Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          jx3f9GYdBopYer2ibSR4RcYL4ifyFvE0MA6iKRBSaOc=
Subject key identifier:   5D:2A:63:22:AD:E1:A0:40:62:9F:55:12:99:5C:B1:3E:00:EC:D0:43
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       4CE9BD7456BBCEA97109244C386E6F8EC8AA69B2
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:04 +0000
ROA not before:           Wed 05 Mar 2025 23:55:04 +0000
ROA not after:            Thu 05 Mar 2026 00:00:04 +0000
asID:                     52653
IP address blocks:        177.221.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:bd:74:56:bb:ce:a9:71:09:24:4c:38:6e:6f:8e:c8:aa:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:04 2025 GMT
            Not After : Mar  5 00:00:04 2026 GMT
        Subject: CN=5D2A6322ADE1A040629F5512995CB13E00ECD043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:44:cd:75:b5:bb:50:92:53:6c:4b:ec:e7:
                    6c:3f:16:a5:15:97:e7:d5:3a:43:dc:a6:4e:65:f4:
                    0e:30:82:69:df:5f:20:6e:1f:ed:af:ce:5d:35:89:
                    cc:bb:95:d5:d9:44:bd:d7:4e:5e:6b:a5:7f:a6:20:
                    e5:0b:dc:69:bd:87:c3:3e:9a:b2:bc:02:60:55:14:
                    78:a7:db:9b:66:d8:d0:7c:7f:b5:8d:0a:8d:94:a8:
                    e0:21:a0:cf:f2:30:e5:9c:d4:fb:92:cf:78:e8:45:
                    09:01:1a:da:b6:b7:bd:36:ca:5a:76:11:51:e7:c5:
                    81:ef:fa:1b:99:14:59:ec:ad:43:11:48:ae:4f:94:
                    db:fe:7f:02:91:6d:d9:35:9b:b5:75:89:68:d0:77:
                    12:8a:19:18:b6:cf:b8:79:d2:8e:d1:5e:1f:a7:1d:
                    10:c9:d6:dd:b1:c0:67:06:00:8b:dc:2e:4a:6d:9e:
                    16:2f:ca:b7:d3:b9:8c:f5:21:0a:40:bc:d3:46:3d:
                    50:65:d2:b1:48:98:94:0f:81:53:9d:60:28:32:f9:
                    4e:39:92:38:3d:33:52:55:01:bf:cc:1a:1c:6d:3f:
                    d2:21:68:08:fb:bb:c1:67:9f:b3:74:9f:c9:1c:88:
                    3b:63:ba:2a:92:1e:7c:a8:0b:5d:e9:3a:e3:17:13:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:63:22:AD:E1:A0:40:62:9F:55:12:99:5C:B1:3E:00:EC:D0:43
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:63:ec:ee:95:5f:a1:dc:09:7d:d0:ed:1d:a6:16:f8:6b:78:
         f8:fa:a5:c6:d3:70:b9:6f:66:24:f5:d8:67:75:0f:2b:5a:91:
         c7:02:cb:d8:e9:96:82:d6:b3:91:a8:2b:eb:14:f4:41:1b:d4:
         05:a5:54:49:46:18:83:f5:03:4f:e0:be:2a:d6:b5:9a:1f:e4:
         97:0c:d0:09:15:69:a5:12:8d:f7:0c:53:0d:34:c6:ad:32:7c:
         b4:f6:73:a9:65:45:04:bb:ca:11:6d:09:aa:ec:99:e3:08:da:
         3d:cd:98:8c:de:b3:2c:97:41:16:77:11:ff:a9:d9:69:7e:53:
         89:53:af:39:a7:82:ff:19:25:d0:12:ad:2a:4c:7f:7d:8b:2f:
         ab:2a:92:64:32:c8:c1:3e:31:a6:cd:0b:63:5a:2b:97:75:96:
         7c:7a:21:26:4a:4e:70:58:b7:c7:de:31:a6:8b:03:f7:ac:68:
         a7:6e:ba:c6:82:7d:c2:05:aa:ed:d9:ae:b1:90:0a:6a:53:31:
         37:b0:c2:71:23:67:6b:21:b6:ec:ce:03:59:67:6c:01:c8:55:
         40:32:4f:eb:b2:1b:0f:b2:b3:8f:25:c8:3d:a7:c1:5f:14:82:
         ff:37:47:2e:65:d7:bc:0b:4f:ca:d9:06:68:98:d4:a8:cc:93:
         67:70:b6:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTOm9dFa7zqlxCSRMOG5vjsiqabIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDRaFw0yNjAzMDUwMDAwMDRaMDMxMTAvBgNV
BAMTKDVEMkE2MzIyQURFMUEwNDA2MjlGNTUxMjk5NUNCMTNFMDBFQ0QwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcokTNdbW7UJJTbEvs52w/FqUV
l+fVOkPcpk5l9A4wgmnfXyBuH+2vzl01icy7ldXZRL3XTl5rpX+mIOUL3Gm9h8M+
mrK8AmBVFHin25tm2NB8f7WNCo2UqOAhoM/yMOWc1PuSz3joRQkBGtq2t702ylp2
EVHnxYHv+huZFFnsrUMRSK5PlNv+fwKRbdk1m7V1iWjQdxKKGRi2z7h50o7RXh+n
HRDJ1t2xwGcGAIvcLkptnhYvyrfTuYz1IQpAvNNGPVBl0rFImJQPgVOdYCgy+U45
kjg9M1JVAb/MGhxtP9IhaAj7u8Fnn7N0n8kciDtjuiqSHnyoC13pOuMXE92hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXSpjIq3hoEBin1USmVyxPgDs0EMwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1TMA0GCSqGSIb3DQEBCwUAA4IBAQAnY+zulV+h
3Al90O0dphb4a3j4+qXG03C5b2Yk9dhndQ8rWpHHAsvY6ZaC1rORqCvrFPRBG9QF
pVRJRhiD9QNP4L4q1rWaH+SXDNAJFWmlEo33DFMNNMatMny09nOpZUUEu8oRbQmq
7JnjCNo9zZiM3rMsl0EWdxH/qdlpflOJU685p4L/GSXQEq0qTH99iy+rKpJkMsjB
PjGmzQtjWiuXdZZ8eiEmSk5wWLfH3jGmiwP3rGinbrrGgn3CBart2a6xkApqUzE3
sMJxI2drIbbszgNZZ2wByFVAMk/rshsPsrOPJcg9p8FfFIL/N0cuZde8C0/K2QZo
mNSozJNncLZn
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:09:57 2025 by rpki-client