Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
File:                     3137372e3132342e302e302f32312d3234203d3e20323632333131.roa (raw, json)
Hash identifier:          NXTL3tXt3aHGRwUPA82eM6AQOR8a3ImbqHLunIcNwZA=
Subject key identifier:   29:1A:93:2E:3F:F0:6B:1E:0C:B7:70:DD:8F:69:B1:C9:A4:92:62:92
Certificate issuer:       /CN=AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40
Certificate serial:       6C52229F88B8EA795A423C5D1BA05A9FDCFB0D69
Authority key identifier: AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
Signing time:             Fri 15 Sep 2023 17:36:27 +0000
ROA not before:           Fri 15 Sep 2023 17:31:27 +0000
ROA not after:            Fri 13 Sep 2024 17:36:27 +0000
asID:                     262311
IP address blocks:        177.124.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:52:22:9f:88:b8:ea:79:5a:42:3c:5d:1b:a0:5a:9f:dc:fb:0d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40
        Validity
            Not Before: Sep 15 17:31:27 2023 GMT
            Not After : Sep 13 17:36:27 2024 GMT
        Subject: CN=291A932E3FF06B1E0CB770DD8F69B1C9A4926292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:a6:2e:af:94:ab:af:a8:b2:da:27:e0:cb:
                    e0:75:78:c2:6e:41:c6:9d:3a:60:b9:e8:50:da:74:
                    68:c9:6a:28:8f:61:42:f4:5c:fc:e5:60:d8:9d:fa:
                    c8:de:d5:61:57:17:fa:81:94:2f:30:6e:a7:d5:c2:
                    59:e9:d1:9f:86:e5:8e:92:81:95:cb:8e:04:08:5b:
                    66:29:c3:e1:ea:d3:e3:b8:fa:38:4e:b5:df:8a:1a:
                    c5:6d:25:ec:37:dc:5a:3d:2e:d8:6d:a4:ee:f9:bd:
                    89:1d:9d:32:32:9f:3a:45:1c:db:c7:ea:b8:87:fb:
                    07:5b:09:63:f0:eb:1f:cf:ee:b4:33:05:c0:79:c8:
                    69:cf:fa:3b:05:17:e9:31:71:d4:7a:6e:e1:2a:a6:
                    af:ea:4b:79:22:e0:20:48:ae:4e:19:18:ae:7a:d2:
                    09:40:89:41:73:d8:cf:71:dc:49:fd:d5:34:19:69:
                    95:89:4b:64:5c:44:57:c0:6d:70:51:4d:f1:ab:02:
                    69:85:a2:54:d4:43:56:6e:de:a5:23:dd:30:b3:e4:
                    35:5d:f3:ca:7b:71:fb:30:21:08:fa:3c:78:9a:2b:
                    7a:2f:f8:fc:c9:b5:9f:22:cf:b4:18:9a:52:56:84:
                    99:76:a0:8b:7c:a8:95:49:21:67:82:f6:26:47:06:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:93:2E:3F:F0:6B:1E:0C:B7:70:DD:8F:69:B1:C9:A4:92:62:92
            X509v3 Authority Key Identifier:
                keyid:AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:be:fe:8b:3e:0b:d7:3a:eb:59:59:31:6f:e3:16:08:5f:
         6d:65:e0:05:6e:7c:01:06:0e:20:5d:8f:21:07:bf:53:86:e8:
         8c:7f:73:c4:56:69:8b:fa:63:cd:dd:72:1b:dc:3d:00:c1:83:
         fa:70:85:7a:98:99:8e:1b:65:a5:57:8c:c7:6a:05:4c:1c:48:
         b7:16:e7:45:ac:39:21:22:f9:78:3d:21:bb:c8:5a:17:59:4e:
         2a:49:ec:c5:07:fc:15:26:68:6f:d7:b0:25:f4:f3:c6:b6:93:
         0e:c4:ed:89:ed:af:45:16:18:88:b4:4c:d0:c9:1e:3c:01:ae:
         4b:06:67:86:9e:77:41:d8:6e:06:42:37:b7:3e:7b:bd:79:0d:
         05:75:5e:fd:ea:f9:3b:6e:0a:ec:68:9a:5a:1b:91:b6:6b:be:
         8f:0d:90:77:62:d3:dd:a3:32:24:af:e4:86:93:50:5d:ed:f2:
         cf:00:da:64:87:ec:61:34:3e:55:83:82:29:24:04:a7:e4:36:
         2e:4e:bd:b6:db:cf:c1:56:4a:4f:57:ab:a3:9c:92:a5:1d:36:
         61:99:f2:57:fb:1c:4b:46:63:dd:71:6d:8b:29:9e:a9:a4:6c:
         ee:2e:10:d5:b2:a2:3c:64:68:00:81:a0:cf:82:09:3e:ca:53:
         78:1b:e5:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbFIin4i46nlaQjxdG6Ban9z7DWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4OEJBMEFDRTNBN0FBOUQ5MkM2QjExQzc3Q0JCM0VD
NDRENUM0MDAeFw0yMzA5MTUxNzMxMjdaFw0yNDA5MTMxNzM2MjdaMDMxMTAvBgNV
BAMTKDI5MUE5MzJFM0ZGMDZCMUUwQ0I3NzBERDhGNjlCMUM5QTQ5MjYyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2I6Yur5Srr6iy2ifgy+B1eMJu
QcadOmC56FDadGjJaiiPYUL0XPzlYNid+sje1WFXF/qBlC8wbqfVwlnp0Z+G5Y6S
gZXLjgQIW2Ypw+Hq0+O4+jhOtd+KGsVtJew33Fo9LthtpO75vYkdnTIynzpFHNvH
6riH+wdbCWPw6x/P7rQzBcB5yGnP+jsFF+kxcdR6buEqpq/qS3ki4CBIrk4ZGK56
0glAiUFz2M9x3En91TQZaZWJS2RcRFfAbXBRTfGrAmmFolTUQ1Zu3qUj3TCz5DVd
88p7cfswIQj6PHiaK3ov+PzJtZ8iz7QYmlJWhJl2oIt8qJVJIWeC9iZHBohtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKRqTLj/wax4Mt3Ddj2mxyaSSYpIwHwYDVR0j
BBgwFoAUrIi6Cs46eqnZLGsRx3y7PsRNXEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFN2TXM0SHlrTG9rUVJvb1JGU2JzbnpjOHZUVDlCRlhuajZNekRqQWE5
cm8vMC9BQzg4QkEwQUNFM0E3QUE5RDkyQzZCMTFDNzdDQkIzRUM0NEQ1QzQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDODhCQTBBQ0UzQTdBQTlE
OTJDNkIxMUM3N0NCQjNFQzQ0RDVDNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTdk1zNEh5a0xva1FSb29SRlNic256Yzh2VFQ5QkZYbmo2TXpEakFhOXJvLzAv
MzEzNzM3MmUzMTMyMzQyZTMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsXwAMA0GCSqGSIb3DQEBCwUAA4IBAQBaJb7+iz4L
1zrrWVkxb+MWCF9tZeAFbnwBBg4gXY8hB79ThuiMf3PEVmmL+mPN3XIb3D0AwYP6
cIV6mJmOG2WlV4zHagVMHEi3FudFrDkhIvl4PSG7yFoXWU4qSezFB/wVJmhv17Al
9PPGtpMOxO2J7a9FFhiItEzQyR48Aa5LBmeGnndB2G4GQje3Pnu9eQ0FdV796vk7
bgrsaJpaG5G2a76PDZB3YtPdozIkr+SGk1Bd7fLPANpkh+xhND5Vg4IpJASn5DYu
Tr2228/BVkpPV6ujnJKlHTZhmfJX+xxLRmPdcW2LKZ6ppGzuLhDVsqI8ZGgAgaDP
ggk+ylN4G+VG
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:30 2025 by rpki-client