Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa
File:                     3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (raw, json)
Hash identifier:          wIV2/wL6lihesQ313z2vEBTVMqAU+CX0lMkYkyWVI0Q=
Subject key identifier:   50:E5:3E:D3:7F:8E:EC:FC:7E:97:6E:20:C5:86:15:45:38:1D:F3:D9
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       7919E67A4251FAB14273E9829CAE86EBBD906622
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa
Signing time:             Sat 25 Jan 2025 14:21:52 +0000
ROA not before:           Sat 25 Jan 2025 14:16:52 +0000
ROA not after:            Sat 24 Jan 2026 14:21:52 +0000
asID:                     263606
IP address blocks:        177.136.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:e6:7a:42:51:fa:b1:42:73:e9:82:9c:ae:86:eb:bd:90:66:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Jan 25 14:16:52 2025 GMT
            Not After : Jan 24 14:21:52 2026 GMT
        Subject: CN=50E53ED37F8EECFC7E976E20C5861545381DF3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:01:06:db:20:64:3f:1c:f9:01:d2:01:d5:
                    aa:c8:38:e2:21:74:a8:e6:c6:49:22:31:02:34:17:
                    6f:12:a6:37:0b:44:bc:3f:bb:b2:87:51:38:c9:db:
                    12:cf:07:2e:62:98:c1:4d:af:43:b5:94:4f:9c:f6:
                    7b:5d:3f:1e:eb:6d:25:b2:f5:b8:bb:a2:74:8e:9f:
                    ac:42:b9:f4:eb:b5:dd:d1:3b:3e:de:12:82:e4:a3:
                    5a:44:14:cd:c3:46:33:46:ec:65:49:17:8b:3c:ec:
                    81:d3:3b:4d:60:f2:01:1c:33:7f:81:31:59:4b:eb:
                    af:06:93:01:b0:10:62:ab:88:61:1d:8c:17:c2:37:
                    31:09:e3:b0:90:07:d6:8d:e2:56:04:ff:ce:af:77:
                    7c:e3:43:5d:b6:1a:6f:4b:29:8f:c4:17:cc:4a:b8:
                    63:14:5e:67:e9:31:3e:1c:95:89:28:ae:aa:90:48:
                    6d:c3:a3:e7:f9:1a:03:1a:83:93:81:26:ae:33:c1:
                    9a:68:39:9a:56:a1:46:fb:c7:77:27:f9:c6:4d:ff:
                    3d:8e:fd:3f:86:51:76:12:a5:04:8a:a7:ce:88:e3:
                    c6:f4:ef:9b:0f:94:15:0a:23:db:67:5b:de:89:c3:
                    cd:0a:c1:76:42:36:72:11:15:10:d4:e1:88:ee:9d:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:3E:D3:7F:8E:EC:FC:7E:97:6E:20:C5:86:15:45:38:1D:F3:D9
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:58:36:7a:17:80:25:8b:2a:bc:ad:c3:cc:9e:c4:11:60:bb:
         df:67:3d:07:90:27:cd:fd:50:c4:68:b1:60:5a:75:5c:ef:6b:
         17:0e:38:d6:16:26:ba:34:ba:61:7c:8a:8f:99:1a:01:58:58:
         0b:2c:20:51:f8:31:1b:48:d6:01:cb:d2:31:d7:d8:0b:48:61:
         f7:9d:a7:b6:a8:36:7f:7e:b4:f0:2e:eb:68:47:ea:e8:72:fa:
         61:1a:ac:0f:a4:6c:06:d0:6b:8d:55:bc:33:1c:6b:ad:6f:90:
         3f:35:1e:8d:b4:85:41:2f:81:94:ae:a3:df:bb:80:3d:5d:5a:
         ce:94:d0:18:6b:95:b3:1c:4c:f9:45:21:49:22:1c:17:29:b4:
         08:5b:ab:59:cf:e5:ef:2f:6d:6d:89:ad:3b:79:5e:7f:0f:dd:
         cf:bf:8a:14:65:99:68:28:95:76:76:db:2a:e5:c3:14:ff:da:
         31:ac:3c:7b:7d:eb:65:3a:70:15:90:4b:ce:18:f4:4d:c8:63:
         a5:ab:a0:29:09:ed:ff:01:2d:73:0f:be:cd:9a:f0:76:00:ed:
         4a:d8:58:82:85:0f:aa:9a:66:39:6f:ad:2c:c1:63:d3:db:4c:
         43:89:2c:b4:50:3f:c7:1f:52:70:d7:fa:5b:b8:9e:b3:99:4a:
         16:4c:f0:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeRnmekJR+rFCc+mCnK6G672QZiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYxNTc1RjYwMjQyRTQ4MDMwQkMzNUE3NzE4NzFFQjQ3
QzZFRkY1NTAeFw0yNTAxMjUxNDE2NTJaFw0yNjAxMjQxNDIxNTJaMDMxMTAvBgNV
BAMTKDUwRTUzRUQzN0Y4RUVDRkM3RTk3NkUyMEM1ODYxNTQ1MzgxREYzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIgEG2yBkPxz5AdIB1arIOOIh
dKjmxkkiMQI0F28SpjcLRLw/u7KHUTjJ2xLPBy5imMFNr0O1lE+c9ntdPx7rbSWy
9bi7onSOn6xCufTrtd3ROz7eEoLko1pEFM3DRjNG7GVJF4s87IHTO01g8gEcM3+B
MVlL668GkwGwEGKriGEdjBfCNzEJ47CQB9aN4lYE/86vd3zjQ122Gm9LKY/EF8xK
uGMUXmfpMT4clYkorqqQSG3Do+f5GgMag5OBJq4zwZpoOZpWoUb7x3cn+cZN/z2O
/T+GUXYSpQSKp86I48b075sPlBUKI9tnW96Jw80KwXZCNnIRFRDU4YjunVMdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUOU+03+O7Px+l24gxYYVRTgd89kwHwYDVR0j
BBgwFoAUVhV19gJC5IAwvDWncYcetHxu/1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZ6cnNrckFkeHhOWnhXaVJiN0JjVVpHTW5lRTExUTZQa1FKdmpOWTFm
ZTIvMC81NjE1NzVGNjAyNDJFNDgwMzBCQzM1QTc3MTg3MUVCNDdDNkVGRjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2MTU3NUY2MDI0MkU0ODAz
MEJDMzVBNzcxODcxRUI0N0M2RUZGNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGenJza3JBZHh4Tlp4V2lSYjdCY1VaR01uZUUxMVE2UGtRSnZqTlkxZmUyLzAv
MzEzNzM3MmUzMTMzMzYyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxiEgwDQYJKoZIhvcNAQELBQADggEBABVYNnoX
gCWLKrytw8yexBFgu99nPQeQJ839UMRosWBadVzvaxcOONYWJro0umF8io+ZGgFY
WAssIFH4MRtI1gHL0jHX2AtIYfedp7aoNn9+tPAu62hH6uhy+mEarA+kbAbQa41V
vDMca61vkD81Ho20hUEvgZSuo9+7gD1dWs6U0BhrlbMcTPlFIUkiHBcptAhbq1nP
5e8vbW2JrTt5Xn8P3c+/ihRlmWgolXZ22yrlwxT/2jGsPHt962U6cBWQS84Y9E3I
Y6WroCkJ7f8BLXMPvs2a8HYA7UrYWIKFD6qaZjlvrSzBY9PbTEOJLLRQP8cfUnDX
+lu4nrOZShZM8OQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:55:01 2025 by rpki-client