Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32372e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          TvJZgE4XJlVs+YABEAwfM0KBovhcJfleVIIgoi2oFNk=
Subject key identifier:   C4:82:9A:CD:70:12:11:E1:11:7E:D6:A2:FB:54:91:65:E5:9A:E3:F4
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       602DF2D12813FDC641216A2C45CF34F9CE51131F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:40 +0000
ROA not before:           Thu 06 Mar 2025 02:26:40 +0000
ROA not after:            Thu 05 Mar 2026 02:31:40 +0000
asID:                     52706
IP address blocks:        177.126.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:f2:d1:28:13:fd:c6:41:21:6a:2c:45:cf:34:f9:ce:51:13:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:40 2025 GMT
            Not After : Mar  5 02:31:40 2026 GMT
        Subject: CN=C4829ACD701211E1117ED6A2FB549165E59AE3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:f6:f7:dd:69:a1:55:65:7e:29:76:80:f6:
                    12:1a:05:a3:ef:eb:75:31:9c:2f:1b:91:cd:29:c4:
                    b8:a8:f6:83:eb:ce:0e:87:de:ad:d3:1c:a4:a6:10:
                    83:36:de:02:52:3b:67:35:c0:c2:98:c7:47:17:63:
                    39:a0:82:a4:de:d6:4e:d1:4b:c9:26:55:5e:df:13:
                    98:3e:38:4b:10:4f:4a:1c:71:a1:c8:b4:f1:31:ef:
                    7c:93:72:e6:fa:27:82:11:91:35:2f:31:7f:71:f7:
                    37:37:1b:a7:79:aa:79:1f:25:5a:1f:76:ea:3c:36:
                    04:5c:bd:9e:56:82:c0:61:f2:04:d0:e8:22:98:13:
                    f4:97:ee:4f:37:00:72:61:14:4e:fc:7a:16:73:cb:
                    11:0e:03:97:3d:7c:b4:24:97:11:06:f9:17:f2:c4:
                    c4:dd:cb:c9:c9:71:65:3f:fb:b7:b5:3e:5e:d3:37:
                    81:db:f1:c4:7a:0c:3f:0c:07:b4:a9:53:4d:0c:4f:
                    4b:20:5b:9b:7c:eb:87:72:fc:21:5c:f8:da:9b:96:
                    5f:91:90:27:0d:8e:26:da:80:70:de:5a:8a:41:84:
                    25:f6:6b:4b:34:15:bc:3d:a0:48:1d:91:50:19:b2:
                    cb:ad:81:88:68:22:21:d9:57:a7:ba:c4:c5:fb:4c:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:82:9A:CD:70:12:11:E1:11:7E:D6:A2:FB:54:91:65:E5:9A:E3:F4
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:bd:0a:e9:fa:b3:e0:39:90:90:47:b9:66:ce:75:a7:a8:
         00:b3:7d:4f:7f:91:bb:6f:77:18:47:1e:e2:d8:a7:e2:ac:f6:
         5c:63:67:2f:bd:e1:13:9f:96:9d:73:29:42:24:06:97:5f:5e:
         85:c7:96:cc:20:ff:71:52:26:40:3e:4f:8f:2b:b0:8b:5a:75:
         f0:fd:9a:fa:05:6f:f5:21:b6:b4:29:df:de:03:fb:87:4e:9a:
         e8:81:4c:15:bf:94:82:9c:8d:d4:15:b4:21:a7:38:4e:a7:75:
         a1:b4:dd:06:32:cc:c2:e5:4f:75:bc:47:7a:ae:92:20:9f:f0:
         d5:8a:43:17:b5:67:fb:1f:cd:6a:04:05:11:89:e6:95:2c:7d:
         61:18:2e:b5:77:dd:a8:b5:c0:59:34:60:32:17:29:f2:a6:ea:
         aa:13:b0:7b:bb:bd:1e:ed:67:fd:5f:ca:6f:52:cf:94:89:79:
         1c:1b:24:aa:64:88:62:78:47:fc:4e:10:18:c7:e7:5e:ec:32:
         6d:cf:f1:f9:a9:82:f0:f9:4f:99:90:f8:83:be:0f:0c:fb:32:
         f1:77:49:7e:db:a1:2f:ab:44:0a:ec:49:54:c3:1e:c2:39:7b:
         75:23:4c:5a:b5:68:87:2e:95:ae:03:a9:19:40:d7:c8:ac:e4:
         c2:37:20:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYC3y0SgT/cZBIWosRc80+c5REx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDBaFw0yNjAzMDUwMjMxNDBaMDMxMTAvBgNV
BAMTKEM0ODI5QUNENzAxMjExRTExMTdFRDZBMkZCNTQ5MTY1RTU5QUUzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINPb33WmhVWV+KXaA9hIaBaPv
63UxnC8bkc0pxLio9oPrzg6H3q3THKSmEIM23gJSO2c1wMKYx0cXYzmggqTe1k7R
S8kmVV7fE5g+OEsQT0occaHItPEx73yTcub6J4IRkTUvMX9x9zc3G6d5qnkfJVof
duo8NgRcvZ5WgsBh8gTQ6CKYE/SX7k83AHJhFE78ehZzyxEOA5c9fLQklxEG+Rfy
xMTdy8nJcWU/+7e1Pl7TN4Hb8cR6DD8MB7SpU00MT0sgW5t864dy/CFc+Nqbll+R
kCcNjibagHDeWopBhCX2a0s0Fbw9oEgdkVAZssutgYhoIiHZV6e6xMX7TPcHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxIKazXASEeERftai+1SRZeWa4/QwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4bMA0GCSqGSIb3DQEBCwUAA4IBAQCo2r0K6fqz
4DmQkEe5Zs51p6gAs31Pf5G7b3cYRx7i2KfirPZcY2cvveETn5adcylCJAaXX16F
x5bMIP9xUiZAPk+PK7CLWnXw/Zr6BW/1Iba0Kd/eA/uHTprogUwVv5SCnI3UFbQh
pzhOp3WhtN0GMszC5U91vEd6rpIgn/DVikMXtWf7H81qBAURieaVLH1hGC61d92o
tcBZNGAyFynypuqqE7B7u70e7Wf9X8pvUs+UiXkcGySqZIhieEf8ThAYx+de7DJt
z/H5qYLw+U+ZkPiDvg8M+zLxd0l+26Evq0QK7ElUwx7COXt1I0xatWiHLpWuA6kZ
QNfIrOTCNyAh
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:55 2025 by rpki-client