Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e38372e33322e302f32322d3234203d3e203533313834.roa
File:                     3137372e38372e33322e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          wdbkzKeYZyDcGWVIJbxRg0mDLauXloHd46ffA/ykP9s=
Subject key identifier:   D1:4E:1F:9A:1A:A7:49:C4:C8:A9:FA:4C:22:45:E9:CD:F7:AC:8C:08
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       04A09E82594C68ABDE2BEF800D2938B3E97C5831
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e38372e33322e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:27:31 +0000
ROA not before:           Fri 03 May 2024 21:22:31 +0000
ROA not after:            Fri 02 May 2025 21:27:31 +0000
asID:                     53184
IP address blocks:        177.87.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a0:9e:82:59:4c:68:ab:de:2b:ef:80:0d:29:38:b3:e9:7c:58:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:22:31 2024 GMT
            Not After : May  2 21:27:31 2025 GMT
        Subject: CN=D14E1F9A1AA749C4C8A9FA4C2245E9CDF7AC8C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:f9:63:cd:b1:3d:71:be:00:a0:44:c9:83:
                    5c:01:ba:b9:4c:d9:70:29:6c:c7:62:ff:bf:8b:93:
                    3e:55:7c:16:39:6b:10:a3:9b:17:de:b7:31:4b:37:
                    2a:32:29:38:97:0a:b4:69:27:a5:c6:25:11:6f:99:
                    be:87:35:1f:db:c0:c6:0b:c9:99:5e:0c:f1:92:c9:
                    b5:82:53:73:e6:18:75:7f:6a:b5:3d:fa:20:23:4d:
                    f1:c5:da:ef:b3:a4:ac:48:3d:8b:c6:f2:37:50:3c:
                    0d:b3:07:04:fa:fb:de:29:50:97:a7:88:d9:8e:5b:
                    65:90:7c:2a:8a:87:9e:c0:90:ac:5a:61:8a:fb:9e:
                    fe:bc:e0:fe:e5:54:e8:cc:d9:2a:c2:34:6c:27:5c:
                    d1:69:30:f8:a6:df:c5:16:5d:8d:3c:e7:5e:b0:ac:
                    10:65:dd:e9:bc:e1:0f:48:90:d3:f8:d8:95:ce:5f:
                    52:f4:5d:13:24:a8:10:ab:5f:c2:a1:26:83:81:50:
                    67:63:15:f7:e1:c1:b5:70:b6:9d:d7:51:20:a1:79:
                    47:93:ad:46:55:87:7b:95:36:f3:e9:cc:1b:a8:42:
                    ff:b7:74:08:ee:39:d7:4c:a4:73:9c:8b:b7:74:53:
                    d4:f8:17:52:c3:39:31:ac:af:42:0c:4c:9e:d1:b3:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:1F:9A:1A:A7:49:C4:C8:A9:FA:4C:22:45:E9:CD:F7:AC:8C:08
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e38372e33322e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:e8:b6:4b:4b:42:aa:f5:9f:bb:5f:df:e6:3d:f2:fc:f2:
         3a:4a:fa:2a:87:3d:7e:6d:fe:29:f9:59:7b:ee:13:21:e8:d9:
         47:b7:2a:cc:ad:13:84:13:88:50:9b:cb:9b:25:60:d0:a2:26:
         a6:ed:de:eb:cf:32:a3:0d:88:09:1a:fe:a6:59:90:19:71:71:
         1d:a0:a6:57:74:1a:0b:c5:46:c3:05:e9:cd:9b:b7:78:fa:35:
         66:d5:91:db:54:77:13:fb:0f:56:79:ed:cb:83:5b:98:9c:e2:
         23:64:de:ee:01:4a:50:15:11:ab:dd:a8:23:d3:a0:d1:a1:d6:
         3f:ef:46:aa:fc:19:43:b4:be:99:2c:07:49:ef:5f:5d:77:e7:
         57:40:8d:06:0f:31:b1:9a:e7:d7:66:36:bd:7e:40:86:43:f8:
         ea:7f:11:c9:ea:d9:5e:58:cb:45:18:e0:68:4b:91:c9:26:e1:
         c8:2f:42:ba:55:7a:d8:fc:c8:b0:6a:b1:5c:17:d9:a3:46:c7:
         e1:e5:25:19:f9:b7:73:6a:d1:e1:a5:a1:93:88:65:5c:43:f2:
         5e:d8:cb:77:05:fb:49:bc:4c:24:a3:a6:be:c0:3c:8e:8b:07:
         78:f7:09:cc:dd:56:c1:f0:81:72:33:62:6a:63:45:44:61:d7:
         f3:91:3d:81
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBKCegllMaKveK++ADSk4s+l8WDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTIyMzFaFw0yNTA1MDIyMTI3MzFaMDMxMTAvBgNV
BAMTKEQxNEUxRjlBMUFBNzQ5QzRDOEE5RkE0QzIyNDVFOUNERjdBQzhDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YPljzbE9cb4AoETJg1wBurlM
2XApbMdi/7+Lkz5VfBY5axCjmxfetzFLNyoyKTiXCrRpJ6XGJRFvmb6HNR/bwMYL
yZleDPGSybWCU3PmGHV/arU9+iAjTfHF2u+zpKxIPYvG8jdQPA2zBwT6+94pUJen
iNmOW2WQfCqKh57AkKxaYYr7nv684P7lVOjM2SrCNGwnXNFpMPim38UWXY08516w
rBBl3em84Q9IkNP42JXOX1L0XRMkqBCrX8KhJoOBUGdjFffhwbVwtp3XUSCheUeT
rUZVh3uVNvPpzBuoQv+3dAjuOddMpHOci7d0U9T4F1LDOTGsr0IMTJ7Rs8lBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0U4fmhqnScTIqfpMIkXpzfesjAgwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNzM3MmUzODM3MmUzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFXIDANBgkqhkiG9w0BAQsFAAOCAQEALMrotktLQqr1
n7tf3+Y98vzyOkr6Koc9fm3+KflZe+4TIejZR7cqzK0ThBOIUJvLmyVg0KImpu3e
688yow2ICRr+plmQGXFxHaCmV3QaC8VGwwXpzZu3ePo1ZtWR21R3E/sPVnnty4Nb
mJziI2Te7gFKUBURq92oI9Og0aHWP+9GqvwZQ7S+mSwHSe9fXXfnV0CNBg8xsZrn
12Y2vX5AhkP46n8RyerZXljLRRjgaEuRySbhyC9CulV62PzIsGqxXBfZo0bH4eUl
Gfm3c2rR4aWhk4hlXEPyXtjLdwX7SbxMJKOmvsA8josHePcJzN1WwfCBcjNiamNF
RGHX85E9gQ==
-----END CERTIFICATE-----
Generated at Thu May 15 09:56:57 2025 by rpki-client