Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
File:                     3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (raw, json)
Hash identifier:          KJjeemFydFc3Dt1YsA/ga9vhKSPXtcQT61B7Hi+PqYE=
Subject key identifier:   51:C1:BA:F1:13:5A:86:B2:EF:99:38:BA:C0:F2:A6:E1:9A:90:4C:90
Certificate issuer:       /CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
Certificate serial:       42E2183BB1D6AC309004116E1C2AE60314295B31
Authority key identifier: 99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
Signing time:             Tue 04 Feb 2025 19:50:04 +0000
ROA not before:           Tue 04 Feb 2025 19:45:04 +0000
ROA not after:            Tue 03 Feb 2026 19:50:04 +0000
asID:                     52795
IP address blocks:        177.39.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e2:18:3b:b1:d6:ac:30:90:04:11:6e:1c:2a:e6:03:14:29:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
        Validity
            Not Before: Feb  4 19:45:04 2025 GMT
            Not After : Feb  3 19:50:04 2026 GMT
        Subject: CN=51C1BAF1135A86B2EF9938BAC0F2A6E19A904C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:eb:9e:5d:46:fc:b3:29:dd:90:3c:09:2c:
                    1f:b5:4b:d3:6f:6f:f4:42:b6:9c:f5:52:fe:0a:fa:
                    e1:f3:17:83:0b:c5:12:bf:78:fe:08:76:c8:6a:5a:
                    94:37:fe:45:05:cf:e4:84:0e:b2:0e:cb:d7:69:df:
                    e7:14:a1:5e:6b:95:63:22:12:39:a8:00:f1:43:b2:
                    7c:23:a7:3c:e8:1c:4b:c4:0a:81:f5:13:73:e6:ec:
                    f5:5c:64:1b:37:a6:74:dd:3d:62:4f:28:3d:db:94:
                    fb:d7:08:c1:1a:c8:b5:91:1d:ff:26:17:70:b3:77:
                    fa:7f:ba:3d:2e:f0:a9:bb:93:bd:a2:21:f5:31:fd:
                    b3:db:bd:48:79:20:1e:d5:ee:5b:16:8b:b2:9f:90:
                    e8:05:e2:43:27:52:cd:c8:a7:41:68:c0:df:b4:b3:
                    f3:75:aa:af:22:ac:44:52:cd:78:ee:57:d8:c1:d6:
                    8d:49:68:ef:b5:0d:f0:d9:ca:d3:8f:69:d5:c3:01:
                    7b:9d:32:9f:59:64:0c:80:1c:5a:5b:79:fa:cd:bd:
                    23:6b:f2:af:e7:9e:88:0a:bc:1d:70:95:aa:a4:86:
                    77:ba:c7:af:97:94:fa:df:90:5b:b1:69:e9:a3:13:
                    35:ba:a8:a7:08:f8:42:75:94:c9:13:bd:fc:42:6b:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C1:BA:F1:13:5A:86:B2:EF:99:38:BA:C0:F2:A6:E1:9A:90:4C:90
            X509v3 Authority Key Identifier:
                keyid:99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:c1:98:ee:84:7d:75:fe:2b:26:2b:ed:ab:99:f6:d3:95:
         09:9d:4e:43:97:f7:0e:62:96:3b:9f:d7:c8:fd:37:3a:c5:d0:
         d6:72:30:2c:d2:d6:b2:70:92:f1:41:85:15:05:37:f0:ec:d5:
         db:5a:2b:58:eb:7e:5a:70:22:6c:da:f3:8c:ba:c5:42:64:d9:
         9e:37:5e:4f:10:ea:b3:72:86:0e:41:c9:da:fb:82:bd:39:a8:
         af:31:71:62:8f:f6:e1:1f:fa:d3:82:c1:c8:99:08:85:2f:60:
         6a:15:92:c1:f7:83:ac:63:70:de:94:c9:cc:96:d9:7c:79:96:
         89:4d:64:ed:f1:c5:e0:a0:47:4d:66:d2:e4:09:b6:06:21:ab:
         ce:b6:d8:92:aa:76:a7:a3:63:0f:1d:f6:5e:b9:04:5b:23:dc:
         bd:92:46:e2:11:3b:f9:a4:01:f3:b0:4a:12:8e:e1:dc:db:d9:
         04:97:39:a9:c2:30:cf:b0:3a:df:f3:c0:31:de:4b:7b:2d:07:
         a7:11:3b:4b:d4:cc:9c:4b:22:d5:eb:d6:b5:68:97:ca:54:45:
         9d:fe:f4:87:a1:a8:6f:d9:d5:60:34:4e:47:61:53:e7:6a:70:
         93:bc:a8:e5:70:23:53:99:99:fd:3f:4f:49:a0:7c:5d:6f:dd:
         ba:cf:2d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:43 2025 by rpki-client