Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          4m5gIICDUFcZZPEv0CLQG1XDzwlJBaSlI/bBxaow5NY=
Subject key identifier:   B8:28:9E:1C:5D:8C:D9:D3:34:A3:E3:84:A1:4F:3F:68:34:24:CB:79
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       0FD0C6D7FBD26B173AE6A0FB78F5691B0F3DEB77
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:32 +0000
ROA not before:           Mon 02 Dec 2024 04:37:32 +0000
ROA not after:            Mon 01 Dec 2025 04:42:32 +0000
asID:                     53038
IP address blocks:        177.154.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d0:c6:d7:fb:d2:6b:17:3a:e6:a0:fb:78:f5:69:1b:0f:3d:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:32 2024 GMT
            Not After : Dec  1 04:42:32 2025 GMT
        Subject: CN=B8289E1C5D8CD9D334A3E384A14F3F683424CB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:ae:a5:77:12:c7:85:e2:62:2a:f0:1e:88:
                    b8:9b:9e:ee:2d:01:c2:f3:ed:14:b3:89:7e:c8:59:
                    bd:ce:7d:8f:20:2a:fb:d1:50:5a:6b:13:cf:dc:c8:
                    92:24:1d:d9:86:37:0f:de:b1:74:58:38:c9:ba:cc:
                    5c:fb:00:82:5b:fe:8c:43:f5:52:28:32:a2:c6:32:
                    49:71:88:d2:13:39:f6:c4:ed:42:15:8d:6b:57:80:
                    aa:64:60:34:33:19:69:75:fa:63:7a:8c:a2:a2:ff:
                    1c:01:18:0f:c6:f2:87:64:e4:6c:78:79:77:83:05:
                    c7:9e:7a:63:6e:2e:db:f4:93:df:46:1d:52:85:d6:
                    e4:19:61:0d:2f:e1:50:e7:c6:22:fd:a4:7d:c2:cb:
                    8a:15:a5:75:2b:a2:0d:20:31:4a:02:7f:7d:a5:66:
                    25:97:69:1a:46:93:78:63:4e:5c:b8:81:8b:e7:9e:
                    f6:85:c7:c9:15:e5:57:db:7c:9d:5c:4f:a1:06:85:
                    cb:6c:ce:37:1b:85:40:4b:2b:9c:a1:1e:8e:e5:21:
                    b5:89:d8:2a:3f:22:bb:01:5f:d2:d4:07:78:22:c7:
                    92:b4:c1:96:60:ad:a4:31:15:3e:72:82:9b:ce:83:
                    5b:1c:87:d6:b2:eb:2f:c1:a2:4a:16:a4:4c:f5:c8:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:9E:1C:5D:8C:D9:D3:34:A3:E3:84:A1:4F:3F:68:34:24:CB:79
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:34:3e:4d:4b:36:c3:e0:bb:5b:8b:c3:16:0f:f6:e8:9d:4d:
         a1:94:72:ac:c1:80:54:29:ad:9e:77:9d:d4:44:5e:c6:a6:56:
         39:7b:1d:39:40:bd:64:7e:7a:c2:57:d6:d8:d8:fc:c9:18:61:
         0d:7c:0e:3c:06:9c:44:90:7f:e5:a2:64:cd:a5:b5:a1:0b:8a:
         8e:8f:34:26:28:f6:3d:25:91:a1:3b:3e:2a:f6:c6:96:86:be:
         8a:c6:ef:b4:6f:2e:1c:eb:16:59:ee:5b:f7:1f:b9:06:e1:00:
         90:7f:dd:4d:e5:46:4b:c6:38:6c:7f:7a:0a:1a:bb:fa:79:14:
         9a:82:fa:46:e9:4b:b3:e4:bf:43:18:e9:d0:5d:6f:06:44:b1:
         ae:59:6f:aa:b9:ad:8f:98:ff:05:9d:04:a9:7a:3a:19:69:21:
         ae:ab:38:ca:1f:33:07:98:ec:7d:fe:49:9c:65:15:e9:22:bb:
         6b:f0:e4:47:ff:e0:99:c3:8a:0c:11:9c:79:72:f8:30:1e:03:
         ee:e5:57:ad:9b:82:87:9d:7d:83:7c:61:61:da:19:36:26:1d:
         2e:3f:1c:eb:81:b8:55:b6:51:76:23:ea:b8:e0:be:46:dc:ec:
         2e:70:88:65:f8:78:40:0c:cd:70:5a:7d:72:c9:d9:08:19:b2:
         a1:77:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:49 2025 by rpki-client