Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32332d3233203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          Q2dGSnSywKMLJIFsrtCWJz15aJJshOxb2Ifft8O1x9g=
Subject key identifier:   82:EE:30:94:CE:AB:80:CA:58:3E:62:6F:8A:2D:AB:7A:6C:5F:9D:A3
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       49FAC2CE7957BDEAECF285D8626A5F8AD4527B59
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32332d3233203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:38 +0000
ROA not before:           Mon 08 Apr 2024 19:38:38 +0000
ROA not after:            Mon 07 Apr 2025 19:43:38 +0000
asID:                     52685
IP address blocks:        177.136.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:c2:ce:79:57:bd:ea:ec:f2:85:d8:62:6a:5f:8a:d4:52:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:38 2024 GMT
            Not After : Apr  7 19:43:38 2025 GMT
        Subject: CN=82EE3094CEAB80CA583E626F8A2DAB7A6C5F9DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:f0:ba:9f:8f:a2:67:4e:d1:d4:3b:9f:e3:
                    f5:36:06:ec:a5:eb:19:64:05:e0:dd:29:b1:66:51:
                    be:3d:02:bf:3c:a7:94:4c:63:9e:b2:a6:aa:9e:9d:
                    78:6b:46:ba:d9:75:38:14:5d:04:ec:3a:b6:47:56:
                    d3:d8:49:4f:0c:80:ba:b2:73:9f:83:a3:fd:7d:52:
                    aa:b2:35:a6:ca:91:d9:d3:d4:09:b0:e0:9d:86:01:
                    e6:15:e6:ea:09:3b:22:00:7c:f8:6e:79:21:b5:11:
                    62:0a:41:5f:b0:35:26:84:f7:79:d9:83:85:33:c2:
                    26:ca:aa:24:99:2e:5b:5c:db:4d:98:2e:03:e8:b2:
                    92:67:46:4a:b5:7f:d0:7a:cf:4c:10:75:13:23:55:
                    62:9c:1e:6e:d8:09:8b:4a:a9:34:dc:18:d8:3b:d1:
                    68:a0:b6:97:07:fc:51:de:d5:e8:5d:e5:77:e9:d7:
                    a4:57:55:db:8a:fa:a4:b6:12:e7:ec:af:c9:62:02:
                    22:f7:fd:e3:dc:3a:d0:bd:16:75:e7:f4:0a:72:8f:
                    56:91:d3:30:3e:ac:7a:bb:86:95:ee:ab:ae:ca:d7:
                    76:6e:b8:12:ab:5d:88:5e:8e:eb:fa:05:09:a3:4e:
                    a8:cc:fe:78:50:dc:41:df:63:38:98:10:56:82:b9:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:30:94:CE:AB:80:CA:58:3E:62:6F:8A:2D:AB:7A:6C:5F:9D:A3
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:60:8a:2a:f6:8a:38:d5:fe:98:89:08:d9:51:c8:13:73:41:
         27:59:3f:6f:26:56:5e:ef:5c:1e:bb:80:b5:38:f6:9c:f3:e4:
         c5:37:2e:5f:d1:4a:b8:2e:14:8a:ca:11:13:a4:65:52:61:e5:
         46:ca:38:95:fc:2f:94:b3:cf:5c:89:64:70:31:ae:8d:6a:b5:
         d4:00:72:07:ea:36:06:92:d7:a6:f9:ff:2a:3a:3e:0f:c2:60:
         d7:32:60:7d:bb:96:e7:07:01:50:af:1c:35:bf:69:44:40:c2:
         2f:a6:58:2d:54:0a:8b:c9:9b:ed:ee:a2:f4:a7:ea:4c:30:89:
         02:55:b8:80:73:e8:40:d7:28:f6:b5:b2:ce:c4:99:32:0a:1d:
         82:46:b9:b0:08:bd:0d:48:99:6c:b6:7f:f8:1c:e1:ea:6b:cd:
         73:c7:c1:53:d0:ae:16:ce:85:dd:56:bd:41:87:db:81:2b:30:
         e8:ef:2c:4b:8d:bb:0c:d5:9d:bf:2a:9f:9f:08:97:21:03:e1:
         fc:7d:af:75:45:99:fc:d0:06:cd:63:0c:2c:63:ce:a7:a9:fe:
         f2:c9:70:02:72:8b:83:75:cf:4a:e0:0e:89:93:67:18:e2:04:
         6a:b4:01:de:66:c1:92:3b:84:39:c6:6e:6c:16:22:69:16:3c:
         7a:56:ce:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSfrCznlXvers8oXYYmpfitRSe1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4NjlCRTMzRUFCQTI4QjlENjNFRUQ0NTkyNzQwODMz
RUE5ODI2QjAeFw0yNDA0MDgxOTM4MzhaFw0yNTA0MDcxOTQzMzhaMDMxMTAvBgNV
BAMTKDgyRUUzMDk0Q0VBQjgwQ0E1ODNFNjI2RjhBMkRBQjdBNkM1RjlEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi4fC6n4+iZ07R1Duf4/U2Buyl
6xlkBeDdKbFmUb49Ar88p5RMY56ypqqenXhrRrrZdTgUXQTsOrZHVtPYSU8MgLqy
c5+Do/19UqqyNabKkdnT1Amw4J2GAeYV5uoJOyIAfPhueSG1EWIKQV+wNSaE93nZ
g4UzwibKqiSZLltc202YLgPospJnRkq1f9B6z0wQdRMjVWKcHm7YCYtKqTTcGNg7
0WigtpcH/FHe1ehd5Xfp16RXVduK+qS2Eufsr8liAiL3/ePcOtC9FnXn9Apyj1aR
0zA+rHq7hpXuq67K13ZuuBKrXYhejuv6BQmjTqjM/nhQ3EHfYziYEFaCuVMFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgu4wlM6rgMpYPmJvii2remxfnaMwHwYDVR0j
BBgwFoAUdIab4z6rooudY+7UWSdAgz6pgmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMC83NDg2OUJFMzNFQUJBMjhCOUQ2M0VFRDQ1OTI3NDA4MzNFQTk4MjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0ODY5QkUzM0VBQkEyOEI5
RDYzRUVENDU5Mjc0MDgzM0VBOTgyNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzAv
MzEzNzM3MmUzMTMzMzYyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxiNAwDQYJKoZIhvcNAQELBQADggEBAEFgiir2
ijjV/piJCNlRyBNzQSdZP28mVl7vXB67gLU49pzz5MU3Ll/RSrguFIrKEROkZVJh
5UbKOJX8L5Szz1yJZHAxro1qtdQAcgfqNgaS16b5/yo6Pg/CYNcyYH27lucHAVCv
HDW/aURAwi+mWC1UCovJm+3uovSn6kwwiQJVuIBz6EDXKPa1ss7EmTIKHYJGubAI
vQ1ImWy2f/gc4eprzXPHwVPQrhbOhd1WvUGH24ErMOjvLEuNuwzVnb8qn58IlyED
4fx9r3VFmfzQBs1jDCxjzqep/vLJcAJyi4N1z0rgDomTZxjiBGq0Ad5mwZI7hDnG
bmwWImkWPHpWzpk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:34 2025 by rpki-client