Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e302e302f32312d3234203d3e203532393839.roa
File:                     3137372e35332e302e302f32312d3234203d3e203532393839.roa (raw, json)
Hash identifier:          L2VqnbdPX6XaPf53l8iT7eMohNYsf2hBY5Ia8yN46/A=
Subject key identifier:   6F:7E:57:84:BF:6E:A4:16:11:AC:FE:C7:E5:47:CE:FC:18:CC:01:85
Certificate issuer:       /CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
Certificate serial:       2F58D4ECCC783733A58E37F1DFF8A2006959613A
Authority key identifier: 52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e302e302f32312d3234203d3e203532393839.roa
Signing time:             Wed 30 Mar 2022 18:00:00 +0000
ROA not before:           Wed 30 Mar 2022 17:55:00 +0000
ROA not after:            Thu 30 Mar 2023 18:00:00 +0000
asID:                     52989
IP address blocks:        177.53.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:d4:ec:cc:78:37:33:a5:8e:37:f1:df:f8:a2:00:69:59:61:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
        Validity
            Not Before: Mar 30 17:55:00 2022 GMT
            Not After : Mar 30 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e3:a9:88:89:14:5b:9f:88:77:4c:6f:08:bb:
                    d7:8c:2c:ab:54:20:1f:59:77:91:36:fa:c1:a4:e9:
                    3d:f0:c5:e5:9a:3b:4e:44:1d:43:1c:bf:6d:dc:cd:
                    c7:b2:5e:1e:8e:dc:60:f8:ce:f8:bd:a9:f4:85:6c:
                    ee:c1:10:41:5a:8d:8f:0c:49:1a:31:80:df:bf:9a:
                    9d:e7:44:43:1a:51:f9:4e:d5:bf:1a:a1:7e:d9:04:
                    8f:c9:b8:6b:1b:b3:44:0e:94:c7:fe:21:88:4a:c9:
                    f2:74:04:98:f2:cd:5f:05:11:ac:68:9e:f5:fb:5a:
                    d1:75:b6:f4:e4:3e:a0:88:be:8f:ce:fd:5c:e5:e8:
                    9d:11:c4:29:66:97:e4:46:e5:07:ee:89:37:56:28:
                    49:e5:a1:b3:1b:8a:27:5c:bc:e4:c3:59:da:2f:da:
                    1c:6e:09:9e:94:e6:76:c1:02:9f:59:17:ac:e6:ac:
                    a2:5b:a3:26:79:3d:db:34:37:07:82:16:ac:3f:14:
                    32:6e:19:7f:8b:be:57:2d:e5:84:10:86:bb:c0:54:
                    41:91:f7:13:19:4a:f8:e9:f1:5c:a5:26:00:a8:f7:
                    00:ce:50:7d:51:e0:90:e7:6a:74:97:e9:cd:ba:b3:
                    74:b4:d4:d9:b5:34:fe:d7:34:e5:9f:72:e4:7b:72:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7E:57:84:BF:6E:A4:16:11:AC:FE:C7:E5:47:CE:FC:18:CC:01:85
            X509v3 Authority Key Identifier:
                keyid:52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e302e302f32312d3234203d3e203532393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:77:d1:06:b2:a1:70:4f:46:c1:cc:99:60:a7:5c:89:aa:
         d5:f0:c4:b2:43:79:b3:5e:8e:df:9a:15:d4:e9:9c:9d:6c:30:
         d9:78:97:d6:49:8e:37:50:55:b8:77:7b:84:9e:8e:84:9d:6b:
         99:96:29:7b:1d:7e:13:4e:6c:5a:67:1e:07:6f:7e:05:c3:51:
         74:17:23:3f:32:ff:0c:75:f0:4f:27:10:c3:0d:8a:2e:65:d7:
         ef:44:e2:b0:d4:8f:00:6a:9e:9d:42:97:a1:15:e2:86:0c:0d:
         cd:6b:ef:f9:e3:56:4f:8d:35:6a:1a:ab:d4:cb:4e:37:60:ad:
         9d:13:c1:bc:0e:48:e3:0b:24:3f:8c:3c:28:a3:6e:e0:76:43:
         48:bb:bd:4e:9d:5d:94:e2:34:da:84:e2:8c:46:68:95:d0:ae:
         42:44:03:c0:65:bc:a4:95:90:48:95:3c:7e:49:3f:b7:da:40:
         b4:d1:e7:4d:cd:da:e4:20:fb:10:ce:3c:5d:bf:8b:75:63:17:
         b6:62:2b:94:86:f6:58:08:57:70:c4:b4:a4:4a:ab:39:40:42:
         da:f2:0f:06:2f:23:b1:ad:6d:c6:1f:79:85:4f:10:a2:95:fd:
         a0:c6:11:91:2e:32:59:b6:53:d8:04:c2:f8:b4:aa:4b:68:09:
         4d:d1:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:53 2025 by rpki-client