Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3232203d3e203532363939.roa
File:                     3137372e3232332e302e302f32302d3232203d3e203532363939.roa (raw, json)
Hash identifier:          BCll99Z85NzZIMRWGy7jhC5pSg6XnXtjOyU4RwNtf5k=
Subject key identifier:   4C:37:0E:C6:F4:02:E8:E2:65:E0:44:01:2A:5A:27:C8:23:7B:B1:92
Certificate issuer:       /CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
Certificate serial:       537333C5EA3A5A1622616A5178CF3CEE3C391C50
Authority key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3232203d3e203532363939.roa
Signing time:             Sat 21 Dec 2024 16:14:53 +0000
ROA not before:           Sat 21 Dec 2024 16:09:53 +0000
ROA not after:            Sat 20 Dec 2025 16:14:53 +0000
asID:                     52699
IP address blocks:        177.223.0.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:33:c5:ea:3a:5a:16:22:61:6a:51:78:cf:3c:ee:3c:39:1c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
        Validity
            Not Before: Dec 21 16:09:53 2024 GMT
            Not After : Dec 20 16:14:53 2025 GMT
        Subject: CN=4C370EC6F402E8E265E044012A5A27C8237BB192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:2b:cc:ce:ee:7b:83:25:09:2c:c2:41:e3:
                    e4:f9:b3:da:67:0f:47:f1:6d:da:0f:03:c6:fb:4c:
                    7b:43:05:90:a5:a6:a1:d8:9f:37:c0:0b:9e:bd:3e:
                    67:25:db:2c:da:d9:97:90:f5:81:d1:ba:2e:dd:e4:
                    6a:4d:77:b2:97:55:40:39:af:f9:05:3d:61:22:f5:
                    a3:d7:1e:2a:be:51:51:58:57:61:96:b1:d6:c8:a4:
                    bb:a0:fd:24:9f:b5:20:21:1f:76:61:84:0a:5b:62:
                    63:9f:4f:10:50:ab:15:38:ef:e2:c6:cb:8f:60:94:
                    e6:48:ee:8b:27:be:d6:28:af:ef:ea:8a:26:e0:ff:
                    b5:0e:92:df:9d:bd:20:50:11:a1:d1:86:53:a9:b4:
                    2b:e1:62:39:20:e1:60:ee:56:0b:64:2d:80:97:37:
                    28:da:74:13:7a:6f:4b:98:f9:76:12:92:04:84:06:
                    aa:2f:2b:e1:58:fd:67:7d:a7:a4:94:93:db:fd:fe:
                    71:57:1e:a7:28:50:f4:5d:6d:ad:21:37:c4:6c:e6:
                    f3:7d:2c:e8:c4:e8:0a:8b:c2:b8:4e:d7:a8:19:a8:
                    ac:a4:1e:c3:d7:20:91:9c:ba:59:6e:f1:6d:1d:61:
                    87:81:56:30:3a:83:84:38:ba:e1:f7:6b:39:d4:5f:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:0E:C6:F4:02:E8:E2:65:E0:44:01:2A:5A:27:C8:23:7B:B1:92
            X509v3 Authority Key Identifier:
                keyid:ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3232203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:a7:9c:8b:90:08:de:43:41:a4:0a:6f:59:bb:ef:0c:bb:83:
         bb:73:8f:8f:c0:f6:11:f9:b6:43:d2:f4:f4:93:49:d3:23:e8:
         77:ba:9f:d0:46:ec:a1:93:8b:83:18:a4:f6:ff:0d:dd:88:10:
         03:4f:a1:ae:27:34:7f:5c:b0:03:dc:88:c4:14:dd:e7:2d:0c:
         87:b7:5d:57:62:fc:8a:a4:54:36:1b:01:e0:b0:a1:e4:a2:3d:
         b2:2e:3f:1d:e5:0e:a3:2d:6b:ce:a7:45:c7:61:25:f4:68:dc:
         8c:18:4c:a9:0c:14:a3:fe:e6:73:f6:bf:98:f5:33:1b:70:68:
         33:a0:0e:44:c2:fd:dd:0c:46:44:39:4d:26:71:d1:03:7c:06:
         9b:8f:c3:94:3a:11:74:f3:50:15:d7:04:f9:bc:1f:47:f9:da:
         4a:f4:a0:33:78:e3:9c:4e:46:15:2f:4c:c5:3c:04:72:ac:2d:
         2d:83:c2:da:ca:99:fc:c0:c7:6b:4b:40:c8:30:30:0a:8a:b4:
         ce:f4:c8:bb:0d:40:2e:f3:e1:b8:9e:50:0c:62:74:77:ad:fc:
         2b:19:90:63:46:2d:81:a5:58:cb:c0:3b:73:e7:7c:bd:ab:27:
         0f:1f:03:53:6f:2d:8a:b3:67:a3:01:6a:1e:e8:07:fd:dc:6b:
         f1:e5:1f:8d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU3Mzxeo6WhYiYWpReM887jw5HFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ5RkRCODVCRkM4MEMwQTRDQjk0QjAwN0U3NUM2QjQy
NzlEQ0IwMjAeFw0yNDEyMjExNjA5NTNaFw0yNTEyMjAxNjE0NTNaMDMxMTAvBgNV
BAMTKDRDMzcwRUM2RjQwMkU4RTI2NUUwNDQwMTJBNUEyN0M4MjM3QkIxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColCvMzu57gyUJLMJB4+T5s9pn
D0fxbdoPA8b7THtDBZClpqHYnzfAC569Pmcl2yza2ZeQ9YHRui7d5GpNd7KXVUA5
r/kFPWEi9aPXHiq+UVFYV2GWsdbIpLug/SSftSAhH3ZhhApbYmOfTxBQqxU47+LG
y49glOZI7osnvtYor+/qiibg/7UOkt+dvSBQEaHRhlOptCvhYjkg4WDuVgtkLYCX
NyjadBN6b0uY+XYSkgSEBqovK+FY/Wd9p6SUk9v9/nFXHqcoUPRdba0hN8Rs5vN9
LOjE6AqLwrhO16gZqKykHsPXIJGcullu8W0dYYeBVjA6g4Q4uuH3aznUX2yhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTDcOxvQC6OJl4EQBKlonyCN7sZIwHwYDVR0j
BBgwFoAU7Z/bhb/IDApMuUsAfnXGtCedywIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhwbWNIQUpaUENlU2NpOFVjRFhhU01adEtqTTlqejZ3c0t1dndwUGZn
MVEvMC9FRDlGREI4NUJGQzgwQzBBNENCOTRCMDA3RTc1QzZCNDI3OURDQjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEOUZEQjg1QkZDODBDMEE0
Q0I5NEIwMDdFNzVDNkI0Mjc5RENCMDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM4cG1jSEFKWlBDZVNjaThVY0RYYVNNWnRLak05ano2d3NLdXZ3cFBmZzFRLzAv
MzEzNzM3MmUzMjMyMzMyZTMwMmUzMDJmMzIzMDJkMzIzMjIwM2QzZTIwMzUzMjM2
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLHfADANBgkqhkiG9w0BAQsFAAOCAQEAoaeci5AI3kNB
pApvWbvvDLuDu3OPj8D2Efm2Q9L09JNJ0yPod7qf0EbsoZOLgxik9v8N3YgQA0+h
ric0f1ywA9yIxBTd5y0Mh7ddV2L8iqRUNhsB4LCh5KI9si4/HeUOoy1rzqdFx2El
9GjcjBhMqQwUo/7mc/a/mPUzG3BoM6AORML93QxGRDlNJnHRA3wGm4/DlDoRdPNQ
FdcE+bwfR/naSvSgM3jjnE5GFS9MxTwEcqwtLYPC2sqZ/MDHa0tAyDAwCoq0zvTI
uw1ALvPhuJ5QDGJ0d638KxmQY0YtgaVYy8A7c+d8vasnDx8DU28tirNnowFqHugH
/dxr8eUfjQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:53 2025 by rpki-client