Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35342e302f32332d3233203d3e203532393533.roa
File:                     3137372e32322e35342e302f32332d3233203d3e203532393533.roa (raw, json)
Hash identifier:          GDpq9QoaBSXBft3psXSm4gMx/lyWbt/7x4aGsWEut2g=
Subject key identifier:   25:DE:96:25:FC:6F:CE:D9:AD:82:1E:D2:4A:43:98:64:39:75:F7:A2
Certificate issuer:       /CN=52A6D195524E5D77063F4811A6C89136CC740F16
Certificate serial:       169921EB78DCB46D39189A60E1D8B8720C2E6B6F
Authority key identifier: 52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35342e302f32332d3233203d3e203532393533.roa
Signing time:             Wed 16 Aug 2023 13:15:57 +0000
ROA not before:           Wed 16 Aug 2023 13:10:57 +0000
ROA not after:            Wed 14 Aug 2024 13:15:57 +0000
asID:                     52953
IP address blocks:        177.22.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:99:21:eb:78:dc:b4:6d:39:18:9a:60:e1:d8:b8:72:0c:2e:6b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A6D195524E5D77063F4811A6C89136CC740F16
        Validity
            Not Before: Aug 16 13:10:57 2023 GMT
            Not After : Aug 14 13:15:57 2024 GMT
        Subject: CN=25DE9625FC6FCED9AD821ED24A4398643975F7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:d2:af:d9:f0:21:14:3e:67:4b:af:ee:0c:
                    c1:b5:99:04:59:c3:7c:81:85:6e:13:ea:9f:85:b6:
                    1f:35:31:1d:a0:3d:2d:6c:fd:f8:91:96:de:ce:62:
                    ef:37:01:3a:60:3c:fc:b5:f2:d3:a3:fc:9e:34:a0:
                    87:b1:e8:0b:28:29:97:07:24:29:80:32:50:0b:fe:
                    f1:d2:e8:66:5b:08:b6:f1:5d:33:0d:7b:76:c3:eb:
                    02:00:16:9d:e4:bb:ad:86:8f:ab:a3:b7:c3:f7:ca:
                    92:fd:44:f7:98:0d:a6:c3:bd:5b:30:da:e0:41:f5:
                    d1:b7:43:b0:c7:b2:62:44:a2:e9:0b:93:a2:6d:98:
                    dc:7c:eb:2e:df:ce:07:5c:eb:78:4a:dd:07:77:a6:
                    1e:74:ce:9c:d3:01:f9:e2:d0:b5:dc:d6:fa:df:68:
                    13:b7:55:14:43:ba:26:d9:e2:88:73:97:fc:10:74:
                    f8:70:92:d1:e3:39:b5:b3:c9:ee:46:b6:e7:fd:11:
                    51:1c:16:a0:ac:d6:08:ef:97:b8:29:22:a5:a8:2d:
                    d9:d9:e8:56:4f:b5:06:a4:50:33:d9:07:7c:a9:be:
                    32:3d:4b:14:43:d4:10:23:01:63:f1:05:df:0e:e5:
                    27:5d:59:54:fe:8c:b9:fc:e3:1e:f4:4a:ad:72:75:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DE:96:25:FC:6F:CE:D9:AD:82:1E:D2:4A:43:98:64:39:75:F7:A2
            X509v3 Authority Key Identifier:
                keyid:52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/3137372e32322e35342e302f32332d3233203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:5c:8d:c5:3a:6b:ef:41:89:27:a6:84:f1:1e:3b:2f:88:
         43:8b:cc:b3:7c:b2:20:e3:ad:dc:d4:a0:d0:8d:6d:ee:4d:77:
         c3:fc:76:a0:66:1e:82:4b:27:79:5c:06:ab:fa:cf:16:d1:61:
         53:3a:80:10:a5:fc:6a:21:ce:fd:9f:b9:84:5c:4c:d8:06:d7:
         a7:4c:00:d1:5e:3a:3e:68:9b:d0:58:5f:c3:60:ac:d1:af:5e:
         50:13:88:50:2a:50:8c:c4:76:c6:3a:c1:67:7d:7f:c3:b2:6f:
         87:bb:e7:f6:c2:f7:d9:a2:18:d0:7f:19:29:fc:a7:7b:ba:e9:
         ed:15:24:0c:c4:6b:1e:93:56:9d:6d:94:93:49:e9:e2:5b:9b:
         43:30:df:7e:e5:17:0a:2f:3f:89:59:4c:bf:d9:62:bd:2f:b3:
         e2:61:5a:64:ec:3f:bf:e4:09:06:02:23:d6:1d:38:12:21:e0:
         ee:63:26:98:bb:4e:3a:b6:5d:ab:34:33:5c:c5:7a:d0:b7:0d:
         3d:2f:7a:19:a0:5f:bd:a7:10:50:b7:84:6e:0d:41:30:60:b5:
         d4:5f:97:20:e2:3b:08:8a:2e:2c:bb:f1:37:bf:2f:10:7f:df:
         53:9a:bc:bd:03:47:1c:f7:09:69:4e:ad:cb:6b:f2:42:3a:c0:
         47:49:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:08:41 2025 by rpki-client