Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35302e302f32332d3233203d3e20323634323136.roa
File:                     3137372e38362e35302e302f32332d3233203d3e20323634323136.roa (raw, json)
Hash identifier:          nzzFl3cJ6f9LYUPTe8N4pnmAwfCqQj+7UVUH/dxn8Xc=
Subject key identifier:   D7:60:F4:A9:E2:22:80:45:D6:90:63:9D:B7:0C:F2:C1:F8:6B:AF:8E
Certificate issuer:       /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial:       30A24BC016F15B32AD0297ABFEDFF7F1C477FCB9
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35302e302f32332d3233203d3e20323634323136.roa
Signing time:             Tue 20 Feb 2024 12:18:42 +0000
ROA not before:           Tue 20 Feb 2024 12:13:42 +0000
ROA not after:            Tue 18 Feb 2025 12:18:42 +0000
asID:                     264216
IP address blocks:        177.86.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a2:4b:c0:16:f1:5b:32:ad:02:97:ab:fe:df:f7:f1:c4:77:fc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
        Validity
            Not Before: Feb 20 12:13:42 2024 GMT
            Not After : Feb 18 12:18:42 2025 GMT
        Subject: CN=D760F4A9E2228045D690639DB70CF2C1F86BAF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:db:82:a3:a4:89:2d:34:e6:6c:57:a2:91:
                    37:d2:9f:83:aa:7b:b4:a7:67:ed:e0:aa:c3:16:38:
                    9a:87:d0:9c:47:42:6e:09:ee:f5:28:d0:5c:b9:0e:
                    14:e4:60:49:db:82:fe:59:05:f8:c9:87:e3:97:e5:
                    a7:8e:10:71:74:c1:73:a4:5c:45:0f:70:d4:81:c9:
                    7e:d1:ef:39:7b:00:2b:9a:d4:5c:83:26:72:e5:76:
                    dc:a5:bc:d4:cd:fe:9e:3a:52:54:bd:9d:22:90:3c:
                    d0:4f:68:da:04:b5:99:a5:f8:9f:82:3f:28:ab:da:
                    ef:dc:fd:f1:14:0e:28:41:be:69:5a:d9:f2:28:02:
                    b3:07:61:af:fb:a0:e0:65:18:00:c1:a7:7f:48:d9:
                    c2:f9:ca:f9:c8:85:16:05:8f:75:0b:f0:06:45:7a:
                    ef:f4:a5:66:a2:9a:48:2d:d3:1f:da:f0:84:d1:b7:
                    3c:31:8a:7d:9a:39:e2:09:cf:7b:2a:1b:e0:60:ee:
                    da:82:88:f5:bc:66:1e:7b:70:ba:85:e5:12:e7:76:
                    e1:27:54:48:6e:0d:92:a0:9a:32:48:ce:4f:63:9a:
                    47:63:04:27:bd:61:b2:43:a0:b4:68:94:14:58:62:
                    4d:8c:72:73:62:eb:32:3c:cd:81:9e:ff:b5:7e:1b:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:F4:A9:E2:22:80:45:D6:90:63:9D:B7:0C:F2:C1:F8:6B:AF:8E
            X509v3 Authority Key Identifier:
                keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e35302e302f32332d3233203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:47:ad:f6:a2:d0:0d:15:fd:8a:1a:3f:7e:bc:d2:dc:4a:4e:
         cb:7e:47:fa:b2:1d:ed:31:f2:1a:d4:fe:e2:a6:bf:38:32:5f:
         f6:80:83:72:f5:96:2e:71:31:b6:eb:2e:1c:fb:1d:2e:3f:42:
         d0:ac:dd:d9:cb:6f:f6:ba:3e:6c:14:aa:fb:e6:99:22:4f:21:
         79:a0:f1:dd:8c:a2:41:07:2e:b2:6f:ec:fe:01:7d:a7:76:c8:
         e3:d3:5e:58:0d:00:f0:91:dc:51:b8:61:d8:cd:7d:3c:9e:91:
         79:60:57:0e:79:9d:23:d4:d7:93:ad:f5:e3:b0:de:2b:73:e5:
         5a:04:e8:2d:8f:ca:e7:cc:35:9a:dc:eb:dd:3d:2a:cc:67:2f:
         15:5b:c3:13:02:a2:af:d0:56:36:61:93:dc:3d:dc:d3:0a:d5:
         31:e9:c0:45:6c:6a:72:3c:a2:be:eb:8f:34:39:dd:44:27:ba:
         64:94:e9:05:98:48:bd:8f:6f:14:98:86:10:39:36:04:26:d6:
         d2:f4:39:09:d3:63:5c:ab:01:07:d7:17:72:40:b4:2f:50:d8:
         d1:81:79:56:d0:ed:07:22:f6:16:1a:e3:bb:a9:18:7c:cd:c0:
         5d:40:44:cc:4c:94:5f:22:7d:ef:91:9a:25:03:79:23:88:1d:
         c4:3b:7a:0f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMKJLwBbxWzKtAper/t/38cR3/LkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMUNFNEMzNjUyNzcwRDgwMUM1MDYzNzI0Q0M3MzQy
QjNGNTcyRjAeFw0yNDAyMjAxMjEzNDJaFw0yNTAyMTgxMjE4NDJaMDMxMTAvBgNV
BAMTKEQ3NjBGNEE5RTIyMjgwNDVENjkwNjM5REI3MENGMkMxRjg2QkFGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxytuCo6SJLTTmbFeikTfSn4Oq
e7SnZ+3gqsMWOJqH0JxHQm4J7vUo0Fy5DhTkYEnbgv5ZBfjJh+OX5aeOEHF0wXOk
XEUPcNSByX7R7zl7ACua1FyDJnLldtylvNTN/p46UlS9nSKQPNBPaNoEtZml+J+C
Pyir2u/c/fEUDihBvmla2fIoArMHYa/7oOBlGADBp39I2cL5yvnIhRYFj3UL8AZF
eu/0pWaimkgt0x/a8ITRtzwxin2aOeIJz3sqG+Bg7tqCiPW8Zh57cLqF5RLnduEn
VEhuDZKgmjJIzk9jmkdjBCe9YbJDoLRolBRYYk2McnNi6zI8zYGe/7V+G18bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU12D0qeIigEXWkGOdtwzywfhrr44wHwYDVR0j
BBgwFoAU0rHOTDZSdw2AHFBjckzHNCs/Vy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq
U1MvMC9EMkIxQ0U0QzM2NTI3NzBEODAxQzUwNjM3MjRDQzczNDJCM0Y1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQjFDRTRDMzY1Mjc3MEQ4
MDFDNTA2MzcyNENDNzM0MkIzRjU3MkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d3RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAv
MzEzNzM3MmUzODM2MmUzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVYyMA0GCSqGSIb3DQEBCwUAA4IBAQBZR632otAN
Ff2KGj9+vNLcSk7Lfkf6sh3tMfIa1P7ipr84Ml/2gINy9ZYucTG26y4c+x0uP0LQ
rN3Zy2/2uj5sFKr75pkiTyF5oPHdjKJBBy6yb+z+AX2ndsjj015YDQDwkdxRuGHY
zX08npF5YFcOeZ0j1NeTrfXjsN4rc+VaBOgtj8rnzDWa3OvdPSrMZy8VW8MTAqKv
0FY2YZPcPdzTCtUx6cBFbGpyPKK+6480Od1EJ7pklOkFmEi9j28UmIYQOTYEJtbS
9DkJ02NcqwEH1xdyQLQvUNjRgXlW0O0HIvYWGuO7qRh8zcBdQETMTJRfIn3vkZol
A3kjiB3EO3oP
-----END CERTIFICATE-----
Generated at Wed May 14 07:57:20 2025 by rpki-client