Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          i7ie31O07Ph+RuImtAMjxsRwjM9qHnCJ6wU22udNpX8=
Subject key identifier:   8D:A5:C6:08:06:F6:D9:7F:3F:E8:3B:B3:1E:58:13:8D:DC:59:8E:53
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       32009BE4981C9CC348E7CF6C12B7E707C5733AD4
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        177.12.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:9b:e4:98:1c:9c:c3:48:e7:cf:6c:12:b7:e7:07:c5:73:3a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=8DA5C60806F6D97F3FE83BB31E58138DDC598E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:76:ab:1f:61:e2:3c:44:7a:5f:ee:eb:e0:
                    96:69:9d:78:45:0c:26:1c:16:fa:ab:6b:be:99:7d:
                    94:4c:50:b4:21:4a:72:11:52:7d:b0:e1:50:a7:a8:
                    9d:c2:04:25:e4:e5:f2:f1:f8:e7:de:9c:32:cf:23:
                    7b:06:83:4c:d7:14:b9:44:b3:0a:c9:6d:61:7d:a0:
                    dc:f3:8f:bd:40:62:b5:b8:19:c4:93:9c:47:82:5c:
                    94:2b:54:64:8a:5d:db:e7:27:99:ce:95:ba:17:08:
                    f1:07:69:b8:ad:2a:a7:e1:0a:24:ee:f0:f2:71:67:
                    67:20:7f:58:df:81:0e:85:8f:0d:da:18:9f:ad:fa:
                    d9:26:dc:f5:ec:e2:11:d1:0f:4a:c4:11:f2:4e:c5:
                    8a:f6:93:35:33:7d:74:60:78:7a:35:00:91:8b:f1:
                    50:4f:7d:b6:65:a1:ad:ac:6b:4b:9d:d6:fd:55:89:
                    cd:b0:ee:5f:58:47:c6:ac:ce:a4:8b:c7:5d:cf:b8:
                    09:dc:72:f2:ca:13:85:72:4e:b3:cc:ef:c0:06:07:
                    42:aa:cb:c5:70:5b:d8:ac:b0:2a:11:a2:3d:40:87:
                    14:38:91:bb:47:95:32:6a:f8:83:db:41:71:1e:50:
                    6c:7e:85:f8:a2:f4:da:ac:e3:08:27:9a:8c:77:3a:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:C6:08:06:F6:D9:7F:3F:E8:3B:B3:1E:58:13:8D:DC:59:8E:53
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:b1:e6:c9:2f:41:41:aa:aa:bb:17:61:7e:ce:d8:43:05:
         dc:61:57:d9:44:c9:52:97:f5:55:8c:65:5a:bc:c3:d4:c3:be:
         d6:9b:c4:52:1e:de:e4:85:f4:37:1b:78:10:92:1b:3f:d1:38:
         70:18:7e:7f:f2:48:03:c3:6a:a9:3c:5a:35:5e:e7:58:a0:e6:
         23:9e:74:12:72:a4:97:d5:80:c6:8c:92:9f:92:fb:3e:ef:c9:
         f3:83:06:61:86:1b:f6:66:e0:b9:d2:c1:00:52:aa:f8:a5:00:
         40:35:6a:eb:4c:1c:94:be:3b:12:83:77:b9:f0:c8:32:8d:0d:
         89:fe:b9:b1:d8:2b:bb:a7:14:1c:a1:01:cc:71:27:66:b0:fa:
         83:15:85:77:61:2a:71:55:15:b3:f8:5f:5a:69:c2:4b:1d:a0:
         51:85:2f:e0:54:55:e5:a1:da:46:36:1f:95:6f:8c:31:a4:37:
         05:04:62:f0:2d:03:1a:51:94:a1:73:3d:b9:7b:05:0b:c1:63:
         6b:2e:db:84:36:a6:c8:02:34:2f:9c:2b:ad:3d:09:63:38:4a:
         85:64:1d:af:71:07:13:08:68:5b:2e:ba:7a:3f:32:66:57:ae:
         d0:65:3d:23:fd:b7:12:47:c1:40:fc:db:27:cd:96:8c:6a:c6:
         50:e8:42:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMgCb5JgcnMNI589sErfnB8VzOtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNTAzMDYwMTE2MzlaFw0yNjAzMDUwMTIxMzlaMDMxMTAvBgNV
BAMTKDhEQTVDNjA4MDZGNkQ5N0YzRkU4M0JCMzFFNTgxMzhEREM1OThFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFXarH2HiPER6X+7r4JZpnXhF
DCYcFvqra76ZfZRMULQhSnIRUn2w4VCnqJ3CBCXk5fLx+OfenDLPI3sGg0zXFLlE
swrJbWF9oNzzj71AYrW4GcSTnEeCXJQrVGSKXdvnJ5nOlboXCPEHabitKqfhCiTu
8PJxZ2cgf1jfgQ6Fjw3aGJ+t+tkm3PXs4hHRD0rEEfJOxYr2kzUzfXRgeHo1AJGL
8VBPfbZloa2sa0ud1v1Vic2w7l9YR8aszqSLx13PuAnccvLKE4VyTrPM78AGB0Kq
y8VwW9issCoRoj1AhxQ4kbtHlTJq+IPbQXEeUGx+hfii9Nqs4wgnmox3OomHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjaXGCAb22X8/6DuzHlgTjdxZjlMwHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzEzNzM3MmUzMTMyMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDPUwDQYJKoZIhvcNAQELBQADggEBADaPsebJ
L0FBqqq7F2F+zthDBdxhV9lEyVKX9VWMZVq8w9TDvtabxFIe3uSF9DcbeBCSGz/R
OHAYfn/ySAPDaqk8WjVe51ig5iOedBJypJfVgMaMkp+S+z7vyfODBmGGG/Zm4LnS
wQBSqvilAEA1autMHJS+OxKDd7nwyDKNDYn+ubHYK7unFByhAcxxJ2aw+oMVhXdh
KnFVFbP4X1ppwksdoFGFL+BUVeWh2kY2H5VvjDGkNwUEYvAtAxpRlKFzPbl7BQvB
Y2su24Q2psgCNC+cK609CWM4SoVkHa9xBxMIaFsuuno/MmZXrtBlPSP9txJHwUD8
2yfNloxqxlDoQis=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:30:43 2025 by rpki-client