Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          gqrQOcW86qxtfd+QvGBM4QmqqfEh8mAWD/zRVgD0X5Y=
Subject key identifier:   87:83:D9:EA:6A:EF:5C:E6:FB:FA:FA:25:4E:CE:95:29:A5:88:2A:81
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       152A3A87C51B6BD8C338B64F30E310D8B065373A
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 05 Mar 2025 23:59:59 +0000
ROA not before:           Wed 05 Mar 2025 23:54:59 +0000
ROA not after:            Wed 04 Mar 2026 23:59:59 +0000
asID:                     52653
IP address blocks:        177.221.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2a:3a:87:c5:1b:6b:d8:c3:38:b6:4f:30:e3:10:d8:b0:65:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:54:59 2025 GMT
            Not After : Mar  4 23:59:59 2026 GMT
        Subject: CN=8783D9EA6AEF5CE6FBFAFA254ECE9529A5882A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:27:58:1f:b9:db:58:94:a3:ed:ed:71:60:
                    80:2d:bd:31:23:9a:9b:82:0c:ee:cb:b2:3b:32:fb:
                    b9:2c:55:a3:97:3a:49:1a:83:71:c7:54:71:fe:08:
                    0b:d7:3f:83:4e:a0:31:39:b0:44:46:a5:ff:da:a6:
                    53:5a:90:49:ff:cf:d5:9c:6d:81:66:73:0f:11:1f:
                    5e:cd:35:16:bd:6d:ef:1e:6f:aa:ba:89:37:34:62:
                    57:d2:f7:32:1a:2f:49:13:9e:35:51:60:19:ab:3e:
                    8c:46:af:17:05:f9:f4:17:70:81:26:2a:34:75:b0:
                    0f:23:68:eb:15:17:1c:b7:f9:13:8a:98:f4:11:ae:
                    58:49:a9:d6:f4:fa:8d:1d:3c:5a:a4:90:b0:78:f1:
                    0c:98:a0:58:52:78:2b:8a:33:73:72:35:82:22:25:
                    4f:55:43:c4:68:43:1b:72:2c:e1:21:0b:1e:bd:72:
                    08:c1:80:0b:56:dd:a7:56:f9:69:88:b5:33:28:fb:
                    7f:d0:52:7c:35:b1:6f:7a:90:c5:a4:1e:a1:d2:68:
                    2f:89:e5:db:b4:68:70:b0:3f:6f:09:18:3c:83:23:
                    7c:44:d6:1c:9f:21:42:55:e8:df:e9:cc:41:3e:a1:
                    5e:3d:58:bb:af:62:e9:4f:cb:bf:22:2f:64:04:e5:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:D9:EA:6A:EF:5C:E6:FB:FA:FA:25:4E:CE:95:29:A5:88:2A:81
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:cd:d9:f1:22:ae:a4:33:f2:d3:f4:0d:8e:62:e1:02:a6:
         18:82:1c:17:d4:bf:d1:87:26:ec:6f:bf:0c:c5:f5:52:01:5a:
         2a:13:54:6e:e9:9a:99:62:80:d5:20:5d:9b:a7:50:5e:e1:ec:
         ed:b8:f1:e8:6f:2a:fc:69:03:4e:29:9c:2a:57:ec:20:12:04:
         22:9b:79:47:19:38:36:57:ca:b7:eb:57:28:21:f8:7b:02:25:
         38:35:52:7c:45:a0:96:2f:bb:ba:5e:52:b0:8c:7d:fc:f4:a8:
         a9:9f:8f:7b:06:08:bb:68:37:fb:22:51:b3:15:28:57:92:c6:
         8e:d4:d8:7d:03:f5:6d:20:a5:76:d7:ed:af:97:03:dd:a3:33:
         48:bd:34:2e:cd:cb:4e:dc:89:47:6c:d4:19:b8:b5:dc:96:bf:
         f4:ae:9a:25:6b:f7:38:96:54:63:3a:46:db:7c:87:f9:ee:1e:
         ac:58:f5:87:ad:31:2d:20:7f:4d:96:22:1c:88:51:10:42:f9:
         eb:92:80:d9:8b:47:c2:48:f4:1a:fa:0f:d8:45:92:05:b0:89:
         37:4a:1d:cb:af:4d:ad:b8:d6:0d:c6:c0:7f:d4:53:48:3f:77:
         f1:d7:9f:15:7b:2c:d1:af:18:12:6b:2d:7f:42:f4:67:cb:c9:
         a1:b9:02:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFSo6h8Uba9jDOLZPMOMQ2LBlNzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU0NTlaFw0yNjAzMDQyMzU5NTlaMDMxMTAvBgNV
BAMTKDg3ODNEOUVBNkFFRjVDRTZGQkZBRkEyNTRFQ0U5NTI5QTU4ODJBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TSdYH7nbWJSj7e1xYIAtvTEj
mpuCDO7Lsjsy+7ksVaOXOkkag3HHVHH+CAvXP4NOoDE5sERGpf/aplNakEn/z9Wc
bYFmcw8RH17NNRa9be8eb6q6iTc0YlfS9zIaL0kTnjVRYBmrPoxGrxcF+fQXcIEm
KjR1sA8jaOsVFxy3+ROKmPQRrlhJqdb0+o0dPFqkkLB48QyYoFhSeCuKM3NyNYIi
JU9VQ8RoQxtyLOEhCx69cgjBgAtW3adW+WmItTMo+3/QUnw1sW96kMWkHqHSaC+J
5du0aHCwP28JGDyDI3xE1hyfIUJV6N/pzEE+oV49WLuvYulPy78iL2QE5SKXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUh4PZ6mrvXOb7+volTs6VKaWIKoEwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1aMA0GCSqGSIb3DQEBCwUAA4IBAQCui83Z8SKu
pDPy0/QNjmLhAqYYghwX1L/Rhybsb78MxfVSAVoqE1Ru6ZqZYoDVIF2bp1Be4ezt
uPHobyr8aQNOKZwqV+wgEgQim3lHGTg2V8q361coIfh7AiU4NVJ8RaCWL7u6XlKw
jH389Kipn497Bgi7aDf7IlGzFShXksaO1Nh9A/VtIKV21+2vlwPdozNIvTQuzctO
3IlHbNQZuLXclr/0rpola/c4llRjOkbbfIf57h6sWPWHrTEtIH9NliIciFEQQvnr
koDZi0fCSPQa+g/YRZIFsIk3Sh3Lr02tuNYNxsB/1FNIP3fx158VeyzRrxgSay1/
QvRny8mhuQJR
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:00 2025 by rpki-client