Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          zyfGcTBTb3PrVk2SciWvZoUSKyG0akPSaw2X5kw3yTw=
Subject key identifier:   15:61:8F:1D:08:35:DE:F5:70:9A:20:48:AB:73:27:D4:EF:0C:5C:A8
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       7017161E8124B35547C057853CBA9DE7781A7B4B
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:18 +0000
ROA not before:           Sat 15 Feb 2025 15:38:18 +0000
ROA not after:            Sat 14 Feb 2026 15:43:18 +0000
asID:                     262478
IP address blocks:        177.47.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:16:1e:81:24:b3:55:47:c0:57:85:3c:ba:9d:e7:78:1a:7b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:18 2025 GMT
            Not After : Feb 14 15:43:18 2026 GMT
        Subject: CN=15618F1D0835DEF5709A2048AB7327D4EF0C5CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:fe:c9:81:b1:0c:c0:f8:67:f3:21:ad:99:
                    13:02:b3:45:3d:ab:f7:aa:3a:a1:e9:e5:44:ed:e9:
                    a7:2e:cc:d6:7a:23:b1:64:b2:a0:75:1e:02:f9:22:
                    5d:72:ed:93:03:5c:a9:09:54:ba:87:36:d6:42:4c:
                    b2:f1:c6:9b:ef:f7:99:5f:24:a5:6d:49:d7:34:0e:
                    02:e1:36:33:a5:09:70:34:40:ea:91:15:2b:cd:49:
                    db:87:01:69:77:e5:47:8a:24:d1:8c:0c:33:d3:62:
                    2f:28:56:85:50:44:cc:9e:11:b0:44:b6:fb:1f:1c:
                    62:16:27:e7:46:f9:c5:ac:9c:df:a8:3c:22:51:8b:
                    0a:d7:5b:ca:72:d0:b8:fe:f0:1c:77:e7:fe:0c:12:
                    37:62:4b:12:98:5a:b6:82:01:11:e6:10:17:7f:40:
                    d9:fa:c7:9f:06:86:7f:85:e9:f9:a4:77:d1:6c:d2:
                    94:87:19:bc:4b:26:0e:c2:8e:18:0d:ef:35:11:37:
                    a4:95:be:fc:9d:fc:90:73:9e:25:c8:61:0d:77:aa:
                    46:23:7f:f5:19:3e:61:af:02:af:0f:51:82:ac:79:
                    2e:f5:7b:86:b6:c0:f6:f3:00:61:55:1f:db:78:b3:
                    f7:b9:5b:ba:ec:62:87:f6:a2:4a:64:cf:f7:3a:f2:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:8F:1D:08:35:DE:F5:70:9A:20:48:AB:73:27:D4:EF:0C:5C:A8
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:a3:ab:c3:34:91:c8:9e:1c:52:63:63:07:6d:37:62:82:
         be:50:fc:d3:d6:5d:4d:b6:dc:8a:84:e9:69:81:35:69:b3:68:
         ee:77:30:45:22:a0:a6:a5:fb:62:82:c6:f0:30:e4:98:ca:9b:
         f4:f0:26:2b:0b:65:ea:02:35:d3:59:11:a1:0c:1e:cd:34:dc:
         58:97:79:e1:15:3a:6e:e4:46:c9:21:cc:de:57:25:b9:40:c1:
         2d:9c:13:33:4c:e5:72:2e:4f:6b:b3:a1:67:57:9a:04:14:af:
         60:2a:47:83:47:29:b6:c8:83:de:ea:bc:77:12:99:7b:83:9b:
         32:1c:ca:ac:bf:83:17:7a:0d:aa:ec:e1:1c:83:2d:a2:98:0d:
         26:c6:dd:d6:c8:cf:1d:69:55:bc:40:19:43:b2:8c:6c:49:6f:
         83:fc:96:ab:50:5f:69:ad:e8:c5:ab:cf:cf:42:e1:c1:1e:57:
         89:4c:fd:af:30:fd:23:ad:f3:55:29:21:5b:74:df:01:82:2a:
         e4:f6:7a:d4:52:4b:96:14:b5:8a:4a:4c:5c:6e:15:5e:ba:00:
         80:15:24:e2:c4:82:35:db:6a:e1:76:bf:3b:08:cf:01:a6:1a:
         00:50:1b:d3:d2:a4:63:ec:3a:6d:f7:ca:94:c2:c2:68:d1:04:
         6f:83:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:14 2025 by rpki-client