Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          KRGsW5+5GdOUvg+9B1o3UxZixOEO7i67V/n2dVxqNV4=
Subject key identifier:   37:BA:7B:4D:63:F1:65:E5:C5:CB:5E:0E:CC:E8:B3:D2:40:45:6B:EB
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       175EB9CDD2F1D09020DF7B9C531CE1513F855F87
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:31 +0000
ROA not before:           Thu 06 Mar 2025 18:48:31 +0000
ROA not after:            Thu 05 Mar 2026 18:53:31 +0000
asID:                     61672
IP address blocks:        177.11.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5e:b9:cd:d2:f1:d0:90:20:df:7b:9c:53:1c:e1:51:3f:85:5f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:31 2025 GMT
            Not After : Mar  5 18:53:31 2026 GMT
        Subject: CN=37BA7B4D63F165E5C5CB5E0ECCE8B3D240456BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:50:98:10:99:6a:70:5c:28:97:0b:e9:7f:
                    2a:6e:55:58:fd:1f:f2:11:fe:cc:b2:dd:16:ae:93:
                    d5:4b:4f:31:6e:ae:2b:8b:0c:65:98:3b:d2:5e:af:
                    38:bb:09:56:68:ce:1c:c3:b5:86:a8:df:0b:57:a1:
                    cf:36:4c:d6:ad:f8:cf:9d:45:86:20:19:e9:25:e5:
                    d4:82:90:18:55:cd:2b:50:d5:44:ea:0a:bd:9b:65:
                    1d:93:3b:79:3c:cb:22:de:f8:47:8a:c4:13:6b:cf:
                    26:ab:3d:69:c7:84:e3:5a:d3:e2:b2:9d:11:df:9f:
                    1f:7b:55:2b:fc:a0:de:3b:1d:12:ef:a6:1a:02:00:
                    01:4b:46:27:a9:75:ed:46:e0:e5:22:d9:e8:52:9e:
                    cd:88:60:ab:39:2d:f8:2f:10:c8:c0:0c:3c:63:bb:
                    ab:20:9d:dc:b3:63:01:8d:09:e2:57:a9:1f:4e:33:
                    4e:56:5f:fe:c5:ff:50:3e:06:b7:87:8e:c2:6b:6d:
                    41:12:fb:da:9f:5e:9d:b0:2d:a6:aa:9d:b8:e3:fa:
                    08:7d:e8:d3:da:80:9b:2f:3c:bb:e8:bf:e0:d9:c8:
                    7a:c3:bc:d8:c5:4a:9b:69:c6:39:69:e1:f8:b6:8f:
                    4d:a3:ed:97:91:f7:c6:9e:b2:23:48:30:78:ef:33:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:7B:4D:63:F1:65:E5:C5:CB:5E:0E:CC:E8:B3:D2:40:45:6B:EB
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:73:b5:28:d8:99:de:15:ae:1a:c5:ab:10:58:c7:a2:47:
         b8:ef:3b:48:52:dd:d3:ef:61:d1:af:7f:af:4d:3e:bd:b0:e3:
         3c:16:30:62:4c:5d:8b:2c:54:6c:c7:34:91:95:6a:e5:63:a1:
         48:a9:d3:ab:29:34:98:bc:9d:d2:65:e9:db:3b:6c:97:13:ef:
         c8:8b:73:b7:20:9d:18:ba:44:6d:cb:40:cb:b4:1c:82:6c:af:
         69:a7:55:ee:11:63:66:15:88:af:48:5f:93:98:d3:bb:8b:fa:
         23:21:95:3a:12:8f:cd:98:5c:d3:d4:2a:f7:84:f7:ab:1e:a0:
         c8:9c:63:d8:f9:d8:f7:a6:01:65:25:de:62:d2:12:c5:57:b3:
         94:13:e6:92:f8:81:ba:15:12:6f:6f:cb:a0:b8:e7:35:44:2b:
         ac:17:cc:83:41:80:f4:11:86:2d:73:8a:8d:81:5a:54:06:18:
         90:32:96:82:47:64:39:c8:c9:42:84:47:10:72:9a:96:dd:9a:
         35:bd:ed:c0:64:5d:16:af:cf:e6:cd:99:29:0b:f6:66:7d:1d:
         84:5f:86:70:17:d7:33:e7:cb:79:fd:92:fa:63:1d:9f:7e:74:
         b7:44:0a:c2:f7:4f:61:3c:97:21:64:11:ec:2d:ff:77:00:dd:
         41:bb:c7:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF165zdLx0JAg33ucUxzhUT+FX4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNTAzMDYxODQ4MzFaFw0yNjAzMDUxODUzMzFaMDMxMTAvBgNV
BAMTKDM3QkE3QjRENjNGMTY1RTVDNUNCNUUwRUNDRThCM0QyNDA0NTZCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58VCYEJlqcFwolwvpfypuVVj9
H/IR/syy3Rauk9VLTzFuriuLDGWYO9Jerzi7CVZozhzDtYao3wtXoc82TNat+M+d
RYYgGekl5dSCkBhVzStQ1UTqCr2bZR2TO3k8yyLe+EeKxBNrzyarPWnHhONa0+Ky
nRHfnx97VSv8oN47HRLvphoCAAFLRiepde1G4OUi2ehSns2IYKs5LfgvEMjADDxj
u6sgndyzYwGNCeJXqR9OM05WX/7F/1A+BreHjsJrbUES+9qfXp2wLaaqnbjj+gh9
6NPagJsvPLvov+DZyHrDvNjFSptpxjlp4fi2j02j7ZeR98aesiNIMHjvM42fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUN7p7TWPxZeXFy14OzOiz0kBFa+swHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzEzNzM3MmUzMTMxMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQtkMA0GCSqGSIb3DQEBCwUAA4IBAQBOMnO1KNiZ
3hWuGsWrEFjHoke47ztIUt3T72HRr3+vTT69sOM8FjBiTF2LLFRsxzSRlWrlY6FI
qdOrKTSYvJ3SZenbO2yXE+/Ii3O3IJ0YukRty0DLtByCbK9pp1XuEWNmFYivSF+T
mNO7i/ojIZU6Eo/NmFzT1Cr3hPerHqDInGPY+dj3pgFlJd5i0hLFV7OUE+aS+IG6
FRJvb8uguOc1RCusF8yDQYD0EYYtc4qNgVpUBhiQMpaCR2Q5yMlChEcQcpqW3Zo1
ve3AZF0Wr8/mzZkpC/ZmfR2EX4ZwF9cz58t5/ZL6Yx2ffnS3RArC909hPJchZBHs
Lf93AN1Bu8fQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:44 2025 by rpki-client