Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e382e36342e302f32322d3234203d3e203533313532.roa
File:                     3137372e382e36342e302f32322d3234203d3e203533313532.roa (raw, json)
Hash identifier:          KX3u7QOE20g4i72Nw5G8PJuGlokv2SJ5dN078R3GsLI=
Subject key identifier:   F6:F6:03:D5:33:B6:D4:9D:42:C5:21:70:2B:E7:CC:AE:EB:9A:17:27
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       5EBBAC8ECF7C96F4AE85B6DA9422AB8E3D7B6AF1
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e382e36342e302f32322d3234203d3e203533313532.roa
Signing time:             Mon 02 Dec 2024 19:03:34 +0000
ROA not before:           Mon 02 Dec 2024 18:58:34 +0000
ROA not after:            Mon 01 Dec 2025 19:03:34 +0000
asID:                     53152
IP address blocks:        177.8.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bb:ac:8e:cf:7c:96:f4:ae:85:b6:da:94:22:ab:8e:3d:7b:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Dec  2 18:58:34 2024 GMT
            Not After : Dec  1 19:03:34 2025 GMT
        Subject: CN=F6F603D533B6D49D42C521702BE7CCAEEB9A1727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1c:7e:e7:e7:33:14:a7:72:89:5d:ef:55:b7:
                    ef:66:12:07:82:23:3d:b9:a2:ff:af:57:6f:02:40:
                    27:80:aa:b3:8f:06:2b:9b:ff:7d:02:96:1d:14:11:
                    db:13:d4:ce:86:0a:69:38:9e:b3:d8:b2:42:dd:18:
                    29:f8:88:67:d2:b7:ae:39:cb:70:39:c7:9e:35:99:
                    2d:e1:eb:9d:4e:14:e3:24:e3:37:14:3f:b8:45:9e:
                    a9:f1:41:25:12:32:a5:c9:f3:b8:99:7a:20:35:37:
                    2e:c2:62:42:81:cd:14:dd:11:52:6d:3e:51:fb:1c:
                    35:76:8c:54:34:f9:34:4b:5d:2d:08:6e:50:0b:f2:
                    06:16:9e:fc:20:6e:f9:b4:dc:81:99:07:f8:13:48:
                    9d:29:9d:98:38:32:16:06:54:6b:b4:b4:64:23:bc:
                    60:22:04:0c:75:6e:72:73:5a:aa:06:72:9d:3e:5e:
                    7b:69:bc:b5:1b:0b:e0:17:d5:a7:8a:22:ea:e0:03:
                    e7:85:1c:e0:0a:5e:61:ea:81:78:6c:5d:b7:fe:34:
                    a9:bf:34:81:0f:40:f7:7a:9d:82:d9:5c:64:53:9b:
                    59:9b:cf:50:6f:ba:04:d8:9f:9c:ce:03:54:1c:9f:
                    23:6c:43:58:1e:87:49:b0:30:92:c3:b2:0f:32:07:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F6:03:D5:33:B6:D4:9D:42:C5:21:70:2B:E7:CC:AE:EB:9A:17:27
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e382e36342e302f32322d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:54:59:1f:7d:6b:0b:2a:e6:ad:f3:a4:a4:68:d6:d6:07:
         8c:17:85:88:86:b8:db:ae:85:67:d6:c3:7b:6a:1b:e2:92:74:
         e7:47:73:e3:2d:fe:75:7c:29:5b:cd:56:01:5f:29:9d:72:9b:
         95:4e:93:2b:97:6f:8d:b6:77:96:1a:d7:94:ee:b8:ff:d8:0a:
         55:d4:9d:0e:a6:e0:58:db:6f:19:e8:c7:b9:8e:cf:da:68:c6:
         06:1a:8d:bb:5f:aa:48:86:d9:c8:87:99:f0:b9:4a:15:e1:ba:
         bb:97:9b:95:50:52:93:6a:0b:0a:ef:d8:f4:73:b2:3b:2b:7b:
         ca:a4:23:bb:30:bc:ad:56:60:5d:31:c1:48:a9:0b:81:31:bd:
         14:a6:ea:b7:9e:7a:15:33:b8:d6:76:43:e7:9c:ec:a4:c9:78:
         f1:a0:3d:33:88:0d:5c:34:46:cb:ac:94:86:c8:10:ae:3e:4f:
         16:64:84:1c:41:73:c6:e6:15:c1:88:d4:11:91:02:8e:bd:3c:
         25:83:16:2c:49:72:de:e8:e1:84:32:76:04:6a:b4:30:c0:bd:
         15:b9:71:73:17:cb:5a:92:0b:a8:3d:07:71:77:25:47:3d:43:
         07:a8:d6:52:a9:ab:c0:52:1c:60:10:e8:99:68:b3:12:b3:8c:
         0a:11:e8:9e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUXrusjs98lvSuhbbalCKrjj17avEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyRjE0NzU1QUM4NzlENzg1MUVCQTVDRDEwMDJFOUQ0
QjY1NTgzRjAeFw0yNDEyMDIxODU4MzRaFw0yNTEyMDExOTAzMzRaMDMxMTAvBgNV
BAMTKEY2RjYwM0Q1MzNCNkQ0OUQ0MkM1MjE3MDJCRTdDQ0FFRUI5QTE3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0HH7n5zMUp3KJXe9Vt+9mEgeC
Iz25ov+vV28CQCeAqrOPBiub/30Clh0UEdsT1M6GCmk4nrPYskLdGCn4iGfSt645
y3A5x541mS3h651OFOMk4zcUP7hFnqnxQSUSMqXJ87iZeiA1Ny7CYkKBzRTdEVJt
PlH7HDV2jFQ0+TRLXS0IblAL8gYWnvwgbvm03IGZB/gTSJ0pnZg4MhYGVGu0tGQj
vGAiBAx1bnJzWqoGcp0+XntpvLUbC+AX1aeKIurgA+eFHOAKXmHqgXhsXbf+NKm/
NIEPQPd6nYLZXGRTm1mbz1BvugTYn5zOA1QcnyNsQ1geh0mwMJLDsg8yB/fnAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU9vYD1TO21J1CxSFwK+fMruuaFycwHwYDVR0j
BBgwFoAUGS8UdVrIedeFHrpc0QAunUtlWD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhtZ2tXTVFTbWs5NjdDcEJFc3RYMngxYmlOVTVGWXVhaWJvWDZjSE1K
QmkvMS8xOTJGMTQ3NTVBQzg3OUQ3ODUxRUJBNUNEMTAwMkU5RDRCNjU1ODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MkYxNDc1NUFDODc5RDc4
NTFFQkE1Q0QxMDAyRTlENEI2NTU4M0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYbWdrV01RU21rOTY3Q3BCRXN0WDJ4MWJpTlU1Rll1YWlib1g2Y0hNSkJpLzEv
MzEzNzM3MmUzODJlMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMzMTM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKxCEAwDQYJKoZIhvcNAQELBQADggEBAE4eVFkffWsLKuat
86SkaNbWB4wXhYiGuNuuhWfWw3tqG+KSdOdHc+Mt/nV8KVvNVgFfKZ1ym5VOkyuX
b422d5Ya15TuuP/YClXUnQ6m4Fjbbxnox7mOz9poxgYajbtfqkiG2ciHmfC5ShXh
uruXm5VQUpNqCwrv2PRzsjsre8qkI7swvK1WYF0xwUipC4ExvRSm6reeehUzuNZ2
Q+ec7KTJePGgPTOIDVw0RsuslIbIEK4+TxZkhBxBc8bmFcGI1BGRAo69PCWDFixJ
ct7o4YQydgRqtDDAvRW5cXMXy1qSC6g9B3F3JUc9Qweo1lKpq8BSHGAQ6JlosxKz
jAoR6J4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:45 2025 by rpki-client