ba:db:
                    9e:df:5e:78:13:72:5d:6d:51:a6:d8:bd:50:d5:cf:
                    5a:a4:db:fd:b8:14:d3:2b:7c:a1:7b:a3:7e:e0:0e:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D0:8E:67:74:D2:27:5F:8F:85:47:4D:7D:C8:91:BF:10:04:5D:E7
            X509v3 Authority Key Identifier:
                keyid:56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134382e302f32342d3234203d3e20323731373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:bf:ad:40:41:f4:3a:10:d4:3f:08:c2:31:6c:c2:8f:e3:
         83:06:18:57:73:cc:76:c3:2e:ea:cb:d2:d3:56:93:de:ec:13:
         24:74:6d:cd:80:1c:4c:fc:d4:95:65:4b:b9:3f:b9:b5:44:bb:
         ad:ad:7a:1d:1d:0c:c7:15:c5:08:ab:0e:3f:dc:b3:77:5a:24:
         a1:d2:32:37:b2:c1:57:62:d0:5c:bb:1f:bd:c7:3c:bf:49:04:
         ad:6e:17:a6:f8:61:35:60:57:20:ff:7b:63:04:40:8b:06:54:
         35:f1:83:19:7c:48:ed:49:29:d1:bc:4a:e2:af:ce:55:24:33:
         21:ab:cd:25:a9:86:0d:f4:38:ae:d7:3f:45:09:d9:16:ff:b2:
         f3:46:ac:9c:60:bc:75:a9:81:c3:6a:a0:89:05:c8:a8:2c:76:
         39:47:c1:9f:a7:ad:36:5f:56:9b:a9:eb:b7:2a:6e:88:43:8c:
         01:12:1d:03:e9:1a:15:91:3d:06:de:f5:48:b3:5a:da:27:7a:
         f7:12:61:5f:70:57:7d:51:42:6c:0b:f1:94:25:d5:15:33:84:
         36:e9:ab:83:cd:6c:30:62:d4:d1:de:1c:f9:3d:93:41:39:62:
         6a:5f:3a:c5:54:c5:a7:aa:00:0b:2e:6e:d1:a6:b2:93:d5:88:
         60:0d:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:32:30 2025 by rpki-client