Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          GRd5TTpeQJaJYEZL6tIdhnc4aFGTKlblWy0FH3gAKjE=
Subject key identifier:   8D:8D:71:1E:6F:D0:54:1B:AB:25:A6:0C:06:1E:30:71:76:B6:7D:A3
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       2AFA237BDB2AC73FF96DF24B3BB9A634999E1D27
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:18 +0000
ROA not before:           Sat 15 Feb 2025 15:38:18 +0000
ROA not after:            Sat 14 Feb 2026 15:43:18 +0000
asID:                     262478
IP address blocks:        177.47.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fa:23:7b:db:2a:c7:3f:f9:6d:f2:4b:3b:b9:a6:34:99:9e:1d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:18 2025 GMT
            Not After : Feb 14 15:43:18 2026 GMT
        Subject: CN=8D8D711E6FD0541BAB25A60C061E307176B67DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:05:75:81:bf:c2:ab:cd:b7:7b:1b:f7:07:
                    33:9e:0c:02:5d:45:7f:77:02:8f:43:08:f5:72:5e:
                    6b:18:2b:c3:7f:e3:22:dd:bb:51:73:cb:00:a1:39:
                    41:1f:b1:f2:b7:61:49:b5:70:b8:60:c9:f9:ac:bf:
                    b5:f2:d1:fc:9b:0f:83:4a:2b:77:ed:c3:b8:39:d4:
                    fe:00:7b:1e:46:5f:a5:2b:a0:41:38:a0:c3:1a:4a:
                    38:95:48:28:61:0f:ae:c5:eb:6c:6d:18:0b:26:c7:
                    b8:b7:93:61:4d:88:6b:b3:e1:f5:85:4e:0a:66:0e:
                    c4:59:6f:90:32:fb:38:6f:4c:10:d7:c2:fa:3e:bd:
                    b7:78:9e:e2:0d:37:96:0e:f8:77:7d:b1:69:0a:a2:
                    10:1f:4c:40:2c:7f:a9:be:c0:4f:0c:7f:08:1b:86:
                    fc:66:13:db:b1:c1:3b:e6:8b:23:d6:f7:cb:a9:76:
                    03:5c:60:fe:0b:58:f7:2d:03:9b:7a:33:d1:c8:c6:
                    22:52:e7:f6:a9:e2:6f:6d:8f:fe:3a:d7:77:5c:b9:
                    d3:ac:73:16:fc:3a:ac:52:ea:c4:59:c6:ce:de:57:
                    69:cf:e9:0e:ad:1f:11:66:ff:61:25:00:54:22:11:
                    fc:b3:8d:4b:b6:4a:a7:50:bd:39:95:e9:3f:64:bb:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:71:1E:6F:D0:54:1B:AB:25:A6:0C:06:1E:30:71:76:B6:7D:A3
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:06:ea:c8:67:05:36:c2:78:ca:53:d9:a6:96:59:64:d0:87:
         24:ba:a1:97:75:97:28:e2:03:ba:54:f1:ee:f3:6c:9d:75:17:
         86:7e:d1:2b:a2:3f:6b:a2:f4:96:96:59:12:9b:d2:b1:ce:70:
         23:1f:3e:e9:2d:84:d0:ca:13:61:98:11:a0:c8:2a:bd:cf:ce:
         b3:2c:12:09:7a:1c:ff:ed:c4:40:36:c4:37:11:36:8e:c6:1f:
         5e:19:2e:d1:ad:30:14:60:5e:2f:43:13:f6:a3:d8:6b:ac:5d:
         3a:8e:93:45:b3:80:8c:f7:5f:fb:81:e8:ac:a8:a3:4f:89:fb:
         ef:03:fb:48:37:0e:0f:b4:e5:8f:0c:5a:2b:2f:fa:52:01:ba:
         4e:9a:26:5f:75:f6:a5:ab:46:5f:ec:97:4f:ab:16:7b:6c:26:
         1b:c9:60:ef:70:3b:d7:49:ba:0b:4f:e9:d5:13:0e:c9:08:54:
         9b:3e:63:97:c0:7f:44:0b:53:63:77:85:b0:d8:56:39:89:f6:
         f3:c7:1a:ec:ad:6b:ad:fe:1e:55:60:10:16:e9:3e:ec:70:d9:
         5c:e9:67:34:2d:62:b4:e3:f3:2f:1c:08:2d:0d:36:3e:a7:c5:
         5f:e9:fb:81:e3:95:61:82:0d:da:f7:3f:fa:1d:68:3a:0d:77:
         d0:8d:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:36 2025 by rpki-client