Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/3137372e35322e3139322e302f32312d3234203d3e20323632343530.roa
File:                     3137372e35322e3139322e302f32312d3234203d3e20323632343530.roa (raw, json)
Hash identifier:          jgRu4jxXmSoDoYuyTBSCDTl6RbgsJ5X3WhszTqwwqe0=
Subject key identifier:   DC:B1:7D:FE:86:B4:76:22:BC:93:F5:47:E6:5F:2C:2E:57:D2:8C:13
Certificate issuer:       /CN=51D461C8BCBD1444B3B937F71C5F29B600836A17
Certificate serial:       2C40765AE4A80534B8B5A75862A737B94A946651
Authority key identifier: 51:D4:61:C8:BC:BD:14:44:B3:B9:37:F7:1C:5F:29:B6:00:83:6A:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/3137372e35322e3139322e302f32312d3234203d3e20323632343530.roa
Signing time:             Tue 23 Jan 2024 14:47:35 +0000
ROA not before:           Tue 23 Jan 2024 14:42:35 +0000
ROA not after:            Tue 21 Jan 2025 14:47:35 +0000
asID:                     262450
IP address blocks:        177.52.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:40:76:5a:e4:a8:05:34:b8:b5:a7:58:62:a7:37:b9:4a:94:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D461C8BCBD1444B3B937F71C5F29B600836A17
        Validity
            Not Before: Jan 23 14:42:35 2024 GMT
            Not After : Jan 21 14:47:35 2025 GMT
        Subject: CN=DCB17DFE86B47622BC93F547E65F2C2E57D28C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:bf:aa:5c:4b:9e:5b:53:52:34:7c:cc:72:
                    a6:4a:e4:ce:04:9d:78:c6:66:43:0f:d9:fe:a6:9c:
                    c8:39:81:b5:c1:8b:af:3f:8f:ab:d6:54:97:9e:cf:
                    8b:9f:f6:3e:67:14:88:46:98:d2:65:0d:41:57:d6:
                    18:26:69:87:90:9d:23:a6:af:0d:0b:5f:7d:4f:c7:
                    85:10:91:17:1e:5e:4c:14:91:75:2a:69:5f:b2:cc:
                    8e:ff:6d:b2:48:81:a0:72:f5:d3:3e:ae:00:c2:3e:
                    93:87:74:72:f3:2e:e3:a8:bb:b3:a9:c8:2c:3a:18:
                    59:c7:b3:8d:91:a8:71:77:63:17:f8:ef:0b:2d:d4:
                    05:f0:5a:a1:12:2d:03:d5:6d:9f:49:9a:7c:38:92:
                    ea:60:8c:bd:9c:55:98:f4:72:d4:b9:f1:e4:e7:cd:
                    86:5c:4b:79:fd:46:44:37:e7:07:5f:3f:b1:0f:74:
                    64:58:1a:43:82:a4:52:d7:23:f9:c3:1c:ca:c3:65:
                    a9:b3:55:73:c6:81:e2:82:73:76:68:d9:d1:63:f8:
                    2d:a2:99:ef:13:c2:03:ac:1a:ba:36:53:1b:8f:4f:
                    72:06:c7:dc:98:e8:72:24:c0:aa:50:eb:b4:67:83:
                    bb:85:0a:5e:45:ea:a5:f5:30:1e:da:ac:8b:9e:a0:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:7D:FE:86:B4:76:22:BC:93:F5:47:E6:5F:2C:2E:57:D2:8C:13
            X509v3 Authority Key Identifier:
                keyid:51:D4:61:C8:BC:BD:14:44:B3:B9:37:F7:1C:5F:29:B6:00:83:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/3137372e35322e3139322e302f32312d3234203d3e20323632343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:16:95:e7:04:22:b1:51:9d:a3:18:9c:5e:24:e6:05:a2:9a:
         3a:62:8d:d9:95:43:0f:ab:e6:82:fb:64:51:e8:64:f6:56:d2:
         f7:4c:f6:e6:91:80:19:c5:41:83:bb:c8:7c:9b:b9:35:1a:f1:
         62:8b:ab:6e:dd:c3:65:74:91:f4:8f:37:59:e9:4b:33:48:17:
         71:2f:5f:95:a6:88:88:2c:53:42:5a:c0:02:83:6e:49:3b:20:
         f6:3d:6e:17:57:2b:76:86:06:23:d6:6d:55:3a:b6:0f:04:99:
         eb:90:14:56:54:5f:2e:ac:59:c4:e4:dc:0d:cb:f2:ad:74:f5:
         58:e9:45:5a:a7:89:43:3b:4f:54:68:0a:47:b4:10:a2:89:30:
         d8:f6:83:61:2b:d0:7b:a0:c6:2b:4a:3f:0c:8d:90:7f:53:98:
         e5:34:57:d5:44:98:55:4e:81:ed:94:d0:2b:75:af:35:39:be:
         55:2d:90:b4:bd:58:f7:3a:a4:ca:dc:73:38:15:15:3e:7c:19:
         cc:76:99:1a:2d:50:0f:de:c6:93:e2:26:a1:a4:27:fa:a8:c5:
         88:3a:26:f2:71:cb:e1:be:5c:68:57:c6:fb:62:ed:fb:ae:95:
         c1:a2:97:1d:87:e4:86:7e:3e:e9:d2:d4:33:fb:4b:37:9f:91:
         2a:8b:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:58 2025 by rpki-client