Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
File:                     3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          mgB6YCNSLkH5mDvw/iyhZRAuESVQ47056OuM6mT75pw=
Subject key identifier:   19:7C:20:18:F5:47:73:5C:66:A7:18:E5:46:2D:0A:01:C8:B1:C2:77
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       048B48604E8EE6BF1C776E1E1B6EE0045E0E975A
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
Signing time:             Wed 05 Mar 2025 23:22:05 +0000
ROA not before:           Wed 05 Mar 2025 23:17:05 +0000
ROA not after:            Wed 04 Mar 2026 23:22:05 +0000
asID:                     52756
IP address blocks:        177.11.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8b:48:60:4e:8e:e6:bf:1c:77:6e:1e:1b:6e:e0:04:5e:0e:97:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Mar  5 23:17:05 2025 GMT
            Not After : Mar  4 23:22:05 2026 GMT
        Subject: CN=197C2018F547735C66A718E5462D0A01C8B1C277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:ba:14:58:1c:8d:13:d0:78:35:f3:d2:69:
                    67:37:c6:b0:fd:26:87:b7:87:a3:fb:6b:5f:5a:2c:
                    17:d9:b8:1a:3f:a7:b4:f1:70:71:12:a3:82:ec:0c:
                    4a:a0:3e:8a:22:15:cb:f6:47:fc:52:d2:80:1d:69:
                    8e:3a:d7:a1:8c:b7:ee:66:ca:5c:94:ed:13:49:8b:
                    f3:14:6c:35:a1:8d:f9:c9:7a:de:f7:63:0e:28:a3:
                    81:51:b9:a9:ee:86:7f:75:70:ac:f8:d0:c7:b6:07:
                    39:4b:7a:e8:40:d6:44:eb:65:ba:0a:32:16:31:4f:
                    03:f0:1c:da:f1:b0:5e:b6:75:16:02:07:b3:ba:e6:
                    60:84:bf:86:2a:c4:5d:3b:aa:8d:56:f5:27:3a:c4:
                    ba:6e:44:78:ad:6a:fc:6b:ec:20:fa:5f:c6:88:81:
                    22:2d:46:50:1c:8d:a6:3a:4d:d0:41:4d:45:b6:d7:
                    89:54:e5:3b:20:60:78:60:37:e0:5f:a6:06:e5:e9:
                    78:68:bc:4b:e7:98:f2:3c:1f:c2:82:0b:8f:71:cd:
                    92:e1:f0:65:f3:b9:45:a2:bb:aa:67:ef:24:ac:b0:
                    9e:36:d5:c1:f1:8c:af:90:c8:0c:dc:6f:b5:c5:9a:
                    56:c2:15:25:ba:ce:08:4c:0c:a4:9c:b4:40:49:0d:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7C:20:18:F5:47:73:5C:66:A7:18:E5:46:2D:0A:01:C8:B1:C2:77
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:cd:d5:bf:f5:e6:7c:a3:02:22:f6:71:fc:03:44:1e:65:
         10:8d:f1:ca:91:98:94:98:8c:bb:7c:4c:75:92:ca:ee:ca:cc:
         4f:13:ec:25:51:b2:10:56:7b:4b:8a:b5:af:51:2b:a7:4c:63:
         6f:15:d9:28:02:19:7c:c1:c2:86:73:17:50:b2:58:21:89:21:
         3c:81:78:7d:21:20:b9:bc:e1:87:e1:f9:12:71:86:2e:1d:99:
         25:b1:fc:d3:23:c7:b8:02:93:80:b8:3b:38:81:80:5e:39:77:
         52:72:ca:07:64:6a:f3:d6:eb:4e:ed:3e:f5:0b:d0:dc:ac:41:
         46:11:2c:28:8e:06:af:5b:f0:c5:bb:78:47:32:27:47:e9:7e:
         96:e2:0c:7e:61:31:6d:a8:6b:16:08:b9:9d:3f:51:29:26:49:
         aa:19:bf:b2:40:1d:b3:e1:28:6f:68:53:6b:b2:08:11:50:82:
         9f:95:20:32:39:3e:b0:61:94:99:44:31:f7:a5:9c:c2:34:d4:
         a4:ed:03:e3:ad:03:f2:06:ed:84:05:b9:3b:e8:af:20:14:5d:
         2d:5b:78:cb:03:41:a6:1d:fc:35:ab:67:7d:00:b4:d8:68:34:
         8a:e6:54:74:7e:aa:ac:1a:1c:b9:fb:a3:78:7e:c3:e2:fe:ee:
         e3:64:1b:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBItIYE6O5r8cd24eG27gBF4Ol1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVCQTczRTY2OEYwNkVCM0U4MzU5NDBBMDVFM0ZFNzAz
NjM5MEQxNTAeFw0yNTAzMDUyMzE3MDVaFw0yNjAzMDQyMzIyMDVaMDMxMTAvBgNV
BAMTKDE5N0MyMDE4RjU0NzczNUM2NkE3MThFNTQ2MkQwQTAxQzhCMUMyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFboUWByNE9B4NfPSaWc3xrD9
Joe3h6P7a19aLBfZuBo/p7TxcHESo4LsDEqgPooiFcv2R/xS0oAdaY4616GMt+5m
ylyU7RNJi/MUbDWhjfnJet73Yw4oo4FRuanuhn91cKz40Me2BzlLeuhA1kTrZboK
MhYxTwPwHNrxsF62dRYCB7O65mCEv4YqxF07qo1W9Sc6xLpuRHitavxr7CD6X8aI
gSItRlAcjaY6TdBBTUW214lU5TsgYHhgN+Bfpgbl6XhovEvnmPI8H8KCC49xzZLh
8GXzuUWiu6pn7ySssJ421cHxjK+QyAzcb7XFmlbCFSW6zghMDKSctEBJDR03AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGXwgGPVHc1xmpxjlRi0KAcixwncwHwYDVR0j
BBgwFoAU/rpz5mjwbrPoNZQKBeP+cDY5DRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURhNXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1
cVAvMS9GRUJBNzNFNjY4RjA2RUIzRTgzNTk0MEEwNUUzRkU3MDM2MzkwRDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFQkE3M0U2NjhGMDZFQjNF
ODM1OTQwQTA1RTNGRTcwMzYzOTBEMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEYTV0Q3JmbUdzNHd4U3F2Wk5UaFliQnQyYWZNNnF4UDZjbWJleXlZNXFQLzEv
MzEzNzM3MmUzMTMxMmUzMjM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQv8MA0GCSqGSIb3DQEBCwUAA4IBAQCA6s3Vv/Xm
fKMCIvZx/ANEHmUQjfHKkZiUmIy7fEx1ksruysxPE+wlUbIQVntLirWvUSunTGNv
FdkoAhl8wcKGcxdQslghiSE8gXh9ISC5vOGH4fkScYYuHZklsfzTI8e4ApOAuDs4
gYBeOXdScsoHZGrz1utO7T71C9DcrEFGESwojgavW/DFu3hHMidH6X6W4gx+YTFt
qGsWCLmdP1EpJkmqGb+yQB2z4ShvaFNrsggRUIKflSAyOT6wYZSZRDH3pZzCNNSk
7QPjrQPyBu2EBbk76K8gFF0tW3jLA0GmHfw1q2d9ALTYaDSK5lR0fqqsGhy5+6N4
fsPi/u7jZBtP
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:36:46 2025 by rpki-client