Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/3137392e3132352e382e302f32322d3332203d3e20323730383937.roa
File:                     3137392e3132352e382e302f32322d3332203d3e20323730383937.roa (raw, json)
Hash identifier:          rpzYMWc0m0PezzwJwuabhBX54llUpGReGBV22RjQqnI=
Subject key identifier:   9C:4A:10:31:E8:91:18:65:A2:78:0E:8B:AE:DD:64:8F:E5:82:72:64
Certificate issuer:       /CN=B42594E2C54178CC78E14B1FCAF54FEA3917A72C
Certificate serial:       62E164D53ABDC6E0935438995028EF86410B583C
Authority key identifier: B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/3137392e3132352e382e302f32322d3332203d3e20323730383937.roa
Signing time:             Thu 30 Jan 2025 18:52:54 +0000
ROA not before:           Thu 30 Jan 2025 18:47:54 +0000
ROA not after:            Thu 29 Jan 2026 18:52:54 +0000
asID:                     270897
IP address blocks:        179.125.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e1:64:d5:3a:bd:c6:e0:93:54:38:99:50:28:ef:86:41:0b:58:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42594E2C54178CC78E14B1FCAF54FEA3917A72C
        Validity
            Not Before: Jan 30 18:47:54 2025 GMT
            Not After : Jan 29 18:52:54 2026 GMT
        Subject: CN=9C4A1031E8911865A2780E8BAEDD648FE5827264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:81:9a:2e:1c:9a:c1:9f:00:70:02:0a:9f:
                    5f:fb:ed:a9:70:8f:76:72:22:c2:11:ce:34:3b:5f:
                    a9:0d:44:47:f8:29:4e:b3:02:76:23:53:6e:17:7e:
                    2a:ff:7c:49:61:ce:4f:c0:cf:fb:59:c0:8d:16:53:
                    cb:41:c4:2f:4e:ec:b8:2a:35:34:4f:35:78:30:22:
                    fc:ce:74:dd:81:fa:ec:fb:f5:c9:58:40:67:8c:f7:
                    2e:6e:fe:a1:44:d5:d0:43:41:f8:9a:41:e7:d3:a2:
                    af:7f:ab:9d:53:20:65:6c:79:e9:62:ce:73:f0:b9:
                    51:9e:48:67:0f:f0:92:94:f1:38:49:6b:b7:8b:16:
                    96:e8:0f:40:7c:3a:e8:94:cf:78:f2:fa:02:d1:65:
                    3d:96:31:bb:9a:4c:78:f6:7a:d6:a1:2a:e1:aa:ef:
                    18:5b:77:73:58:0d:d1:9c:f7:7f:d4:a8:04:a5:c1:
                    dc:b6:bb:a7:ac:c6:38:b0:80:56:50:a1:f6:1b:2a:
                    0f:4b:27:d3:ea:ec:94:57:fe:cc:b8:5d:2f:f5:98:
                    47:29:c0:86:12:03:00:95:24:e1:5e:7d:1d:f3:79:
                    cf:1b:5a:52:c7:f5:ee:94:8d:ba:b3:32:8e:8f:bf:
                    2d:a6:d2:86:6e:a8:11:0e:59:fe:7e:c1:e1:c9:9a:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:10:31:E8:91:18:65:A2:78:0E:8B:AE:DD:64:8F:E5:82:72:64
            X509v3 Authority Key Identifier:
                keyid:B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/3137392e3132352e382e302f32322d3332203d3e20323730383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:54:75:f9:9e:b4:41:e2:95:de:49:e3:12:64:ad:f1:63:
         30:34:dc:5a:87:36:df:d8:c7:f4:27:1d:d7:eb:e7:b9:f5:3c:
         6c:5b:cb:9e:7e:fd:92:53:c7:0b:c9:49:a2:4d:66:81:5a:e8:
         ca:c8:a2:48:48:42:a6:c8:80:5d:e5:37:0d:ae:2c:31:3a:45:
         5e:e9:1b:a8:76:3a:8e:6a:6a:54:39:a9:ac:2b:ad:b4:f3:b3:
         97:58:4e:9a:33:1e:6d:3e:6e:d1:70:b6:58:de:0b:91:64:eb:
         90:5a:5f:47:e6:68:30:c0:d7:83:7a:ba:42:1f:06:78:2e:a7:
         dc:49:6a:ea:83:4b:97:e7:57:21:6c:c9:14:7f:8d:24:89:04:
         d6:d0:be:0a:b3:40:d5:b7:a4:59:62:75:7e:f3:b8:72:b6:03:
         d4:66:a0:4a:c0:35:c1:e0:c6:86:35:34:07:e3:e2:93:22:c8:
         06:8c:cd:47:f0:7f:56:0c:73:84:5b:35:01:c2:a5:6c:ef:94:
         f4:a1:7c:db:9d:0e:df:8d:26:6c:2c:ba:7f:24:31:16:a9:84:
         ff:48:44:33:7a:ab:80:5d:a2:01:ad:7b:68:c6:e2:24:3b:8e:
         75:47:18:72:c4:12:fe:fb:92:33:07:83:f2:67:f8:d8:24:1c:
         27:ef:d4:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYuFk1Tq9xuCTVDiZUCjvhkELWDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQyNTk0RTJDNTQxNzhDQzc4RTE0QjFGQ0FGNTRGRUEz
OTE3QTcyQzAeFw0yNTAxMzAxODQ3NTRaFw0yNjAxMjkxODUyNTRaMDMxMTAvBgNV
BAMTKDlDNEExMDMxRTg5MTE4NjVBMjc4MEU4QkFFREQ2NDhGRTU4MjcyNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47YGaLhyawZ8AcAIKn1/77alw
j3ZyIsIRzjQ7X6kNREf4KU6zAnYjU24Xfir/fElhzk/Az/tZwI0WU8tBxC9O7Lgq
NTRPNXgwIvzOdN2B+uz79clYQGeM9y5u/qFE1dBDQfiaQefToq9/q51TIGVseeli
znPwuVGeSGcP8JKU8ThJa7eLFpboD0B8OuiUz3jy+gLRZT2WMbuaTHj2etahKuGq
7xhbd3NYDdGc93/UqASlwdy2u6esxjiwgFZQofYbKg9LJ9Pq7JRX/sy4XS/1mEcp
wIYSAwCVJOFefR3zec8bWlLH9e6UjbqzMo6Pvy2m0oZuqBEOWf5+weHJmuArAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnEoQMeiRGGWieA6Lrt1kj+WCcmQwHwYDVR0j
BBgwFoAUtCWU4sVBeMx44UsfyvVP6jkXpywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRlTEZzc0VEZG5QdHJtd1NvTm8yZldFaks2RnJCOHVhR1VFOEhpcjQ1
UXUvMC9CNDI1OTRFMkM1NDE3OENDNzhFMTRCMUZDQUY1NEZFQTM5MTdBNzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MjU5NEUyQzU0MTc4Q0M3
OEUxNEIxRkNBRjU0RkVBMzkxN0E3MkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUZUxGc3NFRGRuUHRybXdTb05vMmZXRWpLNkZyQjh1YUdVRThIaXI0NVF1LzAv
MzEzNzM5MmUzMTMyMzUyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzgzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCs30IMA0GCSqGSIb3DQEBCwUAA4IBAQBMk1R1+Z60
QeKV3knjEmSt8WMwNNxahzbf2Mf0Jx3X6+e59TxsW8uefv2SU8cLyUmiTWaBWujK
yKJISEKmyIBd5TcNriwxOkVe6RuodjqOampUOamsK62087OXWE6aMx5tPm7RcLZY
3guRZOuQWl9H5mgwwNeDerpCHwZ4LqfcSWrqg0uX51chbMkUf40kiQTW0L4Ks0DV
t6RZYnV+87hytgPUZqBKwDXB4MaGNTQH4+KTIsgGjM1H8H9WDHOEWzUBwqVs75T0
oXzbnQ7fjSZsLLp/JDEWqYT/SEQzequAXaIBrXtoxuIkO451RxhyxBL++5IzB4Py
Z/jYJBwn79To
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:09 2025 by rpki-client