Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (raw, json)
Hash identifier:          +6KCUTtWtvVgNgsZbu4AMmwuu302c2jAO+kG6i/8NXg=
Subject key identifier:   31:49:DF:17:C5:2B:CB:8E:1E:A2:D7:29:90:2C:A6:B8:70:E5:46:44
Certificate issuer:       /CN=9BFFFB305308D99BB71B629A52021D536AF8164D
Certificate serial:       14502AB9DF152C5B8C346A22BDA66C5FEAF10873
Authority key identifier: 9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFFFB305308D99BB71B629A52021D536AF8164D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa
Signing time:             Mon 11 Mar 2024 17:49:20 +0000
ROA not before:           Mon 11 Mar 2024 17:44:20 +0000
ROA not after:            Mon 10 Mar 2025 17:49:20 +0000
asID:                     52947
IP address blocks:        177.38.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:2a:b9:df:15:2c:5b:8c:34:6a:22:bd:a6:6c:5f:ea:f1:08:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFFFB305308D99BB71B629A52021D536AF8164D
        Validity
            Not Before: Mar 11 17:44:20 2024 GMT
            Not After : Mar 10 17:49:20 2025 GMT
        Subject: CN=3149DF17C52BCB8E1EA2D729902CA6B870E54644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:72:19:4e:ce:53:80:55:14:2e:8d:9a:84:
                    d4:6c:c3:9c:60:f5:5b:14:12:aa:05:7f:cc:f1:c4:
                    04:dc:80:6b:63:ef:66:3f:1f:49:7f:12:1f:91:b3:
                    7d:94:54:91:52:99:31:4a:e1:43:e8:7d:8a:c3:e4:
                    d0:be:81:04:ed:b3:83:45:9f:ea:ca:c7:f7:5b:6e:
                    83:1f:e5:18:53:62:93:d3:9a:c6:d7:f7:d5:ba:36:
                    79:16:ca:35:51:d5:b2:70:5a:e9:86:94:2b:18:b6:
                    8d:45:73:7c:b4:c8:ba:f7:f8:6f:16:46:d7:45:03:
                    22:c7:09:bd:8e:12:1c:5b:75:43:21:ab:16:19:a2:
                    a6:c5:a2:15:24:09:77:44:34:8b:60:3e:4b:cb:dc:
                    5a:30:89:53:5c:8a:ff:1a:a9:f9:66:59:7a:42:91:
                    4b:51:4b:90:b2:18:cb:cb:ea:9a:19:9c:40:11:7e:
                    ed:b7:b1:c3:a3:5c:be:90:5c:57:72:d9:0b:39:d6:
                    3c:db:30:05:23:8e:d1:24:a9:53:c3:22:04:82:69:
                    ed:10:c6:e8:42:a1:0c:fc:54:06:9d:3d:51:36:ac:
                    9d:91:ab:97:47:fa:e6:cf:1d:74:12:12:f1:a5:29:
                    ed:c6:d7:16:28:3e:0d:68:27:96:42:2e:7b:2e:77:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:49:DF:17:C5:2B:CB:8E:1E:A2:D7:29:90:2C:A6:B8:70:E5:46:44
            X509v3 Authority Key Identifier:
                keyid:9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFFFB305308D99BB71B629A52021D536AF8164D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:49:24:e3:94:f7:c6:f7:75:ed:26:b4:76:a5:ce:97:25:
         7c:0a:c3:2a:9c:bf:91:f1:d0:78:a4:c2:0e:5f:22:62:28:bc:
         fe:1f:c3:30:e4:c8:ef:85:3f:07:8f:b7:85:48:eb:4a:30:b6:
         26:12:55:b1:ac:79:70:da:8a:74:bf:f3:07:f6:ed:8f:72:cc:
         a0:79:70:ea:9d:d4:fb:77:4e:c5:d6:d0:aa:c7:f7:0c:46:b2:
         ef:73:12:ba:d5:a6:d6:11:df:e7:db:f7:40:ae:c5:6d:3f:f2:
         1c:cd:4e:a2:aa:c9:6b:1b:83:44:56:40:1f:78:39:8a:f0:d8:
         ac:22:f3:52:54:03:32:34:38:c0:b1:c0:6c:7b:89:fe:b4:1e:
         6a:87:64:3d:61:90:42:5f:ec:e9:e6:fe:fb:d6:c6:07:8a:69:
         7a:50:06:8d:e2:86:19:8c:64:7b:df:c9:5d:12:8e:9d:fd:f5:
         e8:16:e9:7c:37:22:89:6e:58:d4:36:5e:85:3d:96:13:70:43:
         1b:dd:6a:b2:65:0e:fd:d6:17:be:7f:bb:5c:c5:6d:60:b2:d4:
         c7:2f:7f:d9:2c:86:6c:f3:d2:b0:88:39:41:4d:0d:00:38:f7:
         af:22:87:0e:2f:2f:c6:17:f4:25:c8:c0:72:20:db:3f:53:43:
         ec:bc:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:51 2025 by rpki-client