Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235342e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3235342e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          3q4na8eEa6423O3kgyvSFrMLzxwipbxJrlDtuUxbSDM=
Subject key identifier:   36:01:63:44:E0:C2:32:64:E2:9A:33:4D:1F:7F:10:53:CC:74:7F:40
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       37DE25D68B7E6FA0D8DC507DBD3B946A6064427E
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235342e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:16 +0000
ROA not before:           Sat 15 Feb 2025 15:38:16 +0000
ROA not after:            Sat 14 Feb 2026 15:43:16 +0000
asID:                     262478
IP address blocks:        177.47.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:25:d6:8b:7e:6f:a0:d8:dc:50:7d:bd:3b:94:6a:60:64:42:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:16 2025 GMT
            Not After : Feb 14 15:43:16 2026 GMT
        Subject: CN=36016344E0C23264E29A334D1F7F1053CC747F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:3e:79:1a:86:0c:14:16:cb:c5:50:c9:67:
                    87:01:d9:1a:0e:6f:57:47:7d:6f:59:b5:a8:87:2a:
                    42:75:8a:de:05:28:a0:29:67:01:55:8b:47:38:09:
                    69:df:8f:49:33:1c:d3:f0:d5:23:33:bb:d0:11:a6:
                    0a:ee:41:37:44:96:a0:64:db:0f:ce:a1:ee:08:67:
                    45:48:7e:25:35:28:fd:8f:03:16:65:b2:1f:ae:a3:
                    fc:ec:d6:c9:53:1d:fd:e8:3e:99:ba:06:3e:f6:ce:
                    06:15:3d:f7:5b:6c:36:2b:1c:7b:05:f6:5c:b2:db:
                    44:2c:6d:bb:db:6c:08:fe:15:53:38:85:db:68:0a:
                    95:29:2d:da:02:b5:fa:50:5f:ae:d7:bd:90:7d:05:
                    11:bb:a3:7a:49:d9:e2:d7:ac:8e:2f:1c:e6:1b:31:
                    8a:22:2d:a7:f3:69:5c:b2:be:18:36:4c:8f:9d:8d:
                    58:85:2a:9a:5b:18:6d:ed:3b:d9:97:48:64:8e:a1:
                    59:f2:42:c0:c0:2d:e0:15:fc:56:ab:34:15:3c:92:
                    72:de:e7:74:22:1d:fc:ff:f1:ad:cd:be:28:17:53:
                    da:4a:8b:06:8f:20:f9:3a:7d:9f:be:34:ee:fd:a7:
                    00:ba:55:18:29:30:ba:d8:87:92:9b:a5:dd:67:bd:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:63:44:E0:C2:32:64:E2:9A:33:4D:1F:7F:10:53:CC:74:7F:40
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235342e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:80:da:f7:09:8f:1a:67:35:27:63:11:36:eb:4e:78:80:
         95:a2:ad:b2:51:51:79:ac:a9:15:d3:45:0f:11:c9:48:12:d7:
         6c:73:95:7d:3b:b9:52:95:92:2f:2e:3d:bd:4e:8f:6e:98:96:
         8b:8d:72:24:90:ba:8a:81:3d:db:82:d3:05:ac:c9:42:21:72:
         6b:af:4c:3f:0d:e9:36:a8:04:3c:52:e5:6f:dd:7e:93:bc:8a:
         35:a8:33:ff:52:e8:42:85:07:72:04:13:f2:87:1b:7b:d5:6b:
         03:69:62:72:9b:d8:a1:0d:68:82:7e:03:aa:63:d1:b7:b7:73:
         28:7f:90:3b:de:66:20:fb:51:92:2e:20:83:9e:26:ef:b6:d6:
         d6:cd:53:1d:85:74:03:66:06:d6:18:de:7c:53:f6:8a:2b:e8:
         27:34:3b:3c:49:b9:8e:62:21:d4:be:91:98:9c:48:2c:ff:99:
         fb:9c:42:1b:c3:7c:fe:da:74:ec:c2:94:4b:6b:54:a1:c8:57:
         cf:17:47:e8:dd:d1:f8:4a:58:66:7f:b3:ad:3a:98:af:92:7d:
         d2:17:3e:6c:49:6f:ca:3d:b0:67:8a:0d:2f:40:04:06:8f:9e:
         11:c0:42:55:3b:d5:d5:7f:1d:fa:77:9a:73:7f:30:ed:b1:fb:
         7e:53:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:19 2025 by rpki-client