Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa
File:                     3137372e3132342e37362e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          NccNvE0DdU+JelQTI7g+0re4vz7bbHhu2e+S2LcGNBc=
Subject key identifier:   0D:44:C9:D7:C6:70:6B:F7:15:47:95:6D:65:AD:45:D5:07:30:DD:93
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       6BEB567E7EAF02A63379970B253C4B9B0AC07975
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:42:38 +0000
ROA not before:           Tue 03 Dec 2024 18:37:38 +0000
ROA not after:            Tue 02 Dec 2025 18:42:38 +0000
asID:                     52601
IP address blocks:        177.124.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:eb:56:7e:7e:af:02:a6:33:79:97:0b:25:3c:4b:9b:0a:c0:79:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:38 2024 GMT
            Not After : Dec  2 18:42:38 2025 GMT
        Subject: CN=0D44C9D7C6706BF71547956D65AD45D50730DD93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:53:f6:e8:86:c5:81:47:e9:d3:c7:ab:dd:
                    c0:50:4f:06:ec:a8:21:c4:10:b6:2c:5c:89:43:e6:
                    12:4c:e7:bc:e4:f7:ff:f8:79:a7:a8:c7:f5:a5:5f:
                    ae:b1:eb:d7:2e:83:ac:6c:73:79:f1:43:b8:76:c3:
                    93:86:28:ea:88:70:db:08:aa:0a:4c:64:9c:5f:75:
                    70:47:6b:28:de:db:98:12:a6:90:69:1f:b1:56:fb:
                    54:3f:b7:10:9f:9e:e8:00:5d:37:2c:30:a9:36:4d:
                    14:8a:ea:20:65:4b:8e:7e:a8:6d:28:98:30:66:f5:
                    e8:16:8f:ed:1f:f5:84:be:53:e2:2a:be:e1:39:67:
                    db:b0:2f:25:ae:90:9c:61:24:cc:bd:11:ff:27:5e:
                    7c:a6:46:3c:68:93:bf:96:ee:2b:df:1f:c9:73:d4:
                    fe:ce:b8:cf:15:65:0e:64:39:ed:fc:53:b0:64:75:
                    a6:fb:c6:07:4e:af:d2:34:54:ea:ed:06:6f:71:96:
                    95:1e:a8:0d:d0:dc:c1:fe:86:ee:02:33:ef:42:0c:
                    c3:23:f4:a4:8b:79:83:09:04:7e:cc:ae:68:25:72:
                    34:d0:d6:69:d9:51:c9:0d:41:ce:1b:60:46:0b:ae:
                    73:af:9f:64:1e:d6:38:30:ff:ca:23:8b:0e:91:7a:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:44:C9:D7:C6:70:6B:F7:15:47:95:6D:65:AD:45:D5:07:30:DD:93
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:fe:a7:34:2a:45:89:70:df:32:d3:94:23:e0:79:3d:a4:
         3d:46:f7:9e:b1:4c:30:d3:95:c4:65:5f:21:88:1c:31:d8:a6:
         e1:bf:b6:d0:ff:09:3d:54:6f:2b:54:e4:c4:e5:10:b5:47:63:
         34:67:b9:05:93:c1:05:ee:e7:e7:3b:83:7c:79:1d:5f:d0:fb:
         77:45:09:fd:a0:b8:37:09:7e:d2:4a:65:d5:5d:b0:00:a2:59:
         9d:b3:aa:b7:35:2f:2f:11:57:b0:56:a2:44:f7:65:97:5b:3d:
         3f:74:a5:ac:75:1a:ae:29:09:77:00:6f:44:fc:99:3a:ae:a1:
         d7:0a:85:c8:3b:94:0d:d2:c8:fe:f4:e7:e3:32:da:cd:df:e7:
         dc:c5:31:7d:65:26:26:f4:ce:cf:89:c2:97:b9:5b:6d:c4:b7:
         2b:78:de:7d:a0:9b:ff:f5:ab:35:31:9e:5c:cb:72:e0:90:69:
         53:a8:f3:ba:84:b5:6c:08:f0:8a:a0:ac:9e:47:b0:9e:9f:bf:
         e2:58:de:25:7d:f0:47:75:42:03:03:e5:5a:40:fe:20:05:9c:
         9b:91:d9:20:c6:6e:41:c3:09:ac:3d:12:12:02:43:b9:1a:94:
         56:e1:24:1d:6d:9b:b9:78:75:76:77:85:6d:2a:4f:50:e5:f2:
         de:9f:42:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa+tWfn6vAqYzeZcLJTxLmwrAeXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGM0U5OTE0OTQ0NkNFOTA4Q0RBMTY3OEZEOTE4MENE
NDAyMEQxNjAeFw0yNDEyMDMxODM3MzhaFw0yNTEyMDIxODQyMzhaMDMxMTAvBgNV
BAMTKDBENDRDOUQ3QzY3MDZCRjcxNTQ3OTU2RDY1QUQ0NUQ1MDczMEREOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mVP26IbFgUfp08er3cBQTwbs
qCHEELYsXIlD5hJM57zk9//4eaeox/WlX66x69cug6xsc3nxQ7h2w5OGKOqIcNsI
qgpMZJxfdXBHayje25gSppBpH7FW+1Q/txCfnugAXTcsMKk2TRSK6iBlS45+qG0o
mDBm9egWj+0f9YS+U+IqvuE5Z9uwLyWukJxhJMy9Ef8nXnymRjxok7+W7ivfH8lz
1P7OuM8VZQ5kOe38U7Bkdab7xgdOr9I0VOrtBm9xlpUeqA3Q3MH+hu4CM+9CDMMj
9KSLeYMJBH7MrmglcjTQ1mnZUckNQc4bYEYLrnOvn2Qe1jgw/8ojiw6RetPbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDUTJ18Zwa/cVR5VtZa1F1Qcw3ZMwHwYDVR0j
BBgwFoAUlvPpkUlEbOkIzaFnj9kYDNQCDRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC85NkYzRTk5MTQ5NDQ2Q0U5MDhDREExNjc4RkQ5MTgwQ0Q0MDIwRDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjNFOTkxNDk0NDZDRTkw
OENEQTE2NzhGRDkxODBDRDQwMjBEMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzEzNzM3MmUzMTMyMzQyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzYzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsXxMMA0GCSqGSIb3DQEBCwUAA4IBAQB/q/6nNCpF
iXDfMtOUI+B5PaQ9RveesUww05XEZV8hiBwx2Kbhv7bQ/wk9VG8rVOTE5RC1R2M0
Z7kFk8EF7ufnO4N8eR1f0Pt3RQn9oLg3CX7SSmXVXbAAolmds6q3NS8vEVewVqJE
92WXWz0/dKWsdRquKQl3AG9E/Jk6rqHXCoXIO5QN0sj+9OfjMtrN3+fcxTF9ZSYm
9M7PicKXuVttxLcreN59oJv/9as1MZ5cy3LgkGlTqPO6hLVsCPCKoKyeR7Cen7/i
WN4lffBHdUIDA+VaQP4gBZybkdkgxm5BwwmsPRISAkO5GpRW4SQdbZu5eHV2d4Vt
Kk9Q5fLen0L9
-----END CERTIFICATE-----
Generated at Thu May 15 15:07:21 2025 by rpki-client