Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa
File:                     3137372e37342e3137342e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier:          ukGf5FZxzBtg+I64vB7urjEsX/ctvJERioYKn0eL+Oo=
Subject key identifier:   CC:F0:3C:1F:65:88:EB:A3:3F:B9:D1:3F:A6:58:50:C0:F1:BB:6F:0D
Certificate issuer:       /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial:       7937E7216030CF2B5C09AA0C1FA5F7FB2FEE7B18
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa
Signing time:             Tue 17 Dec 2024 17:08:36 +0000
ROA not before:           Tue 17 Dec 2024 17:03:36 +0000
ROA not after:            Tue 16 Dec 2025 17:08:36 +0000
asID:                     61900
IP address blocks:        177.74.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:37:e7:21:60:30:cf:2b:5c:09:aa:0c:1f:a5:f7:fb:2f:ee:7b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
        Validity
            Not Before: Dec 17 17:03:36 2024 GMT
            Not After : Dec 16 17:08:36 2025 GMT
        Subject: CN=CCF03C1F6588EBA33FB9D13FA65850C0F1BB6F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:f5:23:3c:9d:dc:65:ff:11:e9:b6:5e:41:
                    19:64:5e:ad:50:f8:01:0f:7c:71:6f:ab:60:00:23:
                    23:e0:df:67:de:0b:81:be:54:6f:d3:4b:66:b3:26:
                    fb:b6:0a:93:8b:ae:76:6d:17:66:d8:ae:ce:2c:4a:
                    da:1e:b8:b9:fc:bc:63:ff:46:7c:e7:c8:ec:fe:b8:
                    dc:1f:02:a6:0c:71:ef:9e:73:ab:ca:2f:f1:d1:7e:
                    94:e3:cf:20:72:5f:30:97:49:9c:fe:9c:b4:98:b4:
                    b0:b5:de:46:41:77:8a:7b:a2:13:97:5c:8d:cf:9f:
                    0f:14:87:96:85:c8:62:44:41:de:78:c7:3a:ef:27:
                    85:23:7c:99:89:ac:ce:a5:07:e0:78:db:1b:1f:1e:
                    2a:1f:e4:96:a8:8a:0a:a4:c1:74:40:38:b7:08:97:
                    9a:0e:ef:36:07:c7:4d:aa:2b:2b:13:e5:8f:eb:b5:
                    fe:e9:90:d3:cc:37:53:de:3a:5a:f9:83:62:29:9b:
                    64:44:01:b3:eb:03:1a:68:2d:ca:7c:9c:17:50:e6:
                    8c:f9:af:c2:a8:ee:85:c0:cc:aa:19:f2:fe:67:5b:
                    41:12:9d:79:99:b0:d3:07:a7:bf:ef:02:70:48:5e:
                    83:6a:06:39:26:31:dd:ac:82:5d:c5:63:86:8b:e0:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:3C:1F:65:88:EB:A3:3F:B9:D1:3F:A6:58:50:C0:F1:BB:6F:0D
            X509v3 Authority Key Identifier:
                keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:af:43:1b:de:88:3b:1d:4e:de:53:1e:29:85:81:ad:bc:25:
         a1:c9:27:dd:32:09:4d:8f:7b:f6:77:65:53:0e:b2:19:1d:48:
         19:78:74:57:2f:d5:97:48:87:92:97:c9:f1:17:14:bb:8f:19:
         4c:f9:1b:52:11:76:49:ea:61:2d:0e:d0:ab:4a:8b:ec:cf:67:
         90:7e:0b:07:96:d2:64:c5:73:ef:1a:8e:75:6f:e8:9b:49:d1:
         12:0a:3b:4a:ad:7c:8a:16:fc:1b:de:2b:33:d5:81:a0:1f:7b:
         4b:e8:68:a8:65:37:82:8a:5d:b7:19:01:42:0b:e1:74:45:08:
         5b:10:1c:ed:ed:28:f9:df:ed:2d:c5:4d:c5:ce:5b:4c:4d:9c:
         a6:f9:7d:27:1b:1f:c6:62:bb:1e:a1:d2:5d:37:d5:69:c0:56:
         b5:52:e4:46:31:c3:0c:83:cf:dd:d3:d3:b2:11:12:e9:ca:48:
         6f:a4:3a:96:b7:c6:9e:22:07:24:1d:6f:20:10:ed:42:d7:22:
         6f:63:f9:d2:7c:df:fe:1a:01:34:18:cf:ee:4a:8d:99:c0:d2:
         dc:d2:b1:a1:ce:ca:10:43:98:77:cc:9b:db:13:2d:e7:08:f3:
         85:4e:e3:2d:a6:d6:4f:cf:25:c5:54:ab:e3:f1:65:84:71:ca:
         33:59:36:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeTfnIWAwzytcCaoMH6X3+y/uexgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAzMjM2NUM3ODI0NjVEQjYyMjgzOTQ1REM5RTcyRjZC
QUE2QkYwQTAeFw0yNDEyMTcxNzAzMzZaFw0yNTEyMTYxNzA4MzZaMDMxMTAvBgNV
BAMTKENDRjAzQzFGNjU4OEVCQTMzRkI5RDEzRkE2NTg1MEMwRjFCQjZGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP+fUjPJ3cZf8R6bZeQRlkXq1Q
+AEPfHFvq2AAIyPg32feC4G+VG/TS2azJvu2CpOLrnZtF2bYrs4sStoeuLn8vGP/
RnznyOz+uNwfAqYMce+ec6vKL/HRfpTjzyByXzCXSZz+nLSYtLC13kZBd4p7ohOX
XI3Pnw8Uh5aFyGJEQd54xzrvJ4UjfJmJrM6lB+B42xsfHiof5JaoigqkwXRAOLcI
l5oO7zYHx02qKysT5Y/rtf7pkNPMN1PeOlr5g2Ipm2REAbPrAxpoLcp8nBdQ5oz5
r8Ko7oXAzKoZ8v5nW0ESnXmZsNMHp7/vAnBIXoNqBjkmMd2sgl3FY4aL4KzJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzPA8H2WI66M/udE/plhQwPG7bw0wHwYDVR0j
BBgwFoAUcDI2XHgkZdtiKDlF3J5y9rqmvwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MDMyMzY1Qzc4MjQ2NURCNjIyODM5NDVEQzlFNzJGNkJBQTZCRjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMzIzNjVDNzgyNDY1REI2
MjI4Mzk0NURDOUU3MkY2QkFBNkJGMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzNzM3MmUzNzM0MmUzMTM3MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUquMA0GCSqGSIb3DQEBCwUAA4IBAQCJr0Mb3og7
HU7eUx4phYGtvCWhySfdMglNj3v2d2VTDrIZHUgZeHRXL9WXSIeSl8nxFxS7jxlM
+RtSEXZJ6mEtDtCrSovsz2eQfgsHltJkxXPvGo51b+ibSdESCjtKrXyKFvwb3isz
1YGgH3tL6GioZTeCil23GQFCC+F0RQhbEBzt7Sj53+0txU3FzltMTZym+X0nGx/G
YrseodJdN9VpwFa1UuRGMcMMg8/d09OyERLpykhvpDqWt8aeIgckHW8gEO1C1yJv
Y/nSfN/+GgE0GM/uSo2ZwNLc0rGhzsoQQ5h3zJvbEy3nCPOFTuMtptZPzyXFVKvj
8WWEccozWTZa
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:13:34 2025 by rpki-client