Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          yc9RkjwkcxWvdT95fxpygsrkAsvCdiAiPnMO0apDOqY=
Subject key identifier:   AF:F5:D4:B7:81:80:2F:56:94:A2:3B:5F:E1:BB:BC:81:82:E6:0E:70
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       5F4E8CBF4089959F003ECCF39E98DF504D304A09
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:33 +0000
ROA not before:           Mon 02 Dec 2024 04:37:33 +0000
ROA not after:            Mon 01 Dec 2025 04:42:33 +0000
asID:                     53038
IP address blocks:        177.154.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:8c:bf:40:89:95:9f:00:3e:cc:f3:9e:98:df:50:4d:30:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:33 2024 GMT
            Not After : Dec  1 04:42:33 2025 GMT
        Subject: CN=AFF5D4B781802F5694A23B5FE1BBBC8182E60E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:4b:02:b6:a0:bb:03:ef:ff:58:47:49:8b:
                    94:d4:d0:b8:cd:12:3b:49:5f:b6:fb:21:8b:23:1a:
                    7e:bc:b5:39:a2:55:fb:ba:19:4e:8c:6b:0c:2d:9b:
                    a3:63:c5:c3:71:72:2f:17:73:6b:db:b9:7a:07:33:
                    70:a7:2b:94:47:ad:01:c0:5f:e5:cb:45:de:34:ff:
                    04:8c:01:b5:9e:57:05:59:e5:8b:cb:b8:8b:ad:43:
                    73:41:7d:d2:29:8b:59:dd:0b:30:1d:a6:5c:b0:57:
                    44:d6:cf:15:80:11:f8:37:ef:7b:dd:ba:87:3e:a0:
                    60:4d:ed:b8:1b:50:59:99:de:7e:ed:4c:a7:f1:c6:
                    b3:d9:d3:c2:cd:4d:69:65:67:1e:c1:0a:83:74:59:
                    9e:1d:a2:c1:26:b4:c6:c4:30:4c:14:91:6c:ea:c4:
                    b6:06:8c:ca:b9:36:96:4e:ed:ee:9d:a1:55:50:fd:
                    f7:cd:a8:ca:e7:20:e1:02:d2:95:d6:aa:8d:74:0c:
                    55:cc:e6:3c:6e:66:09:de:91:f3:cc:71:16:d3:45:
                    bb:00:d6:d4:11:fa:d9:f1:94:b8:52:10:05:f1:31:
                    5e:52:65:d5:44:a6:98:8e:0f:e7:c6:be:34:87:8e:
                    c9:b8:1d:0c:a8:71:48:18:52:32:98:a0:d6:48:02:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:D4:B7:81:80:2F:56:94:A2:3B:5F:E1:BB:BC:81:82:E6:0E:70
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:fb:a4:59:50:72:12:86:fd:24:dd:b4:21:b8:5c:35:33:
         8d:d5:49:c1:c5:33:1c:de:56:7c:a4:75:4a:ba:65:8b:80:9f:
         a6:29:9e:47:1d:26:a4:1b:8d:a3:41:87:a3:d4:b5:89:29:a5:
         e0:88:84:05:d9:95:8c:c9:6e:7a:47:ed:46:a2:8a:8f:6f:7a:
         4a:1b:2c:4e:48:d9:54:e1:5f:ab:88:0f:3a:22:ba:00:b3:d8:
         1d:02:ae:56:a2:92:5f:67:ba:9b:2d:96:b7:72:a1:27:b9:49:
         f9:a4:ba:f6:46:a6:56:7b:79:36:fb:84:92:6b:7b:f2:75:fd:
         b4:44:f0:4f:68:e7:e7:c6:21:7d:89:94:6a:c9:d0:1c:78:9e:
         b4:e8:fd:b5:e3:bd:ea:3c:13:76:d9:d4:f2:65:2d:f8:42:d5:
         9d:d0:71:fb:7d:a1:db:06:c2:4e:b7:56:df:21:f2:65:83:ac:
         f1:d0:4e:22:80:7e:17:d8:f9:14:c8:9c:52:64:52:31:f9:34:
         1b:a9:7c:b0:ac:9a:47:2d:99:42:78:2f:2e:3b:80:ef:01:2c:
         9c:32:95:83:a3:bd:b5:6e:7a:d6:c9:61:c5:2e:76:26:03:c8:
         e9:13:78:69:ec:22:1a:09:bc:24:5b:13:dc:c1:94:cf:97:43:
         7d:3a:37:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:08:08 2025 by rpki-client