Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3135302e302f32332d3233203d3e20323731373132.roa
File:                     3137372e32312e3135302e302f32332d3233203d3e20323731373132.roa (raw, json)
Hash identifier:          6xhRwh97x2vd1U7Le1osB7OdkGV8IKTp0JyC2dUfSmA=
Subject key identifier:   47:B7:33:A1:31:D9:F0:1A:E5:15:0C:21:DF:54:93:A7:60:07:FA:C5
Certificate issuer:       /CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
Certificate serial:       4C4002D38EA6FD5F37FACFEE139E2C2B64DE043C
Authority key identifier: 56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3135302e302f32332d3233203d3e20323731373132.roa
Signing time:             Tue 21 Jan 2025 21:04:32 +0000
ROA not before:           Tue 21 Jan 2025 20:59:32 +0000
ROA not after:            Tue 20 Jan 2026 21:04:32 +0000
asID:                     271712
IP address blocks:        177.21.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:02:d3:8e:a6:fd:5f:37:fa:cf:ee:13:9e:2c:2b:64:de:04:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Validity
            Not Before: Jan 21 20:59:32 2025 GMT
            Not After : Jan 20 21:04:32 2026 GMT
        Subject: CN=47B733A131D9F01AE5150C21DF5493A76007FAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:83:6d:e2:2a:c3:82:51:2b:5e:31:f2:33:
                    9e:dd:81:e4:14:0c:f8:38:96:a4:ab:3e:d7:26:e2:
                    47:fe:1c:22:a5:d7:86:a3:52:16:56:17:d5:ff:46:
                    e4:4a:05:92:6f:90:7c:49:64:2c:d0:3d:69:97:73:
                    23:86:94:fd:e4:c7:b9:fc:52:80:5c:c8:c4:4a:87:
                    45:14:54:d9:5a:85:78:42:bf:72:0b:0e:bc:98:7e:
                    a8:b1:a9:d6:40:06:da:9d:49:97:06:26:28:ef:e4:
                    e0:29:fe:9f:65:4c:99:3f:2f:bb:75:d2:c5:e3:45:
                    1e:d8:4f:87:79:92:ed:0d:16:44:5f:01:9d:62:fd:
                    3f:b0:f6:bf:b8:51:38:7a:0b:b7:0b:a4:48:9b:bf:
                    90:24:4d:77:47:07:27:34:e6:1c:7a:e3:bc:4c:03:
                    6c:df:df:9a:d9:9f:55:82:5c:f0:d9:65:44:ea:db:
                    f5:f4:8f:b5:4b:85:0b:8d:4a:e5:d7:92:db:b6:e4:
                    26:83:f5:2c:77:72:34:d3:4a:90:79:17:a0:2e:1c:
                    f5:95:48:dc:68:be:ab:23:d9:a6:7d:05:81:8e:8e:
                    a1:8d:26:11:c8:f2:9e:21:45:8b:2e:65:29:7c:91:
                    90:a3:39:b7:33:b5:b9:98:77:62:c1:d2:71:e9:c4:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:33:A1:31:D9:F0:1A:E5:15:0C:21:DF:54:93:A7:60:07:FA:C5
            X509v3 Authority Key Identifier:
                keyid:56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/3137372e32312e3135302e302f32332d3233203d3e20323731373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:58:f0:b0:bd:55:47:24:c5:17:f8:ed:7c:9d:23:80:df:02:
         fb:bf:1e:64:7c:eb:c0:6b:7a:c3:2b:75:de:90:61:a5:13:e1:
         f5:e8:d3:cd:9a:bb:38:a2:b3:78:f2:93:e8:db:01:71:1a:89:
         f2:2c:78:6d:94:49:b7:09:ad:a4:95:36:7e:51:10:3f:a2:db:
         d7:83:85:c9:0f:a4:42:f6:3b:77:f5:a6:96:08:94:21:29:14:
         90:93:0d:07:58:ef:76:37:a0:bb:0b:4f:ec:70:07:97:64:a0:
         03:3c:9b:04:b3:7b:37:6e:d3:b0:c4:ef:99:e6:b4:7d:49:41:
         6c:01:54:3c:03:b7:c9:7a:92:cd:bd:b0:55:d9:1e:86:b4:21:
         f6:db:ed:e8:8b:15:77:36:41:02:67:f7:fb:7e:15:5e:22:ff:
         58:dc:65:57:be:d1:28:5f:55:73:e6:a8:8f:48:ce:c0:fe:74:
         d2:1b:96:ed:1e:2d:f0:b7:3f:88:a4:2c:da:8e:b2:b7:81:ab:
         2f:9f:72:3b:43:c0:51:ff:b0:27:7b:55:69:b6:02:b2:df:60:
         17:35:9d:cf:8c:d6:a7:d9:08:dc:fc:21:b0:85:aa:89:39:d6:
         81:cb:a9:79:51:d9:e3:98:d9:f4:07:84:22:f9:b7:53:71:ac:
         e8:76:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:30:19 2025 by rpki-client