Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3234203d3e203238313938.roa
File:                     3137372e35322e34382e302f32312d3234203d3e203238313938.roa (raw, json)
Hash identifier:          Srb3NTHAZZv7DOva6FSIBavYDLjPHf/zM4e4cWWVv3g=
Subject key identifier:   DD:DE:48:1D:5D:A1:DA:D0:38:F9:95:A7:DD:EE:17:D1:AA:EC:E5:66
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       547E7517ED407B72BA091240A760AC97756121B9
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:26:39 +0000
ROA not before:           Mon 21 Aug 2023 20:21:39 +0000
ROA not after:            Mon 19 Aug 2024 20:26:39 +0000
asID:                     28198
IP address blocks:        177.52.48.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7e:75:17:ed:40:7b:72:ba:09:12:40:a7:60:ac:97:75:61:21:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:21:39 2023 GMT
            Not After : Aug 19 20:26:39 2024 GMT
        Subject: CN=DDDE481D5DA1DAD038F995A7DDEE17D1AAECE566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:f9:fe:6f:03:c7:88:d2:b9:6b:26:8e:a8:
                    fa:49:57:7f:2e:41:23:6e:eb:cd:d1:90:5a:04:40:
                    e1:98:60:2e:cf:25:45:24:c4:2f:ea:b3:51:86:aa:
                    46:f0:bd:24:80:30:dc:b0:e8:d0:66:36:06:99:c4:
                    9a:2b:0f:db:15:54:45:eb:f5:96:bb:52:8a:90:10:
                    bd:c2:99:53:6c:e1:9c:72:69:24:05:d2:4f:3a:cb:
                    39:df:ad:0e:35:9e:04:ca:57:cb:47:b3:69:ec:e3:
                    85:48:b1:41:cd:35:98:94:6b:39:5e:b2:cb:11:d0:
                    60:21:17:e8:6e:f2:63:af:fa:07:02:4d:16:47:ec:
                    8a:e0:e1:50:17:c5:61:bd:e8:72:46:2d:15:03:8f:
                    fe:37:e7:ba:cb:f1:bf:52:ea:51:00:ab:36:9d:42:
                    23:26:30:b0:13:ac:0a:0e:6c:4f:31:b0:08:50:a3:
                    7f:b2:e9:2e:5b:ab:7a:a6:b2:ab:e6:55:ad:14:ad:
                    a6:a4:4e:76:96:1c:ad:6d:bd:73:f0:b2:a5:1f:b4:
                    bd:ef:a8:4a:a1:b7:0d:e8:47:e7:c5:d4:7c:7b:65:
                    9e:ce:c3:da:d3:aa:b5:9c:28:1b:40:c5:34:3f:e4:
                    03:a1:6a:5d:94:ed:36:4f:3b:21:3e:8e:c4:5a:95:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:48:1D:5D:A1:DA:D0:38:F9:95:A7:DD:EE:17:D1:AA:EC:E5:66
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:52:77:d0:e8:50:1b:88:44:8c:70:88:b1:44:28:20:8b:eb:
         71:94:0c:1e:b4:b7:fb:28:d7:f5:d7:aa:95:56:32:aa:6e:8f:
         ac:a6:4d:f6:de:40:5a:4a:e9:53:56:9c:0e:07:23:6b:5e:45:
         2d:5a:3a:0c:1e:7a:e1:14:88:23:93:7c:14:b2:87:c7:86:34:
         4b:7e:ff:62:10:b8:6e:41:ff:95:92:75:2a:0f:cf:13:70:e4:
         54:98:f0:ac:69:e8:2f:cb:d0:d5:20:0f:aa:5d:29:6e:67:21:
         69:5d:fa:08:0f:5d:35:4a:25:98:cf:f4:ac:76:ce:57:af:de:
         ab:b7:c8:1b:67:64:63:57:63:8d:61:1b:59:c4:4f:31:a4:66:
         02:f1:47:66:10:f8:da:b7:d6:2b:fd:d3:9e:11:d6:98:94:13:
         74:56:50:fb:4e:2d:e8:23:c2:11:4f:4d:6e:68:8d:e2:56:31:
         5c:d0:94:6a:61:ef:30:b7:7b:6d:60:80:f9:3f:d5:98:7c:cd:
         95:19:24:21:41:a1:f6:e7:20:b4:94:e6:a1:3d:fd:c5:da:b3:
         98:48:b4:26:7f:e8:b7:f3:f2:d3:b7:3d:0c:e2:d6:7f:de:a2:
         75:e4:2d:bf:83:6f:8b:00:cb:88:fa:40:ef:3d:31:6e:83:c2:
         ac:d5:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:25 2025 by rpki-client