Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          freEuOFBWPB5xZvIg3sTom7j3kDQO8jNuB01q03kr2A=
Subject key identifier:   98:C1:F4:5B:21:54:34:A2:61:CD:EF:DA:7C:5D:61:FB:15:2F:7E:06
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       1C79974E914B14C798EF72D3010C32571FF4620D
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:36 +0000
ROA not before:           Mon 02 Dec 2024 04:37:36 +0000
ROA not after:            Mon 01 Dec 2025 04:42:36 +0000
asID:                     53038
IP address blocks:        177.154.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:79:97:4e:91:4b:14:c7:98:ef:72:d3:01:0c:32:57:1f:f4:62:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:36 2024 GMT
            Not After : Dec  1 04:42:36 2025 GMT
        Subject: CN=98C1F45B215434A261CDEFDA7C5D61FB152F7E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:63:26:b9:b1:aa:55:be:27:56:db:e3:4d:
                    2d:2a:6d:7f:be:f4:ce:9e:8c:c1:29:3a:41:9b:03:
                    d2:f0:43:81:a1:f2:e9:b5:58:ac:e7:67:33:cb:78:
                    58:07:66:6a:a1:5a:6a:7e:ad:53:81:75:70:cf:5f:
                    f5:0e:a2:3b:5d:7a:a8:05:ce:14:e7:49:4f:98:01:
                    7f:f3:aa:f7:3e:53:d7:d4:bf:7e:f3:49:ab:b6:ea:
                    de:84:09:13:e9:b7:62:ed:17:b6:7e:0d:c4:11:c1:
                    b9:56:82:83:ed:ef:a2:3c:9b:dc:8b:ad:9a:76:de:
                    1b:31:d3:a2:b5:33:49:87:55:24:38:05:20:bb:c1:
                    04:ec:9b:b7:41:6d:87:f9:f3:b8:f7:4f:30:d2:fc:
                    c8:51:d9:83:99:ed:43:27:46:fb:48:0d:06:62:8a:
                    e6:46:72:c1:40:30:df:de:c0:a2:ea:58:f6:49:38:
                    1a:11:93:cd:8a:69:46:68:4f:09:7f:b9:40:a4:32:
                    50:9e:4a:28:ab:e9:0f:71:1b:25:96:aa:b6:25:16:
                    54:7d:29:27:7e:9d:2f:90:34:bd:e0:57:9d:af:88:
                    45:a0:89:ba:ab:88:bc:55:29:b9:c9:ad:8e:75:8f:
                    d2:df:1f:1b:aa:6b:6a:90:dd:70:29:7b:64:b3:10:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:F4:5B:21:54:34:A2:61:CD:EF:DA:7C:5D:61:FB:15:2F:7E:06
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:c7:eb:5d:4a:7b:72:1c:80:d5:e4:4d:94:89:28:06:f2:
         37:fd:d5:0b:82:49:53:67:dc:fc:c5:a2:52:6b:08:4a:10:cc:
         71:4d:91:c0:a1:d8:9c:9d:12:a1:91:f0:0b:dc:a8:9a:ad:a4:
         b8:7d:41:3b:e8:fa:e8:6e:d7:3c:9f:db:26:47:26:64:6f:80:
         59:ce:ae:d4:88:a8:76:f5:42:9b:be:80:3e:64:81:5f:95:1f:
         9f:68:92:f8:b4:e8:34:ea:dd:60:f1:51:f9:77:ef:f1:c1:18:
         d2:3d:73:11:f9:d3:ba:20:b0:ce:45:88:d8:8b:6f:2c:d3:54:
         87:79:de:77:99:da:f3:68:12:53:f8:00:4f:f4:44:1a:f4:00:
         25:1c:7d:e1:e6:fa:09:2b:23:c8:20:97:76:62:bd:a6:d9:92:
         3b:15:fa:db:14:de:7c:e0:dc:5d:ca:ce:e4:af:0a:12:15:67:
         3c:51:57:85:c9:37:ee:1d:25:a2:55:72:69:06:6b:1b:58:b3:
         d8:7a:31:a7:1a:6b:86:bd:6e:c2:10:72:06:43:82:48:43:3f:
         8f:59:4a:ed:e4:26:3d:07:a1:fe:d1:ba:9b:a1:44:2e:a5:b4:
         1f:28:7d:5e:ae:05:2d:84:dd:9b:c3:fe:94:b6:3c:56:5f:6f:
         0c:3d:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:14 2025 by rpki-client