Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32312d3231203d3e203532393437.roa (raw, json)
Hash identifier:          EzliCi1UWq18/ApqKMR0dcT5Y7LQh32NTb8JmeJ85UE=
Subject key identifier:   4E:CE:92:22:24:85:12:FD:BD:64:62:7B:B2:56:F4:9E:5A:35:E9:18
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       316933BD6EAEED52B80DBD927E309C32222B731E
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:22 +0000
ROA not before:           Mon 23 May 2022 12:40:22 +0000
ROA not after:            Mon 22 May 2023 12:45:22 +0000
asID:                     52947
IP address blocks:        177.38.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:33:bd:6e:ae:ed:52:b8:0d:bd:92:7e:30:9c:32:22:2b:73:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:22 2022 GMT
            Not After : May 22 12:45:22 2023 GMT
        Subject: CN=4ECE9222248512FDBD64627BB256F49E5A35E918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:be:bf:43:2f:00:98:af:87:99:b0:3a:d9:
                    61:31:5b:2c:01:ae:54:9b:96:65:bc:3e:1c:5e:7a:
                    13:3c:55:fb:2e:29:68:2d:af:02:e1:56:bc:31:f6:
                    b7:9d:a4:4c:25:d1:7f:37:75:1c:b4:be:40:0d:5e:
                    18:47:b2:3d:36:0b:5c:1e:c9:9a:eb:26:99:52:e3:
                    e5:ef:3c:66:ba:23:28:2f:87:71:23:a4:e3:59:54:
                    47:b1:e6:ce:7a:29:e7:6e:17:1b:2a:ff:03:9d:7b:
                    55:5f:61:c6:f9:0d:6a:10:3f:b4:02:87:71:2b:41:
                    cd:29:56:4b:03:ae:a2:34:14:22:31:a9:88:0b:4d:
                    ca:2d:39:d0:ab:82:f3:83:24:63:fd:b9:4e:c0:e0:
                    80:9e:d1:0b:9d:e7:1f:6d:3b:ff:b7:d3:bb:3d:fa:
                    7b:e8:5e:f0:c6:6b:70:5e:87:96:a2:69:03:69:d0:
                    77:75:84:c0:81:10:28:36:b1:6f:b3:1d:51:15:c8:
                    be:c2:80:02:42:67:ee:e1:6f:9c:09:b9:56:68:64:
                    6c:79:35:6b:7e:d5:62:02:98:b6:44:dd:85:fe:e0:
                    a8:02:67:40:5a:87:72:d7:be:d6:fa:a5:be:b4:14:
                    59:ab:8a:07:50:b3:0c:ce:3a:d1:bd:5d:2e:d0:19:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CE:92:22:24:85:12:FD:BD:64:62:7B:B2:56:F4:9E:5A:35:E9:18
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:d7:66:10:d2:34:eb:97:a8:5b:5a:5e:d6:6f:e3:16:0f:
         45:90:eb:b9:23:5a:57:37:09:d4:17:b6:b6:aa:a2:f5:42:6a:
         29:d5:58:57:a6:77:6f:47:9a:46:0b:8d:ed:95:db:a2:f8:4c:
         81:9f:bc:37:4a:0a:63:05:7c:99:38:0b:57:74:7c:b4:45:b8:
         e5:11:3b:6b:8b:69:9e:65:c2:53:a8:7e:f9:a4:0f:a2:e1:6b:
         95:29:5d:fa:13:c7:0e:43:b8:d4:af:b0:cc:bd:79:f8:34:87:
         ca:6a:7c:0a:8f:9e:66:af:b1:91:2e:77:96:d1:b5:c2:04:0a:
         63:15:67:6d:5a:ac:ea:ba:e6:97:42:ae:dd:00:28:f9:28:c7:
         d7:fb:2a:4e:25:2f:a9:b9:51:d4:e7:45:d9:15:3d:f7:b3:cb:
         36:85:eb:fb:58:9a:d2:47:e1:2f:15:f5:fd:69:48:00:4a:71:
         db:29:76:7d:ae:e2:53:59:c6:e4:1a:f1:06:00:c1:d7:c3:d5:
         42:25:ca:93:aa:23:a5:a2:d9:ad:cb:6f:7d:b9:aa:61:c9:a5:
         7b:c8:4b:97:e7:99:6b:50:be:bf:ab:e2:1f:aa:fd:88:6d:e4:
         b1:92:2c:e3:e2:62:9f:5d:4f:e3:72:cf:10:65:ab:e3:2b:7d:
         b3:04:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:57 2025 by rpki-client