Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
File:                     3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (raw, json)
Hash identifier:          BbjY5n398cDhCPcSMEOvuL96Io0PtmKRo5zYdRcmzhI=
Subject key identifier:   DB:1B:F3:6E:E5:62:CF:A2:3F:85:F3:C6:1A:A5:A5:5B:31:82:C8:99
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       60E7D136FD00FD68CA726320B7E5F3BA152A4A22
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
Signing time:             Thu 06 Mar 2025 14:11:07 +0000
ROA not before:           Thu 06 Mar 2025 14:06:07 +0000
ROA not after:            Thu 05 Mar 2026 14:11:07 +0000
asID:                     52998
IP address blocks:        177.53.200.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:d1:36:fd:00:fd:68:ca:72:63:20:b7:e5:f3:ba:15:2a:4a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Mar  6 14:06:07 2025 GMT
            Not After : Mar  5 14:11:07 2026 GMT
        Subject: CN=DB1BF36EE562CFA23F85F3C61AA5A55B3182C899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f6:98:2d:9f:93:7d:cd:e4:f7:c0:a9:e4:57:
                    d8:38:8e:4e:d1:d4:1b:ee:56:f9:e9:d5:6a:04:42:
                    96:c1:44:85:22:c9:22:8e:48:33:8e:aa:5a:62:ac:
                    ad:ca:eb:53:18:56:25:21:cf:6f:c0:1e:80:63:9b:
                    d7:38:ca:68:c6:6c:46:2b:76:50:c2:0d:13:64:d5:
                    8a:49:60:f5:61:de:d8:e7:5a:73:e7:a7:98:cf:97:
                    84:e4:b5:86:c4:e1:fb:55:4a:92:d4:b8:99:31:7e:
                    07:6b:39:bc:ec:4d:28:a9:8f:f8:1f:2b:79:0c:32:
                    32:d1:79:91:8a:8f:36:dd:b0:fb:d2:b7:6f:f5:07:
                    34:82:a0:f6:cc:d7:68:05:e6:5c:8e:05:a4:8b:66:
                    82:80:35:35:d8:4b:a0:fc:75:3f:86:8b:6f:60:a1:
                    3b:71:d2:0c:c6:38:77:26:04:90:55:eb:91:2b:c4:
                    cf:ea:a3:b2:22:f4:c5:4c:a6:06:8b:fc:85:f3:e8:
                    22:29:95:c6:92:e9:6d:8b:d6:8a:7e:d5:7e:f8:7c:
                    59:b4:c2:ec:f0:5f:92:cd:da:8c:d2:88:73:6d:34:
                    f9:49:4e:ce:19:c8:5e:59:f1:8b:5b:ed:43:09:d4:
                    63:d4:01:af:76:21:98:8e:9e:d5:9f:91:70:ed:ca:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:F3:6E:E5:62:CF:A2:3F:85:F3:C6:1A:A5:A5:5B:31:82:C8:99
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:a9:94:77:86:5d:4f:71:9a:16:fd:16:0e:27:9a:52:e6:
         91:f8:02:2e:2a:2b:24:34:37:b6:4b:89:5e:f4:2b:67:a1:5a:
         46:e5:f6:6d:f8:12:7a:03:5a:8f:59:52:a4:6f:8f:54:bd:2d:
         58:ba:ec:40:e9:5e:f6:d1:09:22:8f:74:3c:99:fd:54:21:a2:
         0b:92:97:e2:3b:4b:33:8c:7a:1d:e9:b8:2d:61:a1:47:15:e2:
         ea:a7:ae:9f:71:83:6f:58:6f:05:f8:16:36:c4:ee:7a:25:1f:
         3a:cf:7c:ee:dc:7c:f6:36:1a:22:de:56:d1:ef:f6:2e:3c:ee:
         29:fd:fd:5a:af:30:4e:6d:85:c7:bc:ab:9a:22:af:98:10:6c:
         b7:4c:1f:35:e8:fe:9f:8a:63:95:77:3f:b9:08:7b:dd:79:46:
         0b:de:1b:5b:ed:54:7a:73:fb:6f:0b:4c:66:69:f2:5b:6a:20:
         82:24:3e:12:52:80:cf:71:a5:05:99:73:94:2c:52:b5:1e:8c:
         0c:65:14:8a:4c:01:47:58:71:af:fc:47:72:14:6d:aa:b7:5f:
         5e:3f:98:b0:28:f7:95:a1:b6:1e:cc:98:5e:4a:d5:20:80:f3:
         96:97:26:3d:7d:53:ac:9a:87:d4:3b:03:d2:95:bd:65:c5:64:
         64:47:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:33:33 2025 by rpki-client