Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234322e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234322e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          ObW7nwYQvqXzcha1yYgpSGtMTotjBh7I2yIPskHvucw=
Subject key identifier:   05:8D:08:F4:0A:D8:D7:E4:B0:7B:5A:3A:1B:8F:12:94:ED:D1:DE:8F
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       52985DFE5DD6768C9C01255969D96CBFEB893C50
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234322e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:17 +0000
ROA not before:           Sat 15 Feb 2025 15:38:17 +0000
ROA not after:            Sat 14 Feb 2026 15:43:17 +0000
asID:                     262478
IP address blocks:        177.47.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:98:5d:fe:5d:d6:76:8c:9c:01:25:59:69:d9:6c:bf:eb:89:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:17 2025 GMT
            Not After : Feb 14 15:43:17 2026 GMT
        Subject: CN=058D08F40AD8D7E4B07B5A3A1B8F1294EDD1DE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:04:cf:0f:c1:d6:d4:4a:e8:46:09:fb:5c:
                    fa:71:f5:6b:7b:80:97:4c:e3:83:6f:eb:5e:98:bd:
                    6a:1d:d6:6f:2f:1a:a4:56:4b:c7:d5:07:f4:06:e0:
                    be:f1:f9:35:10:f1:29:6e:85:da:05:3d:a6:1b:e8:
                    18:74:30:13:07:d1:15:97:c6:62:93:10:68:cf:b8:
                    08:86:91:5f:4b:da:0d:b3:a7:10:c7:b9:a5:1f:a9:
                    d8:0f:b3:da:5a:1e:e4:6a:23:0d:cd:40:57:98:f2:
                    cd:37:3f:a0:ad:04:10:18:0a:06:8f:61:f4:38:3a:
                    1e:d0:47:2d:4e:cf:a1:94:55:2f:21:b9:cb:bd:36:
                    51:c8:f4:cc:8f:de:f0:f1:9a:3c:c7:d0:9e:7c:b6:
                    f2:a7:13:ac:a5:e6:ed:c2:8c:0f:03:8a:f0:e0:b1:
                    53:ce:3e:d8:a4:ea:9c:e2:d8:54:b8:bc:cf:76:9a:
                    05:ac:5e:a9:73:54:0a:ab:c7:3a:8a:2d:fd:f8:4c:
                    0b:a3:2b:9d:21:79:b9:cd:24:25:17:24:4d:49:ea:
                    7b:76:38:9f:ba:34:49:0a:8d:73:6a:1d:32:af:aa:
                    ef:b9:a8:a6:de:17:16:ba:26:fe:42:9d:8f:03:69:
                    2f:0d:0c:b0:10:39:2e:5c:2e:4f:1d:2d:1b:97:64:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:08:F4:0A:D8:D7:E4:B0:7B:5A:3A:1B:8F:12:94:ED:D1:DE:8F
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234322e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:f8:1c:45:70:a7:40:61:2a:90:4f:61:fd:63:0d:03:c9:
         28:e1:e1:be:f7:02:51:95:98:60:a0:38:e2:f7:7a:bc:24:a3:
         fe:28:5f:0c:ff:c4:39:76:35:28:41:19:65:e6:91:92:bc:09:
         92:fb:2c:59:aa:15:b4:f5:a4:b2:05:c5:cd:ad:64:d7:ab:d8:
         b5:64:b7:b1:e7:46:f2:e9:68:cb:c6:5a:7a:5e:44:89:a5:bf:
         e3:a9:2f:66:69:b9:c1:8b:5b:07:31:6b:b9:c9:c4:c9:da:1e:
         bd:64:c4:aa:a9:62:d6:ad:69:ec:f0:38:f9:dd:2b:1b:b5:e5:
         dd:ad:15:c7:70:a5:c9:f3:97:a6:e8:5f:b4:e8:b2:44:12:53:
         49:b0:f0:55:08:47:fe:35:0c:c4:bc:70:07:f7:d3:36:f3:ea:
         2f:40:7f:fc:75:f8:a9:00:25:44:3e:60:a5:82:a4:08:a6:13:
         08:8d:c9:e4:af:75:c8:bb:81:83:07:19:0d:f0:ca:7b:fb:1c:
         17:76:20:33:1e:b6:13:ff:91:bc:c0:2a:51:d2:5d:41:02:84:
         15:46:96:f7:4b:bd:9f:67:a3:2f:9b:18:dd:82:0e:ef:8a:04:
         71:1d:85:6e:f6:b1:71:f1:13:f0:4a:76:8f:a8:14:2d:96:14:
         5b:03:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:31 2025 by rpki-client