Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32332d3233203d3e203238333630.roa
File:                     3137372e382e31382e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          jC8FiKvuH6ylbGVtgAW/jov+bERerQIGsR7Q0mg+0uQ=
Subject key identifier:   24:7F:F7:E6:C6:BD:6E:C4:C3:3A:08:1F:B9:7A:7C:72:CE:DB:89:33
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       3E900DEBE6F48D78F81EA547C732F952295A00E1
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:32 +0000
ROA not before:           Sat 06 Apr 2024 02:40:32 +0000
ROA not after:            Sat 05 Apr 2025 02:45:32 +0000
asID:                     28360
IP address blocks:        177.8.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:90:0d:eb:e6:f4:8d:78:f8:1e:a5:47:c7:32:f9:52:29:5a:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:32 2024 GMT
            Not After : Apr  5 02:45:32 2025 GMT
        Subject: CN=247FF7E6C6BD6EC4C33A081FB97A7C72CEDB8933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:ac:6a:60:c9:a1:22:5e:0f:07:e0:0f:8d:
                    77:ce:2a:4e:c0:2d:c9:fc:30:78:69:3d:75:4f:a8:
                    8b:8b:73:5b:29:fd:df:ed:f0:f6:19:3e:fc:67:8b:
                    50:71:9a:27:3b:c7:bd:42:f3:49:c8:54:ef:3f:e8:
                    82:f2:c2:ce:59:c3:9d:28:8b:a0:d4:74:a6:b0:27:
                    cc:65:18:7c:ae:9f:47:1b:20:46:89:5c:3d:0f:31:
                    90:5b:55:35:36:2c:1a:4e:db:76:77:1a:c0:0a:a4:
                    51:f8:1a:25:8a:7b:5b:8c:4e:19:0b:fd:8e:11:12:
                    61:20:37:a9:ff:70:c1:aa:28:a3:a7:e6:92:bb:15:
                    c3:72:27:e7:a6:65:69:af:68:86:ac:58:38:db:c6:
                    7b:99:d7:14:dd:7e:bf:1f:34:8c:40:a6:94:48:9e:
                    64:57:a2:d4:bf:a9:c7:75:30:75:c5:03:b1:10:2c:
                    7b:3f:30:0c:41:ff:dd:b9:29:9a:0f:1f:15:8c:f1:
                    cd:a9:fd:49:61:df:5e:f4:00:77:85:94:6e:b3:c1:
                    cb:9b:64:1f:8b:1a:55:ba:c4:ef:06:34:2c:09:5c:
                    58:92:04:9d:a6:26:fc:ea:f6:86:42:0e:40:d3:83:
                    2e:57:c4:58:bf:fd:f5:c4:3b:3c:0f:1a:ac:c6:1c:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7F:F7:E6:C6:BD:6E:C4:C3:3A:08:1F:B9:7A:7C:72:CE:DB:89:33
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:5d:65:92:15:f7:d7:3b:f7:ed:e8:dc:50:23:de:d2:74:
         aa:1c:09:43:a5:45:f1:bf:9a:40:d8:09:18:14:71:e1:b0:4c:
         59:ce:75:1a:f7:78:8a:33:93:07:83:f0:ee:5e:8f:52:ad:f6:
         bf:4f:40:8c:78:57:e6:b2:ff:25:8d:b8:de:7d:00:28:4d:49:
         cc:16:04:62:7a:76:c7:4b:ae:0c:6e:75:a9:92:50:7b:d4:be:
         6f:17:07:4f:1d:e1:ba:14:e3:ed:7e:86:45:c1:2d:4e:25:04:
         55:0b:7a:a5:10:51:f8:8c:73:28:3d:56:4c:fd:e7:3b:df:ea:
         88:eb:e7:93:ea:c3:c6:54:d5:6e:08:92:bf:bd:4e:86:b6:f9:
         66:a8:90:66:f2:b4:4f:9a:18:07:2d:88:b7:39:55:92:1d:ae:
         85:44:3c:25:0c:6b:5d:65:8f:56:2d:94:23:87:1d:6e:ce:72:
         d5:4e:49:33:f1:6d:ba:1a:6b:0a:dd:dc:81:73:d9:da:4e:63:
         46:a3:b6:fa:b4:fa:cc:02:5d:5d:89:ea:38:7b:19:e5:7e:70:
         4a:b9:11:92:42:82:27:91:9a:0f:75:71:07:ac:15:8e:c5:96:
         9f:65:a7:7a:cd:b5:6e:12:af:44:b1:4d:77:8d:bd:72:8e:fe:
         81:30:c5:dd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUPpAN6+b0jXj4HqVHxzL5UilaAOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwMzJaFw0yNTA0MDUwMjQ1MzJaMDMxMTAvBgNV
BAMTKDI0N0ZGN0U2QzZCRDZFQzRDMzNBMDgxRkI5N0E3QzcyQ0VEQjg5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQ6xqYMmhIl4PB+APjXfOKk7A
Lcn8MHhpPXVPqIuLc1sp/d/t8PYZPvxni1Bxmic7x71C80nIVO8/6ILyws5Zw50o
i6DUdKawJ8xlGHyun0cbIEaJXD0PMZBbVTU2LBpO23Z3GsAKpFH4GiWKe1uMThkL
/Y4REmEgN6n/cMGqKKOn5pK7FcNyJ+emZWmvaIasWDjbxnuZ1xTdfr8fNIxAppRI
nmRXotS/qcd1MHXFA7EQLHs/MAxB/925KZoPHxWM8c2p/Ulh3170AHeFlG6zwcub
ZB+LGlW6xO8GNCwJXFiSBJ2mJvzq9oZCDkDTgy5XxFi//fXEOzwPGqzGHLvVAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUJH/35sa9bsTDOggfuXp8cs7biTMwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzEzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGxCBIwDQYJKoZIhvcNAQELBQADggEBABh/XWWSFffXO/ft
6NxQI97SdKocCUOlRfG/mkDYCRgUceGwTFnOdRr3eIozkweD8O5ej1Kt9r9PQIx4
V+ay/yWNuN59AChNScwWBGJ6dsdLrgxudamSUHvUvm8XB08d4boU4+1+hkXBLU4l
BFULeqUQUfiMcyg9Vkz95zvf6ojr55Pqw8ZU1W4Ikr+9Toa2+WaokGbytE+aGAct
iLc5VZIdroVEPCUMa11lj1YtlCOHHW7OctVOSTPxbboaawrd3IFz2dpOY0ajtvq0
+swCXV2J6jh7GeV+cEq5EZJCgieRmg91cQesFY7Flp9lp3rNtW4Sr0SxTXeNvXKO
/oEwxd0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:32 2025 by rpki-client