Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e352e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          8vpbAPJTNhKReVfjqcXy3yojUquLn2T796xTyCWOFo8=
Subject key identifier:   BB:BF:BD:8D:D2:A4:FC:06:57:33:59:6A:99:62:C4:29:85:03:45:DE
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       374559AEA8C69B7A18BB3D62EF2F26E07CC64C3F
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:16 +0000
ROA not before:           Thu 07 Nov 2024 20:35:16 +0000
ROA not after:            Thu 06 Nov 2025 20:40:16 +0000
asID:                     28270
IP address blocks:        177.67.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:45:59:ae:a8:c6:9b:7a:18:bb:3d:62:ef:2f:26:e0:7c:c6:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:16 2024 GMT
            Not After : Nov  6 20:40:16 2025 GMT
        Subject: CN=BBBFBD8DD2A4FC065733596A9962C429850345DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:e5:1d:24:ec:4b:9b:54:cb:aa:47:b4:c5:
                    40:f2:b8:77:ee:7a:d0:24:6d:ca:4b:58:59:e3:60:
                    75:f5:64:80:b8:8d:8c:14:d4:27:24:70:c5:04:a9:
                    1b:a1:98:6f:bb:89:43:2f:c7:7a:08:f9:34:3b:22:
                    d7:4d:da:18:66:2c:b2:d6:95:d8:ac:ce:c1:df:2c:
                    86:f0:62:c7:b1:00:ed:bc:ae:2d:7e:59:4b:5a:fe:
                    d6:60:d1:20:62:0a:bc:bd:6c:f7:02:16:d9:a6:44:
                    0f:d4:d5:39:f5:0c:15:95:fe:65:67:bb:8f:af:2c:
                    9a:88:16:23:ae:dc:c1:9d:13:19:81:c4:ee:df:b2:
                    a8:6f:11:32:77:88:b9:f9:fa:3f:c8:72:9b:d3:eb:
                    6d:81:ae:a6:52:4a:9c:fe:f1:5e:cc:3c:34:89:6d:
                    5d:0b:d9:fb:a1:5d:6a:1a:ed:02:74:ff:32:fc:cf:
                    54:c4:82:c0:4a:e7:b0:c1:3c:da:bc:f7:f7:98:54:
                    58:ab:76:cd:87:83:14:b2:e0:9d:b5:be:79:95:8d:
                    47:08:a6:99:8c:28:16:f2:b8:44:9c:01:38:c4:c2:
                    85:ab:20:b8:dc:c7:d6:18:7d:a8:48:45:dd:7e:b2:
                    cc:9d:9c:c3:07:22:ef:ac:d9:ac:d5:e0:70:7e:11:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:BD:8D:D2:A4:FC:06:57:33:59:6A:99:62:C4:29:85:03:45:DE
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:06:43:32:70:be:fa:cb:33:49:4e:ba:ac:a5:54:a8:ab:
         5c:49:0d:44:be:24:97:50:51:4e:dd:41:f1:b1:43:bf:61:ce:
         06:ec:03:9d:e1:e4:1c:cf:43:97:61:97:2d:36:45:83:18:34:
         ab:39:e1:f4:c2:4d:20:57:52:89:02:d9:db:84:bd:4d:89:46:
         10:04:99:b5:d4:1b:a3:57:65:b2:5a:8d:79:d8:11:aa:14:4e:
         e0:d9:dd:83:aa:00:c1:4a:72:17:3b:c3:bd:0c:e2:47:a8:33:
         bc:70:d2:3f:b0:c1:87:02:b1:46:c5:db:a5:82:ce:1a:05:56:
         5f:86:74:b9:08:85:6d:4d:f0:2f:7e:11:0b:a5:14:26:6f:83:
         39:8d:29:7c:c4:43:44:dd:34:6f:c4:c6:fc:34:da:d6:58:e1:
         c1:da:5e:fa:05:0e:b6:c2:b4:ba:49:2b:22:76:6c:68:a9:fc:
         39:e0:d0:02:b4:ee:1d:45:3a:58:8a:1c:1a:5b:94:39:08:c8:
         95:cd:14:be:27:1b:13:79:a2:d8:4e:65:63:57:ad:bc:c3:8d:
         b6:9b:c2:fc:72:17:2b:30:fc:36:60:3e:e4:be:54:fc:4e:1e:
         53:51:62:b9:b2:81:50:a7:12:7c:1c:0f:6e:1b:81:d1:b3:34:
         e2:00:79:61
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUN0VZrqjGm3oYuz1i7y8m4HzGTD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTZaFw0yNTExMDYyMDQwMTZaMDMxMTAvBgNV
BAMTKEJCQkZCRDhERDJBNEZDMDY1NzMzNTk2QTk5NjJDNDI5ODUwMzQ1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiK+UdJOxLm1TLqke0xUDyuHfu
etAkbcpLWFnjYHX1ZIC4jYwU1CckcMUEqRuhmG+7iUMvx3oI+TQ7ItdN2hhmLLLW
ldiszsHfLIbwYsexAO28ri1+WUta/tZg0SBiCry9bPcCFtmmRA/U1Tn1DBWV/mVn
u4+vLJqIFiOu3MGdExmBxO7fsqhvETJ3iLn5+j/IcpvT622BrqZSSpz+8V7MPDSJ
bV0L2fuhXWoa7QJ0/zL8z1TEgsBK57DBPNq89/eYVFirds2HgxSy4J21vnmVjUcI
ppmMKBbyuEScATjEwoWrILjcx9YYfahIRd1+ssydnMMHIu+s2azV4HB+EfwFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUu7+9jdKk/AZXM1lqmWLEKYUDRd4wHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxQwUwDQYJKoZIhvcNAQELBQADggEBAET2BkMycL76yzNJ
TrqspVSoq1xJDUS+JJdQUU7dQfGxQ79hzgbsA53h5BzPQ5dhly02RYMYNKs54fTC
TSBXUokC2duEvU2JRhAEmbXUG6NXZbJajXnYEaoUTuDZ3YOqAMFKchc7w70M4keo
M7xw0j+wwYcCsUbF26WCzhoFVl+GdLkIhW1N8C9+EQulFCZvgzmNKXzEQ0TdNG/E
xvw02tZY4cHaXvoFDrbCtLpJKyJ2bGip/Dng0AK07h1FOliKHBpblDkIyJXNFL4n
GxN5othOZWNXrbzDjbabwvxyFysw/DZgPuS+VPxOHlNRYrmygVCnEnwcD24bgdGz
NOIAeWE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:12:59 2025 by rpki-client