Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa
File:                     3137372e35352e39302e302f32342d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          QKMBbR8cPDkHGMcMU8kti3wxeJaN/ro0QVXvLkjJv2A=
Subject key identifier:   E1:57:37:DA:DE:4B:21:54:AA:AA:0C:5A:85:46:1F:3A:D1:D0:F6:5F
Certificate issuer:       /CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
Certificate serial:       42C8A82AB42FBCC3A41FD23B194680F01FD12090
Authority key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa
Signing time:             Wed 11 Dec 2024 20:33:53 +0000
ROA not before:           Wed 11 Dec 2024 20:28:53 +0000
ROA not after:            Wed 10 Dec 2025 20:33:53 +0000
asID:                     263571
IP address blocks:        177.55.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c8:a8:2a:b4:2f:bc:c3:a4:1f:d2:3b:19:46:80:f0:1f:d1:20:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Validity
            Not Before: Dec 11 20:28:53 2024 GMT
            Not After : Dec 10 20:33:53 2025 GMT
        Subject: CN=E15737DADE4B2154AAAA0C5A85461F3AD1D0F65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:65:1d:d5:3e:76:f3:78:d7:3f:7b:36:54:
                    39:b3:42:64:de:0d:6b:78:f9:5c:1f:0a:2e:6b:69:
                    6d:19:25:b6:cd:15:3c:72:21:a9:1b:ec:fe:e5:35:
                    8a:78:e6:d1:f3:9e:32:0d:79:ac:09:08:b6:55:a8:
                    c3:20:a7:21:15:c9:10:87:52:fe:07:f6:0b:e0:98:
                    63:ab:9d:f5:59:52:7c:f4:93:b7:07:db:9f:a8:94:
                    f5:8d:d0:de:22:da:13:37:a9:7d:09:72:9b:5c:65:
                    9b:b5:83:55:b7:8c:01:cb:31:34:39:f3:58:be:10:
                    f3:2a:c7:8d:91:91:b2:ae:37:e7:80:8e:54:8f:66:
                    d4:d2:8a:25:34:63:67:98:bd:7f:99:f1:d1:11:6e:
                    fc:7b:8c:95:28:fd:1d:7a:b8:29:14:c1:41:69:5e:
                    a2:85:dd:2f:5b:e5:d0:3b:96:6e:bc:9b:bb:14:23:
                    95:21:05:a7:51:f6:e1:38:df:82:e2:30:6a:b7:85:
                    f9:82:b8:27:17:88:21:76:59:99:f5:a8:69:b4:03:
                    01:be:9d:14:ee:91:6f:9b:82:ae:d0:40:fe:66:a2:
                    44:03:02:30:b5:b9:ae:af:fc:8d:59:2a:c0:4c:4d:
                    e0:58:5b:b9:eb:ee:37:e4:37:2d:a2:a7:9a:cd:9e:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:57:37:DA:DE:4B:21:54:AA:AA:0C:5A:85:46:1F:3A:D1:D0:F6:5F
            X509v3 Authority Key Identifier:
                keyid:2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:42:ae:4a:b6:e9:55:28:21:41:13:77:e6:6e:f2:9f:c6:
         3c:99:87:9e:37:a7:a8:e0:74:e5:eb:83:e0:6b:b5:cf:4c:2b:
         47:51:87:8f:20:19:7c:18:3e:39:3f:73:c1:40:4e:31:67:21:
         c7:d4:c8:a8:55:89:49:c1:3d:cc:79:0f:92:83:ac:6a:6b:ec:
         ad:c7:1d:d9:45:7b:bd:56:8b:03:fc:c5:fe:56:5c:69:f3:7d:
         b8:8c:a7:d9:ec:06:00:00:07:76:e0:bd:47:55:c6:57:79:34:
         47:b9:44:de:ef:6b:1c:3b:3c:22:5f:01:7f:67:16:b3:77:00:
         80:3c:92:e2:15:ef:bc:02:43:fc:b4:95:c1:b5:06:79:be:71:
         d2:36:f1:90:82:11:2f:5d:95:bb:bc:9f:f8:9e:2e:b2:72:63:
         90:d6:a9:a0:f4:3c:b4:c3:f6:7a:27:d8:71:c1:47:a6:41:38:
         7f:6c:48:e9:fd:68:15:23:a9:1c:59:34:5b:b3:66:29:d1:93:
         41:4b:42:f5:d8:ac:cd:05:86:83:bd:ab:f6:f4:e6:15:4b:fa:
         56:b1:ec:7e:04:58:03:7b:02:63:15:6a:5e:73:c2:01:70:72:
         90:ab:dd:87:bf:bb:a5:17:73:e3:a6:cf:f7:60:d6:3c:4a:9a:
         df:61:47:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQsioKrQvvMOkH9I7GUaA8B/RIJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEN0ZDQzQ3RENBOUZGOEEyQjlDMzU4MDc2RjgwQ0M3
QjlBNTE5MDAeFw0yNDEyMTEyMDI4NTNaFw0yNTEyMTAyMDMzNTNaMDMxMTAvBgNV
BAMTKEUxNTczN0RBREU0QjIxNTRBQUFBMEM1QTg1NDYxRjNBRDFEMEY2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZGUd1T5283jXP3s2VDmzQmTe
DWt4+VwfCi5raW0ZJbbNFTxyIakb7P7lNYp45tHznjINeawJCLZVqMMgpyEVyRCH
Uv4H9gvgmGOrnfVZUnz0k7cH25+olPWN0N4i2hM3qX0JcptcZZu1g1W3jAHLMTQ5
81i+EPMqx42RkbKuN+eAjlSPZtTSiiU0Y2eYvX+Z8dERbvx7jJUo/R16uCkUwUFp
XqKF3S9b5dA7lm68m7sUI5UhBadR9uE434LiMGq3hfmCuCcXiCF2WZn1qGm0AwG+
nRTukW+bgq7QQP5mokQDAjC1ua6v/I1ZKsBMTeBYW7nr7jfkNy2ip5rNnv1VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4Vc32t5LIVSqqgxahUYfOtHQ9l8wHwYDVR0j
BBgwFoAUK9f8xH3Kn/iiucNYB2+AzHuaUZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC8yQkQ3RkNDNDdEQ0E5RkY4QTJCOUMzNTgwNzZGODBDQzdCOUE1MTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDdGQ0M0N0RDQTlGRjhB
MkI5QzM1ODA3NkY4MENDN0I5QTUxOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzEzNzM3MmUzNTM1MmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTdaMA0GCSqGSIb3DQEBCwUAA4IBAQA6TEKuSrbp
VSghQRN35m7yn8Y8mYeeN6eo4HTl64Pga7XPTCtHUYePIBl8GD45P3PBQE4xZyHH
1MioVYlJwT3MeQ+Sg6xqa+ytxx3ZRXu9VosD/MX+Vlxp8324jKfZ7AYAAAd24L1H
VcZXeTRHuUTe72scOzwiXwF/ZxazdwCAPJLiFe+8AkP8tJXBtQZ5vnHSNvGQghEv
XZW7vJ/4ni6ycmOQ1qmg9Dy0w/Z6J9hxwUemQTh/bEjp/WgVI6kcWTRbs2Yp0ZNB
S0L12KzNBYaDvav29OYVS/pWsex+BFgDewJjFWpec8IBcHKQq92Hv7ulF3Pjps/3
YNY8SprfYUfk
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:38 2025 by rpki-client