Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa (raw, json)
Hash identifier:          bTmgtFAw6moeu0nUhy04j8vq1tsnmADL5Ag1C7JxMi8=
Subject key identifier:   2D:48:0C:D1:42:73:6D:E0:2C:BC:84:F0:27:D2:9F:36:3C:F7:10:48
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       1C209F8955B8282B0BF9C05B3216388E21B14D5C
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:17 +0000
ROA not before:           Sat 15 Feb 2025 15:38:17 +0000
ROA not after:            Sat 14 Feb 2026 15:43:17 +0000
asID:                     262478
IP address blocks:        177.47.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:9f:89:55:b8:28:2b:0b:f9:c0:5b:32:16:38:8e:21:b1:4d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:17 2025 GMT
            Not After : Feb 14 15:43:17 2026 GMT
        Subject: CN=2D480CD142736DE02CBC84F027D29F363CF71048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:97:f9:4c:67:08:7f:a2:d6:92:1c:3b:05:
                    19:1a:53:9f:3c:fe:2f:8d:32:fa:db:60:71:e7:c3:
                    4a:39:a6:96:38:3c:a0:3f:85:a1:15:91:d7:80:7b:
                    6f:97:ea:38:9d:67:50:09:c2:f1:c3:f9:63:0f:85:
                    64:03:c5:cb:3e:b9:aa:0a:e0:43:4c:eb:d9:ba:78:
                    b4:ce:cd:8b:fd:15:bc:00:94:99:f7:0c:c3:41:8a:
                    a4:e2:14:29:59:b8:4a:e3:81:39:d4:23:6b:8d:26:
                    99:0f:b0:68:00:c3:09:72:ca:77:17:5e:19:23:ef:
                    f5:df:b3:21:97:ce:c9:ef:a8:e0:5f:31:31:18:fd:
                    0b:ba:12:86:f4:32:29:4b:61:ea:7c:03:37:dd:0f:
                    0b:55:6e:13:3f:29:f8:32:b7:17:91:40:d9:af:ed:
                    ee:6e:11:e2:6b:6b:cd:6b:c0:07:cc:b4:a0:09:98:
                    c8:51:49:5e:e3:0c:e2:a7:cf:77:ae:b2:35:17:f4:
                    ee:89:47:4e:d6:3b:e9:cd:82:73:98:09:29:48:2b:
                    fc:ee:06:10:46:3c:95:44:9d:aa:ca:92:77:89:aa:
                    c4:9d:e8:4a:3b:97:fa:56:28:07:a9:87:da:14:86:
                    80:07:c5:5e:d9:2d:01:8b:3d:2b:b4:88:0a:0d:92:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:0C:D1:42:73:6D:E0:2C:BC:84:F0:27:D2:9F:36:3C:F7:10:48
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:63:03:cd:ba:0f:c3:e6:5e:25:e5:00:96:1d:d5:0c:fd:
         cd:c7:ee:08:d7:9d:b6:6b:ea:53:ef:11:23:b5:9a:9c:e2:97:
         5e:d1:00:9f:8e:a6:6c:59:8d:ca:61:ec:64:4d:1d:92:50:97:
         06:58:07:35:11:84:44:95:b1:da:5d:ca:6c:2b:c7:58:4a:ef:
         6d:9d:a2:8e:03:72:e7:d0:e3:ad:52:79:9a:19:c4:a6:94:26:
         72:ba:f9:4f:3c:0a:5e:ce:0e:26:83:71:c7:0c:4d:55:ee:8d:
         8b:66:19:aa:bd:2a:62:a8:d3:b3:a1:70:3d:72:8e:9e:a4:55:
         c8:1c:26:9e:fb:42:ec:61:74:96:08:e4:62:f0:1a:0c:bf:37:
         bb:75:35:4d:ac:a3:88:8d:43:38:16:e9:8e:59:79:d4:f6:db:
         c7:af:4e:27:ca:7c:3b:24:47:a5:0c:9b:3f:2f:b0:9c:fe:ed:
         12:36:ff:09:22:25:05:7d:fe:2c:43:b6:b8:45:c2:2e:75:6a:
         7d:ce:77:35:34:a0:e4:be:09:ee:e7:3e:d5:54:e3:e8:3d:fc:
         3a:5a:0c:5d:0a:63:4b:00:42:5c:1a:11:02:28:6b:31:63:4a:
         5d:c8:c8:43:eb:92:29:7f:60:e4:e7:1e:2c:67:98:da:8e:cc:
         0d:f3:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:34 2025 by rpki-client