Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134392e302f32342d3234203d3e20323731373132.roa
File:                     3137372e32312e3134392e302f32342d3234203d3e20323731373132.roa (raw, json)
Hash identifier:          hS8FXnrWrNFS5ZvLNlxUUEJ64wKSWSXIJJC/KZSB5IU=
Subject key identifier:   0B:23:82:F1:45:FB:E9:95:FC:BF:AE:DA:F8:79:8B:E4:87:8C:A7:0C
Certificate issuer:       /CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
Certificate serial:       59E5F419527D621E846E9389711FDFBF6CA94FD2
Authority key identifier: 56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134392e302f32342d3234203d3e20323731373132.roa
Signing time:             Tue 21 Jan 2025 21:04:29 +0000
ROA not before:           Tue 21 Jan 2025 20:59:29 +0000
ROA not after:            Tue 20 Jan 2026 21:04:29 +0000
asID:                     271712
IP address blocks:        177.21.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:f4:19:52:7d:62:1e:84:6e:93:89:71:1f:df:bf:6c:a9:4f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Validity
            Not Before: Jan 21 20:59:29 2025 GMT
            Not After : Jan 20 21:04:29 2026 GMT
        Subject: CN=0B2382F145FBE995FCBFAEDAF8798BE4878CA70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:a7:00:4b:19:6c:3b:2d:a8:8b:73:d3:0d:
                    34:27:58:31:a0:24:3c:7e:87:d0:1b:be:ed:1f:2a:
                    f2:3e:2f:fd:1a:7c:76:e8:99:cc:20:27:18:af:ef:
                    4a:8f:13:e0:f2:be:50:61:bf:47:b8:29:f9:8d:ab:
                    ae:92:fa:56:29:ad:a1:7c:a4:ff:f3:14:5c:5c:1b:
                    90:7c:2f:5a:f0:df:b5:12:26:55:cc:d0:7b:d2:53:
                    35:1d:88:25:f0:03:c3:32:35:65:52:80:76:1d:e0:
                    2f:be:00:49:19:b7:b5:22:50:50:15:26:45:0a:35:
                    f2:b7:a3:c1:7b:1c:b9:b9:0e:d0:e0:51:13:eb:2a:
                    cd:c8:86:2d:d3:6f:6f:75:7d:21:5d:19:1f:be:36:
                    df:01:b3:42:82:96:4d:ac:80:89:0b:84:82:81:63:
                    ae:81:af:87:ec:80:63:3b:d5:2d:51:44:36:72:5b:
                    0a:a3:83:1b:f7:d5:5e:dc:42:0a:d9:4b:0f:49:35:
                    ab:50:b1:d2:49:20:28:30:4e:88:cf:ae:ff:0c:86:
                    b6:c2:de:e4:06:c6:69:d5:2e:90:94:eb:ac:db:57:
                    53:db:26:bd:1a:e5:9a:b1:74:94:82:ca:df:5f:e1:
                    4c:8f:2c:91:89:1b:20:a1:d1:e1:56:09:e0:5a:50:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:82:F1:45:FB:E9:95:FC:BF:AE:DA:F8:79:8B:E4:87:8C:A7:0C
            X509v3 Authority Key Identifier:
                keyid:56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3134392e302f32342d3234203d3e20323731373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:f2:2f:5d:2a:0a:2d:4a:a1:72:2b:68:d3:ad:15:79:22:
         a7:e7:ce:e4:79:38:57:36:a3:61:c6:96:03:96:ac:1d:ff:99:
         ef:cf:19:d5:a3:90:48:67:e3:88:85:13:49:a0:a7:60:6d:86:
         cf:5f:89:dc:6a:0c:9a:24:b2:eb:38:45:2c:56:25:9a:b3:eb:
         27:6e:6d:46:e7:0c:0d:e1:b0:5e:69:20:f0:6c:ad:25:e0:50:
         c0:f8:9a:2f:17:b5:fe:27:4c:08:fd:fc:82:e5:df:79:bb:0e:
         1d:99:07:e0:7d:7d:01:4a:1f:42:cb:96:d9:ee:a0:61:91:94:
         b1:fc:39:50:5d:12:60:5f:b6:dd:31:0d:ac:0d:9d:e3:7c:00:
         c9:a8:0d:98:b3:04:1d:f6:f9:6f:a1:cf:15:a6:df:e3:a6:72:
         b3:e6:b7:7f:6d:cd:0d:4b:9a:53:25:7a:e4:a7:3d:1f:ea:88:
         80:36:ab:c0:85:bb:85:a9:4b:93:68:79:78:b3:21:e2:3c:50:
         81:b9:eb:10:56:db:96:a4:65:d0:06:b7:91:3c:99:82:b0:1c:
         82:08:2d:db:bf:1a:27:c8:32:0e:d2:a9:8c:bf:5d:f8:98:7c:
         a0:08:bc:1e:6f:71:1a:5d:c3:1b:60:d3:0f:b5:4f:eb:17:dd:
         47:89:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:32:59 2025 by rpki-client