Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3134312e302f32342d3234203d3e203532393437.roa
File:                     3137372e33382e3134312e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          xUQfKzTWTtI4U/w13dQcbhzfyvJYju8+u7juvqBIN9I=
Subject key identifier:   BE:6D:2D:41:6A:43:49:B4:6D:77:B3:96:61:19:7E:97:CD:C8:78:70
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       3EB2F0245E920387628547F14E159859A4B0DB48
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3134312e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:40 +0000
ROA not before:           Mon 23 May 2022 12:40:40 +0000
ROA not after:            Mon 22 May 2023 12:45:40 +0000
asID:                     52947
IP address blocks:        177.38.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b2:f0:24:5e:92:03:87:62:85:47:f1:4e:15:98:59:a4:b0:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:40 2022 GMT
            Not After : May 22 12:45:40 2023 GMT
        Subject: CN=BE6D2D416A4349B46D77B39661197E97CDC87870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:a8:96:e8:e7:0d:b6:ee:ea:35:79:bf:3b:
                    6f:a7:c4:6d:62:5b:af:c2:d8:9c:e5:63:90:38:0e:
                    90:da:79:94:21:ff:79:56:8d:2b:92:4d:05:96:78:
                    6d:ca:3b:75:dd:d1:04:73:be:b6:90:f0:3c:9e:e7:
                    e9:1b:15:e0:95:3a:91:80:73:68:e9:c1:ea:47:5c:
                    7c:0f:cd:0c:61:93:3a:29:d5:cf:2c:5b:b3:42:59:
                    84:57:4e:53:f0:fb:b7:f8:ba:e1:a0:1b:71:3f:02:
                    68:7c:98:61:6e:f9:73:53:31:11:41:a6:f0:7a:94:
                    fa:56:53:f3:7f:1c:55:1a:50:f7:d5:03:55:99:7c:
                    b4:47:4d:27:12:ae:cf:8c:09:bd:6b:a7:93:55:58:
                    71:15:8c:c2:93:59:00:7b:8a:9c:00:64:3a:96:91:
                    bd:a2:80:42:be:4d:40:7b:83:ca:68:8a:79:70:ea:
                    4d:eb:d9:f5:34:2f:8b:66:71:61:a8:23:ce:75:95:
                    c4:3f:84:98:b0:7d:a3:2f:b8:90:47:27:72:2b:f3:
                    03:ec:12:76:71:85:54:08:14:5e:fa:92:8e:92:55:
                    a1:97:0a:7a:60:9f:dd:ee:62:5e:f1:99:6a:60:de:
                    91:d5:5b:94:44:fc:8f:37:71:30:2e:bf:81:ba:27:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:2D:41:6A:43:49:B4:6D:77:B3:96:61:19:7E:97:CD:C8:78:70
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3134312e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:f1:fd:47:6f:5f:a0:df:b8:dd:05:61:47:9b:5f:e9:0f:
         e3:5e:f6:65:1a:a5:ad:6b:5a:9c:88:aa:02:4f:2b:7c:13:57:
         f8:6b:ea:25:70:b0:ae:d8:e2:28:dc:86:36:4d:10:71:a5:c5:
         11:ba:4c:67:00:6f:0c:e7:e6:7d:4a:e3:6a:cb:7e:a4:16:36:
         78:60:71:ef:fe:89:9f:6d:34:16:26:61:49:b2:49:cf:a5:6e:
         42:76:de:ed:51:74:80:66:d8:20:af:cb:7f:9a:3c:51:43:39:
         b8:71:a5:03:0f:dc:ea:d0:ef:77:48:62:06:8b:ca:3f:6c:ea:
         a3:bc:56:0a:8e:90:33:f0:41:92:6e:ae:0f:2c:48:5f:75:f0:
         f4:3e:72:ac:f5:69:fa:58:b4:35:7f:da:44:95:b5:07:73:b9:
         96:c6:87:25:bb:0e:45:ae:ac:d1:62:a8:0e:b9:48:3b:9f:cc:
         de:2b:40:d3:41:09:0e:95:ea:ee:22:aa:f4:e4:ae:6c:e9:cb:
         12:68:bb:e5:57:33:e3:68:b2:0b:1d:1f:59:65:22:41:15:c3:
         99:96:98:94:1b:bb:47:48:c4:4d:d6:eb:44:67:d8:2c:14:f0:
         b5:8d:fb:96:cf:06:a7:a7:66:46:52:da:3f:da:95:b7:ad:b2:
         e8:bc:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:14 2025 by rpki-client