Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133392e302f32342d3234203d3e203532393437.roa
File:                     3137372e33382e3133392e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          e1gWBrlH+ckPrL2MbsVIo633dKHFBKaV0T4El1tWmcc=
Subject key identifier:   EA:3E:70:E2:01:FB:69:3F:83:32:BE:D4:17:61:6C:E5:B1:E7:B9:BE
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       65D4B6A25608E074ACF1BBD3F25E28D15438C8AA
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133392e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:32 +0000
ROA not before:           Mon 23 May 2022 12:40:32 +0000
ROA not after:            Mon 22 May 2023 12:45:32 +0000
asID:                     52947
IP address blocks:        177.38.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d4:b6:a2:56:08:e0:74:ac:f1:bb:d3:f2:5e:28:d1:54:38:c8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:32 2022 GMT
            Not After : May 22 12:45:32 2023 GMT
        Subject: CN=EA3E70E201FB693F8332BED417616CE5B1E7B9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:2b:72:5c:a0:d4:f1:59:b2:05:ab:27:5c:
                    97:7e:03:73:80:99:25:0e:d1:07:74:15:e6:f2:e9:
                    bf:60:0e:5e:ee:f9:1c:50:a0:f3:16:72:7b:6b:50:
                    2d:c5:2a:06:fa:ef:19:9d:9a:8d:0d:be:5d:59:71:
                    05:47:0d:0d:d2:ed:38:bb:44:1a:44:ca:d2:41:3c:
                    7c:4d:8b:49:65:ec:d7:fd:49:e2:90:f9:cf:70:1a:
                    d1:24:7d:03:4c:1d:b4:92:3c:2e:55:ce:25:8e:c6:
                    3d:b1:f9:cd:69:30:26:38:f1:4b:6a:53:25:a3:29:
                    80:a5:69:1d:cd:2a:3d:9b:57:6f:63:2a:bb:c6:01:
                    20:5c:91:0b:02:e5:fe:d1:7b:d5:70:35:ac:4d:24:
                    6e:6c:77:ea:a8:70:e0:2d:d2:d8:29:9d:55:87:7f:
                    a2:43:29:47:82:b4:75:27:1a:44:5e:97:64:65:19:
                    d5:75:d3:a4:a3:32:da:b0:aa:5e:a5:e3:ca:81:2c:
                    f1:df:d3:f5:79:1e:8b:9f:c5:11:1e:2f:57:9b:5f:
                    fa:1b:9c:c9:d2:26:c1:80:20:89:42:24:1b:d5:5e:
                    04:f3:5a:1f:1e:bd:f7:94:84:94:5a:ef:4a:9d:fa:
                    47:96:34:f7:84:1d:98:f7:19:d4:e1:49:67:55:ff:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:70:E2:01:FB:69:3F:83:32:BE:D4:17:61:6C:E5:B1:E7:B9:BE
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133392e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:ee:9a:56:7e:87:d5:c2:68:83:e7:d4:e5:9c:f8:ee:cc:
         90:42:45:ee:2a:22:bb:41:28:e3:49:f7:b4:97:25:2b:70:4e:
         bd:1e:06:9e:2b:9c:e4:9f:b7:a5:96:5e:3b:74:2e:ce:73:fb:
         66:d0:9e:57:02:ad:33:4c:a1:6c:67:bb:68:ab:de:94:d8:99:
         08:e1:9d:67:2f:5d:6c:50:be:74:87:57:81:a3:89:13:ba:6e:
         17:d2:2b:6f:5e:af:ec:3f:0c:83:08:66:23:cb:bd:c1:07:e2:
         dd:80:f3:bb:d3:04:12:a3:30:c2:56:6e:93:44:f8:5e:3e:cb:
         a5:9f:99:68:73:84:ed:75:d6:c4:dd:c3:e6:30:e4:1a:c7:89:
         5d:43:bd:97:07:d6:de:e7:cb:25:ea:1e:48:75:b1:32:d5:ef:
         9a:ba:6f:f0:cb:a9:49:3c:f1:f8:e2:4a:47:b4:db:bf:2c:87:
         0e:08:77:77:41:6b:f9:a7:a0:48:dc:c7:59:bd:55:ca:2d:a8:
         23:7c:43:9c:48:77:30:c0:39:e0:37:52:8d:97:1b:6b:5c:1c:
         fe:92:e4:52:83:fe:a1:83:23:6f:65:62:9d:16:d7:bf:68:34:
         d0:1d:96:bf:84:a5:4e:f7:15:35:ee:c8:ec:2b:ad:23:a7:fc:
         e5:62:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:46 2025 by rpki-client