Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3133372e38302e302f32312d3234203d3e20323632373030.roa
File:                     3137372e3133372e38302e302f32312d3234203d3e20323632373030.roa (raw, json)
Hash identifier:          s5c7YZNMe9KF2BYyP9QwEdg0YbyFj8KbMd1QHNBZdVI=
Subject key identifier:   88:68:3B:03:B9:A5:DC:3D:C5:1D:28:39:37:77:39:E5:56:40:4B:58
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       3EF21CE016A2CE8C7020479E48BD0793BDFBBFA9
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3133372e38302e302f32312d3234203d3e20323632373030.roa
Signing time:             Fri 03 May 2024 21:46:06 +0000
ROA not before:           Fri 03 May 2024 21:41:06 +0000
ROA not after:            Fri 02 May 2025 21:46:06 +0000
asID:                     262700
IP address blocks:        177.137.80.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:1c:e0:16:a2:ce:8c:70:20:47:9e:48:bd:07:93:bd:fb:bf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:41:06 2024 GMT
            Not After : May  2 21:46:06 2025 GMT
        Subject: CN=88683B03B9A5DC3DC51D2839377739E556404B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:46:bf:23:c0:c3:a2:97:eb:3b:b7:60:a7:a4:
                    5e:b4:b4:37:99:c3:36:fa:f0:99:69:a7:51:1b:70:
                    5f:b2:7d:02:31:e1:3a:64:22:8a:4f:6d:e7:e2:ed:
                    90:8e:e2:7e:12:87:9f:bb:32:c9:62:cd:42:fd:0d:
                    06:3e:88:fe:98:93:e6:72:f6:0d:55:ed:59:61:84:
                    1d:36:81:e0:30:2b:12:81:31:33:c6:ee:92:e9:c0:
                    69:c9:df:58:c8:74:a9:92:1b:36:0c:68:ab:c8:07:
                    35:37:8d:d8:63:65:8f:11:17:11:78:63:24:df:fc:
                    72:ad:50:ff:bc:40:77:db:c2:14:db:de:45:9b:b2:
                    79:c0:6c:e5:f7:8b:36:1a:67:9b:2f:a1:36:52:b6:
                    83:8c:be:f3:2b:71:a7:39:68:11:28:72:ae:ae:79:
                    d9:9d:9d:ef:a4:30:8d:53:c8:a4:cc:44:03:87:b7:
                    80:65:f2:78:21:c9:6b:d4:7f:ab:66:82:e7:09:8d:
                    5b:7f:96:b8:c9:9f:ba:45:95:39:9a:ce:11:62:fd:
                    d0:99:f9:fc:80:08:1e:8b:89:72:30:3e:0a:ee:e1:
                    51:ba:fc:f6:69:cb:38:b4:bc:87:09:0b:8f:a0:11:
                    3e:f8:ad:c5:0d:f6:bf:f5:46:55:bb:d9:04:ba:ef:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:3B:03:B9:A5:DC:3D:C5:1D:28:39:37:77:39:E5:56:40:4B:58
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3133372e38302e302f32312d3234203d3e20323632373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:a9:e1:4f:f0:96:32:a7:05:ec:d9:13:23:2b:44:c6:d9:
         41:eb:c0:bc:5b:ab:92:16:7c:2c:0f:5b:98:fd:09:a0:28:6b:
         fa:16:26:24:6a:4a:a8:67:b4:68:9c:3f:c1:2c:3e:62:32:13:
         30:5c:61:51:da:91:b1:6f:cc:ac:72:4a:46:3f:95:09:92:e1:
         dc:ca:a0:68:5e:34:bd:53:6b:03:16:df:42:cb:b3:af:d6:0a:
         95:63:25:54:a9:a9:1e:eb:f7:34:e5:b7:42:0c:a5:a2:f2:f6:
         c5:c7:0f:7d:e9:fe:e7:80:30:b9:b8:6e:48:0b:44:2b:7e:21:
         46:2a:9a:19:b0:95:32:73:bf:78:65:25:c2:76:ff:ad:6d:49:
         b7:14:ff:57:92:f8:47:56:7c:e3:9c:19:60:91:89:67:db:89:
         17:a1:ec:e3:4d:eb:b0:4a:94:b9:63:88:7c:b9:72:90:02:7b:
         5d:06:66:af:9c:6d:d2:2a:ed:b5:1c:93:dc:b5:61:d7:7a:8d:
         88:91:43:c5:1d:23:da:b2:87:11:1a:f8:c9:10:95:41:7e:44:
         6a:ed:b5:ef:02:a1:02:e0:fd:ca:1f:3d:39:e9:4e:44:8f:a9:
         ff:ef:0e:6e:d3:d2:97:db:ef:7a:3f:ac:68:d9:f2:32:32:cf:
         8a:81:19:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPvIc4BaizoxwIEeeSL0Hk737v6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTQxMDZaFw0yNTA1MDIyMTQ2MDZaMDMxMTAvBgNV
BAMTKDg4NjgzQjAzQjlBNURDM0RDNTFEMjgzOTM3NzczOUU1NTY0MDRCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Rr8jwMOil+s7t2CnpF60tDeZ
wzb68Jlpp1EbcF+yfQIx4TpkIopPbefi7ZCO4n4Sh5+7MslizUL9DQY+iP6Yk+Zy
9g1V7VlhhB02geAwKxKBMTPG7pLpwGnJ31jIdKmSGzYMaKvIBzU3jdhjZY8RFxF4
YyTf/HKtUP+8QHfbwhTb3kWbsnnAbOX3izYaZ5svoTZStoOMvvMrcac5aBEocq6u
edmdne+kMI1TyKTMRAOHt4Bl8nghyWvUf6tmgucJjVt/lrjJn7pFlTmazhFi/dCZ
+fyACB6LiXIwPgru4VG6/PZpyzi0vIcJC4+gET74rcUN9r/1RlW72QS671nnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiGg7A7ml3D3FHSg5N3c55VZAS1gwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNzM3MmUzMTMzMzcyZTM4MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxiVAwDQYJKoZIhvcNAQELBQADggEBAIDOqeFP
8JYypwXs2RMjK0TG2UHrwLxbq5IWfCwPW5j9CaAoa/oWJiRqSqhntGicP8EsPmIy
EzBcYVHakbFvzKxySkY/lQmS4dzKoGheNL1TawMW30LLs6/WCpVjJVSpqR7r9zTl
t0IMpaLy9sXHD33p/ueAMLm4bkgLRCt+IUYqmhmwlTJzv3hlJcJ2/61tSbcU/1eS
+EdWfOOcGWCRiWfbiReh7ONN67BKlLljiHy5cpACe10GZq+cbdIq7bUck9y1Ydd6
jYiRQ8UdI9qyhxEa+MkQlUF+RGrtte8CoQLg/cofPTnpTkSPqf/vDm7T0pfb73o/
rGjZ8jIyz4qBGU0=
-----END CERTIFICATE-----
Generated at Thu May 15 06:45:18 2025 by rpki-client