Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32312d3231203d3e20323632353337.roa
File:                     3137372e37322e302e302f32312d3231203d3e20323632353337.roa (raw, json)
Hash identifier:          Pq6Qkdz0ZiDWYMsAGFDELclquA2roDZpIy2yAS6GQAI=
Subject key identifier:   A2:1E:3B:57:EB:4D:70:AA:09:F3:8F:AF:8D:D7:67:C0:1A:5C:AF:C7
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       3026A715192243CE80B6BA6FD717524BC854FE7E
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32312d3231203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:40 +0000
ROA not before:           Fri 06 Oct 2023 18:47:40 +0000
ROA not after:            Fri 04 Oct 2024 18:52:40 +0000
asID:                     262537
IP address blocks:        177.72.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:26:a7:15:19:22:43:ce:80:b6:ba:6f:d7:17:52:4b:c8:54:fe:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:40 2023 GMT
            Not After : Oct  4 18:52:40 2024 GMT
        Subject: CN=A21E3B57EB4D70AA09F38FAF8DD767C01A5CAFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ee:f1:ee:ca:fc:72:32:15:54:ff:fd:c5:ac:
                    9e:bc:32:b0:af:36:16:67:5d:5a:f1:03:2c:18:9e:
                    30:02:fa:20:1d:99:55:6b:eb:88:46:b5:b3:16:6e:
                    7d:f0:43:84:69:41:5f:b7:73:3b:1d:48:9b:49:c9:
                    ce:67:c1:f8:d2:87:a8:a3:e8:16:28:2f:60:9f:77:
                    b2:b2:be:81:00:6f:60:33:87:12:d2:56:bd:6e:fd:
                    b8:ae:f8:7a:0d:84:7d:4c:9c:96:ba:ab:11:53:b5:
                    e2:41:84:a1:a8:44:ee:51:95:96:30:e4:93:77:e8:
                    5a:74:ac:77:c6:57:b7:1a:8b:57:61:f8:6f:b5:fd:
                    8e:ef:19:01:0d:8c:16:cc:70:2e:8e:19:26:07:8a:
                    8a:e1:10:55:59:e8:f9:91:04:a8:49:60:35:33:ff:
                    d6:99:49:e4:e9:9a:e1:f0:bb:58:fc:2c:93:ee:51:
                    d7:55:5d:c6:4c:2b:87:79:81:2b:de:35:e8:b9:89:
                    06:d1:ce:26:df:eb:5d:02:46:3d:fd:7f:fc:47:92:
                    83:fb:5d:1c:3d:47:41:57:64:f9:7a:30:47:21:ef:
                    3d:2e:f0:d0:d4:2e:68:ac:0e:6c:01:3b:bc:40:9d:
                    80:ca:44:45:ea:9c:c8:d1:f9:30:ad:f7:04:39:43:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1E:3B:57:EB:4D:70:AA:09:F3:8F:AF:8D:D7:67:C0:1A:5C:AF:C7
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32312d3231203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:73:75:13:71:7c:24:83:26:e9:b1:7c:9d:f9:4c:4a:a1:bb:
         90:06:5c:4b:f8:06:53:54:d0:92:cd:bf:bb:fd:b7:a9:0c:e0:
         65:38:95:b8:18:20:37:db:eb:5e:c3:a1:03:fa:78:6c:59:fc:
         c1:4e:5a:d7:c3:7a:a9:14:52:20:06:72:7b:b7:15:85:c6:66:
         e1:1c:9d:01:bb:f7:c6:42:4c:3c:db:48:1d:98:df:01:7e:c4:
         05:80:5f:a4:83:40:78:9b:40:72:4c:f3:2d:3b:21:64:ce:81:
         87:b7:ae:3b:8a:f3:cc:20:91:ce:42:08:be:c1:2f:ea:41:72:
         42:06:f7:72:dd:e7:f7:f5:a4:63:6c:96:91:bf:e0:0f:f8:48:
         14:03:ab:ea:83:b2:54:18:12:77:4e:2a:2d:b8:8a:04:ae:ed:
         c8:0c:03:44:84:9a:e2:91:c4:c1:6b:ac:f1:1c:a3:cd:7a:cb:
         2e:66:96:55:77:60:bd:9b:fc:31:5f:81:42:f2:6e:41:4e:9b:
         90:1a:76:0c:9d:90:74:1a:7c:8e:8c:12:5b:9d:f2:4c:4a:e4:
         9c:2d:de:76:ea:a6:f6:d2:46:bd:6e:97:61:51:76:49:cd:aa:
         3a:cb:ec:3c:0c:45:18:9c:17:95:86:80:92:2e:4b:ea:a6:53:
         a6:8a:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:30 2025 by rpki-client