Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          R0NH7QIxaSC2PdmnSPOnPMfDOwjjtBLMWNEovwI2cpc=
Subject key identifier:   0C:1E:BE:06:89:51:49:C8:5B:7B:02:B9:4C:34:AB:A9:EF:F9:2F:3D
Certificate issuer:       /CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
Certificate serial:       1D427639EAA078B6F381E2C0144190BAEAD704B5
Authority key identifier: B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
Signing time:             Wed 30 Apr 2025 17:43:27 +0000
ROA not before:           Wed 30 Apr 2025 17:38:27 +0000
ROA not after:            Wed 29 Apr 2026 17:43:27 +0000
asID:                     263604
IP address blocks:        177.71.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:76:39:ea:a0:78:b6:f3:81:e2:c0:14:41:90:ba:ea:d7:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
        Validity
            Not Before: Apr 30 17:38:27 2025 GMT
            Not After : Apr 29 17:43:27 2026 GMT
        Subject: CN=0C1EBE06895149C85B7B02B94C34ABA9EFF92F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:ff:fa:dc:7f:8e:76:eb:e4:5b:7b:4f:e4:
                    0e:b8:64:dd:bc:aa:ce:7f:27:f0:78:38:d6:fe:67:
                    99:d8:60:aa:db:29:53:7d:93:6b:97:8b:07:4b:40:
                    12:f6:ec:1e:e8:2f:7f:d7:2a:59:2c:ef:da:a1:43:
                    d2:1e:9d:f5:70:39:ce:45:e8:fd:1e:29:10:55:8e:
                    9c:99:3a:ca:16:4c:1e:7c:2e:c9:fc:d8:0d:e0:94:
                    18:0c:91:b8:d4:a3:9a:39:f2:6d:ed:57:25:fd:ec:
                    a7:6a:c9:b8:12:6d:c1:9d:b0:61:7e:11:a4:23:6b:
                    6f:b6:0c:16:86:28:e0:90:5e:cf:4f:f0:36:2b:28:
                    d0:53:24:3f:d8:63:69:07:4f:2d:3c:e1:6e:8e:cb:
                    d4:60:c9:e8:45:1c:26:07:8c:4f:41:90:4a:d2:51:
                    91:c7:de:a0:2e:94:44:bf:cf:a4:db:11:a9:e9:18:
                    3c:cb:31:8d:1e:8b:65:62:6c:ca:e2:b3:0c:38:05:
                    8e:f8:d4:a6:7d:80:03:b0:71:c8:90:35:f3:bb:85:
                    78:47:7a:3f:3a:1d:a2:94:e5:c1:2c:42:ae:a9:d1:
                    18:3e:47:99:d5:23:5e:e6:d8:ae:2c:fe:a3:5b:86:
                    72:2f:0d:86:88:22:a9:db:38:88:b3:7e:58:7c:c5:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:BE:06:89:51:49:C8:5B:7B:02:B9:4C:34:AB:A9:EF:F9:2F:3D
            X509v3 Authority Key Identifier:
                keyid:B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/B5416A429171B4A07910A6737C6538DE6D5E9EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:c8:7e:7a:11:ea:37:5a:7f:15:51:a2:8b:89:f0:bf:41:
         17:ed:63:ef:7b:b9:20:f9:f0:65:16:fb:73:51:8c:20:e6:85:
         a3:46:3b:78:a8:79:34:2a:1a:53:55:4c:64:5c:19:64:be:4e:
         b4:58:0d:a1:a0:cb:ca:e2:a4:1d:16:da:d5:35:8b:8b:2f:dd:
         2f:a1:6c:a4:9f:f5:68:e5:17:5c:dd:33:6e:0c:04:e0:d2:4f:
         ff:a1:0f:2e:bc:e8:8c:b5:55:f3:ff:ea:0e:a2:a0:e3:42:8c:
         e0:13:c0:c9:cd:2f:2b:f1:80:9b:69:f4:9d:24:62:97:00:05:
         db:0a:f5:36:6a:a3:01:d5:93:4f:66:d6:e3:13:78:7c:67:30:
         74:1f:a0:58:8c:3a:30:0a:0c:1b:e1:79:f9:51:ce:7d:06:ea:
         67:19:34:1c:6a:5f:05:8f:e7:5a:d1:0d:04:c6:a9:a3:ba:c9:
         7e:ff:58:1f:47:64:dc:6d:5f:eb:0d:12:4c:41:80:ec:0c:ff:
         b1:bf:96:d0:1b:32:48:59:58:d5:6e:80:04:03:36:c4:a6:24:
         c5:81:66:11:47:d0:86:2b:e2:4d:47:cb:d4:09:28:0a:b5:f8:
         c6:db:8a:03:af:a5:7f:d6:9b:3e:44:63:b3:98:a0:06:02:42:
         c1:66:87:c0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUJ2OeqgeLbzgeLAFEGQuurXBLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU0MTZBNDI5MTcxQjRBMDc5MTBBNjczN0M2NTM4REU2
RDVFOUVCNzAeFw0yNTA0MzAxNzM4MjdaFw0yNjA0MjkxNzQzMjdaMDMxMTAvBgNV
BAMTKDBDMUVCRTA2ODk1MTQ5Qzg1QjdCMDJCOTRDMzRBQkE5RUZGOTJGM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDv/63H+OduvkW3tP5A64ZN28
qs5/J/B4ONb+Z5nYYKrbKVN9k2uXiwdLQBL27B7oL3/XKlks79qhQ9IenfVwOc5F
6P0eKRBVjpyZOsoWTB58Lsn82A3glBgMkbjUo5o58m3tVyX97KdqybgSbcGdsGF+
EaQja2+2DBaGKOCQXs9P8DYrKNBTJD/YY2kHTy084W6Oy9RgyehFHCYHjE9BkErS
UZHH3qAulES/z6TbEanpGDzLMY0ei2VibMrisww4BY741KZ9gAOwcciQNfO7hXhH
ej86HaKU5cEsQq6p0Rg+R5nVI17m2K4s/qNbhnIvDYaIIqnbOIizflh8xURTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDB6+BolRSchbewK5TDSrqe/5Lz0wHwYDVR0j
BBgwFoAUtUFqQpFxtKB5EKZzfGU43m1enrcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMC9CNTQxNkE0MjkxNzFCNEEwNzkxMEE2NzM3QzY1MzhERTZENUU5RUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NDE2QTQyOTE3MUI0QTA3
OTEwQTY3MzdDNjUzOERFNkQ1RTlFQjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzAv
MzEzNzM3MmUzNzMxMmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUdaMA0GCSqGSIb3DQEBCwUAA4IBAQCfNsh+ehHq
N1p/FVGii4nwv0EX7WPve7kg+fBlFvtzUYwg5oWjRjt4qHk0KhpTVUxkXBlkvk60
WA2hoMvK4qQdFtrVNYuLL90voWykn/Vo5Rdc3TNuDATg0k//oQ8uvOiMtVXz/+oO
oqDjQozgE8DJzS8r8YCbafSdJGKXAAXbCvU2aqMB1ZNPZtbjE3h8ZzB0H6BYjDow
Cgwb4Xn5Uc59BupnGTQcal8Fj+da0Q0Exqmjusl+/1gfR2TcbV/rDRJMQYDsDP+x
v5bQGzJIWVjVboAEAzbEpiTFgWYRR9CGK+JNR8vUCSgKtfjG24oDr6V/1ps+RGOz
mKAGAkLBZofA
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:08:52 2025 by rpki-client