Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139382e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          DKoRTdD314tBQlloA0UHdVO3MoQcGwdDEySph2jzHiQ=
Subject key identifier:   B0:F5:AC:0E:82:C5:EA:CF:91:43:6A:D9:13:F7:11:E7:45:20:FF:34
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       47E50F1BAD0C7A2206AB71FDA20CE4858A9842AD
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:58:47 +0000
ROA not before:           Tue 11 Mar 2025 17:53:47 +0000
ROA not after:            Tue 10 Mar 2026 17:58:47 +0000
asID:                     262828
IP address blocks:        177.155.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e5:0f:1b:ad:0c:7a:22:06:ab:71:fd:a2:0c:e4:85:8a:98:42:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:53:47 2025 GMT
            Not After : Mar 10 17:58:47 2026 GMT
        Subject: CN=B0F5AC0E82C5EACF91436AD913F711E74520FF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:25:cb:d5:d9:74:61:53:25:6d:a7:ba:02:
                    0a:22:49:ec:97:36:22:79:93:3f:ba:ad:85:5d:2b:
                    21:76:b8:cb:76:49:e4:08:0c:13:ed:b6:21:a3:98:
                    10:e5:4f:6e:07:11:f2:68:73:44:15:b2:9c:e1:78:
                    bc:17:c3:34:9c:b1:aa:b8:04:5a:65:5a:0c:99:4f:
                    b7:41:a5:e1:6e:69:36:c8:40:c8:6d:ea:4d:42:4f:
                    cb:a5:0f:b4:b9:a3:cf:2d:ed:5a:c2:56:73:b6:cf:
                    62:2d:2e:65:55:79:29:35:d9:60:8a:77:9f:33:a4:
                    d0:ad:06:69:bb:00:96:d7:8c:d5:1b:32:b9:50:d5:
                    bb:c3:f8:a0:3a:b7:00:30:41:55:4e:23:73:e8:4b:
                    05:ea:d0:30:19:61:b8:19:42:87:8b:23:f5:02:84:
                    01:b1:a1:37:cd:a8:9f:f3:38:6a:d1:69:c3:ff:f0:
                    e4:f8:6e:56:20:4d:73:44:26:67:ee:f2:26:d3:c8:
                    a9:98:9a:c5:a7:33:c3:f4:d3:79:72:a1:cf:dc:20:
                    d5:74:28:47:87:84:1b:ea:b7:07:2a:fa:c3:04:d4:
                    7b:3b:b8:d3:49:b8:23:95:11:47:44:57:01:f2:0f:
                    0d:80:03:f0:fa:94:77:46:d0:6a:9a:88:88:80:88:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:AC:0E:82:C5:EA:CF:91:43:6A:D9:13:F7:11:E7:45:20:FF:34
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:99:d2:e0:ac:c9:1b:9a:14:f1:c4:c2:23:de:b2:9a:e2:
         7b:ec:bf:b4:8f:6f:d3:26:a4:75:12:fe:b5:5d:af:74:b1:2a:
         0d:8e:fd:65:36:fc:27:b6:17:29:4a:af:7c:5f:aa:49:8c:9a:
         9c:cc:f6:da:12:3e:d2:72:1d:ed:bc:bf:28:c1:78:0c:03:b5:
         8a:88:c7:e4:87:ba:b1:d5:81:ab:89:97:00:65:83:9e:c4:99:
         aa:ea:79:c3:89:cd:19:68:98:6a:3a:b2:1d:18:6e:7d:5e:72:
         fe:51:a5:3a:f9:69:6b:38:e7:7d:d9:18:3e:e3:a5:34:76:87:
         f3:08:20:a1:a5:11:3d:51:50:a4:0f:a5:ad:b4:3c:45:95:18:
         87:a2:a2:21:19:e4:30:69:6f:2d:db:d3:c8:e7:2c:89:0b:a8:
         80:d8:bb:2d:f0:26:89:0a:03:51:01:7f:77:0f:9f:84:35:2f:
         d4:db:74:78:10:f4:a9:d5:66:0e:c1:75:88:15:63:c7:51:4f:
         cd:32:8b:e2:76:69:04:b3:1b:62:5a:ec:83:37:87:dd:51:94:
         1f:ab:e6:b0:84:56:c8:d4:d0:1e:7d:dd:3f:51:b5:6e:ce:3c:
         d2:01:b0:47:b9:72:fa:7e:a6:a7:6c:ab:7f:9a:c5:24:7c:70:
         0e:96:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:20 2025 by rpki-client