Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          5BRdzcxStB4KLsGsVThgmsAtrmv4HtCBx2dVDmO3cxA=
Subject key identifier:   02:8B:2A:26:4C:C4:48:B2:0E:FF:1D:05:88:7E:80:30:B8:0C:CE:D4
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       6873BD66F340C572D70F34BAAFBF42D437188792
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:18 +0000
ROA not before:           Sat 15 Feb 2025 15:38:18 +0000
ROA not after:            Sat 14 Feb 2026 15:43:18 +0000
asID:                     262478
IP address blocks:        177.47.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:73:bd:66:f3:40:c5:72:d7:0f:34:ba:af:bf:42:d4:37:18:87:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:18 2025 GMT
            Not After : Feb 14 15:43:18 2026 GMT
        Subject: CN=028B2A264CC448B20EFF1D05887E8030B80CCED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:ca:7b:21:e8:ab:9b:56:65:56:c4:d9:30:
                    78:24:71:fc:29:e9:10:02:47:52:09:da:33:a6:a5:
                    7b:0a:ca:14:3c:bd:66:39:d1:df:ba:9d:e6:95:21:
                    1c:4d:df:72:47:b8:d3:7e:49:6a:20:a4:e1:31:2a:
                    24:d0:82:0a:32:72:27:1a:c3:04:a8:45:aa:19:07:
                    2d:96:67:80:bb:0d:f7:ec:b4:cd:ba:97:5f:2e:ad:
                    12:19:ad:48:4a:70:e0:1e:ea:52:d6:52:cf:9c:3a:
                    eb:45:0f:96:6f:9b:f0:0c:ed:eb:c6:80:78:22:b6:
                    f4:dc:f5:c3:10:bc:d5:6d:d3:2e:b0:20:07:aa:5e:
                    02:a7:fe:8f:a2:55:e2:ae:ed:43:d9:a1:76:fa:70:
                    a2:a4:f0:eb:8c:65:23:9a:a8:86:8d:83:ba:27:90:
                    ab:19:27:67:a2:5b:95:ab:ab:fd:71:16:e1:5c:05:
                    2c:84:a3:e7:59:32:be:b8:13:45:ac:84:3d:e3:82:
                    e4:ec:84:d2:a8:55:d6:2f:36:ad:fc:81:24:2f:03:
                    b2:2c:ee:c7:35:d9:aa:9c:30:44:e5:8f:c9:b6:67:
                    98:de:46:3b:8f:34:02:60:ac:fc:eb:32:47:9d:67:
                    42:88:ad:71:4b:b4:9f:e8:79:76:5d:bb:06:4b:73:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:2A:26:4C:C4:48:B2:0E:FF:1D:05:88:7E:80:30:B8:0C:CE:D4
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:28:6d:04:97:3b:ee:90:86:c4:3a:24:ff:04:55:c3:6d:
         26:3a:52:0c:63:cf:0d:da:58:16:8d:25:09:d5:9d:6f:a6:4c:
         73:3e:0c:0f:05:24:a5:ed:db:0c:df:2f:08:11:31:87:14:95:
         68:7b:d4:3a:b0:f2:ae:b5:ec:20:37:c7:a9:98:dd:c3:ef:76:
         62:b0:4b:cf:ef:f8:55:18:ad:2c:7d:b3:b8:89:a9:4d:82:bb:
         0d:61:10:d8:c5:3b:b5:4b:0f:b1:1a:a2:0e:93:79:cd:8c:36:
         26:3a:08:aa:3e:d4:ff:99:6b:4b:b0:b1:e6:81:8c:01:d3:91:
         5c:42:a2:16:15:1a:67:8e:94:37:cb:2f:1a:75:66:ea:0b:11:
         50:82:a4:3d:36:4f:11:73:db:ea:97:ca:58:96:c1:fc:f6:2a:
         59:4b:51:3d:9e:62:69:2b:24:77:59:b1:3e:04:9a:1d:18:34:
         ec:10:42:f9:b1:90:ab:29:f8:92:c1:ef:b1:38:f9:ba:89:b3:
         ab:5a:d0:87:a3:7d:05:5f:ed:d5:8e:59:a7:b6:2d:b7:fb:fb:
         4e:83:d0:45:54:86:dd:e5:e6:42:23:4c:9d:be:14:ed:56:64:
         48:fa:df:2e:e9:8d:23:99:85:28:64:33:3c:4a:18:9d:f8:d0:
         20:c4:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:13:21 2025 by rpki-client