Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3234203d3e20323632333737.roa
File:                     3137372e3132382e3137362e302f32312d3234203d3e20323632333737.roa (raw, json)
Hash identifier:          J+v8iTtCleEMuhcVxjd7NhPf2MHz8T7Lonptv7kV/Oo=
Subject key identifier:   00:A7:72:F3:34:59:FF:61:95:A2:2C:B7:A1:A2:F4:38:89:2F:D5:B4
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       3E9A616D04F913F1176897CD92B6A151E1E548AD
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3234203d3e20323632333737.roa
Signing time:             Fri 02 Jun 2023 14:14:32 +0000
ROA not before:           Fri 02 Jun 2023 14:09:32 +0000
ROA not after:            Fri 31 May 2024 14:14:32 +0000
asID:                     262377
IP address blocks:        177.128.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9a:61:6d:04:f9:13:f1:17:68:97:cd:92:b6:a1:51:e1:e5:48:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  2 14:09:32 2023 GMT
            Not After : May 31 14:14:32 2024 GMT
        Subject: CN=00A772F33459FF6195A22CB7A1A2F438892FD5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:e6:c5:14:a6:51:06:0e:41:34:8b:2c:37:
                    48:7b:77:53:77:a4:7a:55:83:3d:b8:6a:58:77:6c:
                    a7:29:64:26:d5:6c:96:d0:51:b8:b4:a3:5b:bc:c2:
                    f4:c1:20:8d:61:55:79:7e:2d:10:30:97:04:00:1a:
                    43:d2:ce:94:02:57:45:ba:76:0d:b2:0c:fc:aa:7e:
                    e3:0c:31:11:c6:10:56:e3:a8:9d:f1:8a:64:80:fb:
                    20:81:de:bf:8f:00:e4:6f:71:ee:4f:9a:14:a6:29:
                    86:ee:4c:84:16:b3:17:36:6c:9a:8e:86:29:bf:f8:
                    cd:2e:eb:4e:dd:67:9f:bf:05:20:de:f2:54:f6:a0:
                    fa:d9:3a:29:b1:64:a7:98:0d:d9:e3:35:1a:21:57:
                    6c:36:09:df:37:17:5c:a1:90:93:50:e0:77:f2:57:
                    d1:64:a5:68:de:b3:a3:1e:4f:4d:04:d4:a4:26:14:
                    9d:f6:5d:ef:cb:b5:a9:47:53:3f:35:3f:c1:7b:e9:
                    b9:44:8c:c5:e8:18:cf:aa:3e:aa:3b:33:23:07:c5:
                    dc:90:df:6d:55:87:e0:cd:57:0f:43:13:d3:e6:34:
                    d8:7b:e0:85:7a:ce:97:e3:47:1c:ca:c9:cd:99:f4:
                    8f:af:cd:e7:a0:52:b2:54:c1:4e:fe:33:9b:bb:8d:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A7:72:F3:34:59:FF:61:95:A2:2C:B7:A1:A2:F4:38:89:2F:D5:B4
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3234203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:64:9f:5d:99:f2:c0:f4:ac:c7:fe:70:2f:c7:39:9c:46:7f:
         5f:33:03:6b:3e:42:a1:ce:f7:5a:51:e2:ff:b3:ca:e3:7f:6d:
         17:be:6c:19:df:0c:75:0d:36:eb:1b:43:37:a7:16:f9:21:44:
         78:ab:64:a6:4d:fb:d4:1e:de:9f:b1:ff:9c:e2:30:06:a4:7f:
         14:82:6a:28:90:2e:38:4b:7a:06:d2:b4:01:d6:18:85:54:67:
         f7:20:04:d1:29:75:67:26:0b:8a:77:eb:ed:a1:4d:45:5d:62:
         7a:cb:db:77:fc:66:4f:c5:c9:1f:fd:21:e6:8e:12:17:93:65:
         90:5b:90:48:14:b8:6f:15:c7:ae:ee:8b:e9:b6:24:12:2b:36:
         10:2d:d8:11:a3:13:65:a0:f7:72:80:48:18:ac:73:09:c2:90:
         ab:93:9e:d9:e0:60:5c:11:b4:af:b2:36:87:9f:20:0d:68:fa:
         7f:c6:6d:77:06:c4:61:a0:86:22:ac:26:64:e5:49:1d:87:f6:
         e8:54:4b:f9:59:b2:04:e8:de:f7:c8:d4:7b:e1:d7:2c:37:e3:
         cc:e7:5d:88:03:cd:8b:e2:be:f0:9b:19:91:f2:cc:8c:3c:0b:
         98:54:6a:9f:01:a6:71:25:65:8a:0b:11:1e:c0:6d:4f:5b:4e:
         46:55:89:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPpphbQT5E/EXaJfNkrahUeHlSK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDMkU4QTYyODRCNTU2QzA2MjhENjBDMjUxODM4NEZE
NTg1OUE0QzAeFw0yMzA2MDIxNDA5MzJaFw0yNDA1MzExNDE0MzJaMDMxMTAvBgNV
BAMTKDAwQTc3MkYzMzQ1OUZGNjE5NUEyMkNCN0ExQTJGNDM4ODkyRkQ1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jebFFKZRBg5BNIssN0h7d1N3
pHpVgz24alh3bKcpZCbVbJbQUbi0o1u8wvTBII1hVXl+LRAwlwQAGkPSzpQCV0W6
dg2yDPyqfuMMMRHGEFbjqJ3ximSA+yCB3r+PAORvce5PmhSmKYbuTIQWsxc2bJqO
him/+M0u607dZ5+/BSDe8lT2oPrZOimxZKeYDdnjNRohV2w2Cd83F1yhkJNQ4Hfy
V9FkpWjes6MeT00E1KQmFJ32Xe/LtalHUz81P8F76blEjMXoGM+qPqo7MyMHxdyQ
321Vh+DNVw9DE9PmNNh74IV6zpfjRxzKyc2Z9I+vzeegUrJUwU7+M5u7jWfXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAKdy8zRZ/2GVoiy3oaL0OIkv1bQwHwYDVR0j
BBgwFoAUkMLopihLVWwGKNYMJRg4T9WFmkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEgxVUo5V1FhMnVIWHpycG8xa1VoUzlpaGJQVFlocDVKMmJ0SlFwOWpk
cWUvMC85MEMyRThBNjI4NEI1NTZDMDYyOEQ2MEMyNTE4Mzg0RkQ1ODU5QTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwQzJFOEE2Mjg0QjU1NkMw
NjI4RDYwQzI1MTgzODRGRDU4NTlBNEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIMVVKOVdRYTJ1SFh6cnBvMWtVaFM5aWhiUFRZaHA1SjJidEpRcDlqZHFlLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzczNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GAsDANBgkqhkiG9w0BAQsFAAOCAQEAkmSf
XZnywPSsx/5wL8c5nEZ/XzMDaz5Coc73WlHi/7PK439tF75sGd8MdQ026xtDN6cW
+SFEeKtkpk371B7en7H/nOIwBqR/FIJqKJAuOEt6BtK0AdYYhVRn9yAE0Sl1ZyYL
infr7aFNRV1iesvbd/xmT8XJH/0h5o4SF5NlkFuQSBS4bxXHru6L6bYkEis2EC3Y
EaMTZaD3coBIGKxzCcKQq5Oe2eBgXBG0r7I2h58gDWj6f8ZtdwbEYaCGIqwmZOVJ
HYf26FRL+VmyBOje98jUe+HXLDfjzOddiAPNi+K+8JsZkfLMjDwLmFRqnwGmcSVl
igsRHsBtT1tORlWJjQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:54 2025 by rpki-client