Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32342e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          4xfNJq9aE7kAY2DeIoOdros951e+uzoWs+OdoA4h2XY=
Subject key identifier:   94:26:F3:56:79:BE:9E:8B:2F:B8:EB:72:6F:E8:92:36:86:77:A5:C6
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       440E8AE98E74DDB57A8632C632AE7C98AB9CBB0F
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:45 +0000
ROA not before:           Wed 05 Mar 2025 20:54:45 +0000
ROA not after:            Wed 04 Mar 2026 20:59:45 +0000
asID:                     52685
IP address blocks:        177.73.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0e:8a:e9:8e:74:dd:b5:7a:86:32:c6:32:ae:7c:98:ab:9c:bb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:45 2025 GMT
            Not After : Mar  4 20:59:45 2026 GMT
        Subject: CN=9426F35679BE9E8B2FB8EB726FE892368677A5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:9a:08:b1:9f:b3:a1:54:15:5f:fa:1e:cb:
                    4b:a0:da:a1:2b:72:7a:c7:89:7a:48:58:27:6b:6d:
                    a0:0c:6f:f2:46:6d:17:f6:a9:fe:1e:89:db:83:99:
                    82:e3:ec:4f:c3:63:e2:bf:08:f3:c6:d0:88:ce:60:
                    42:cc:1e:77:34:79:fc:5b:20:8e:73:f5:a1:4d:1b:
                    64:c5:3d:5a:46:9a:3d:fc:2f:4a:c7:63:3f:92:36:
                    b6:20:ed:82:08:73:06:8b:9a:99:12:b8:93:ef:3c:
                    e1:05:60:56:65:80:ad:24:7f:b0:54:67:da:58:d8:
                    60:54:f7:7f:7b:dc:d4:87:ce:22:36:8f:e8:90:50:
                    d1:38:c2:fe:d7:3a:8f:57:3e:b2:21:37:c6:f9:09:
                    be:10:10:67:42:9d:d5:ec:21:b1:78:35:66:2d:0d:
                    25:81:27:e7:88:36:56:9b:0c:a1:b6:fb:d1:cb:0d:
                    aa:a7:a2:76:ba:1d:7a:62:88:af:cf:a7:1f:68:ad:
                    6f:66:fa:fc:fe:43:65:31:e7:3b:d6:41:38:ee:07:
                    3a:3e:18:de:0d:38:23:b9:b5:08:b5:3c:82:80:be:
                    58:3b:f0:d6:34:d6:8e:e1:29:81:66:e6:0e:33:70:
                    3b:8a:c7:e8:64:e0:ed:64:ff:72:0b:f4:46:03:18:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:F3:56:79:BE:9E:8B:2F:B8:EB:72:6F:E8:92:36:86:77:A5:C6
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:2e:f7:a3:11:7b:3b:af:74:7b:d0:54:3d:7a:7c:d4:41:ff:
         8a:fe:6a:e9:7f:ad:6a:a5:ab:2b:5b:5b:be:5d:19:8d:a2:90:
         23:cc:db:44:29:b2:e0:b8:fe:85:14:76:5b:8a:57:5a:bd:26:
         9b:aa:39:31:c5:7a:8f:fd:c8:3c:a5:e5:04:be:34:8a:f8:fa:
         4b:0d:c3:5f:65:6a:5d:02:3a:9c:f8:4f:4e:49:d5:4c:1d:d8:
         7f:3b:37:ae:e7:bb:c7:c7:87:61:f4:f5:21:48:47:06:7c:b1:
         54:a1:ee:24:7b:db:3f:70:90:86:f6:61:07:ab:b6:d3:7b:8c:
         f0:ed:be:b7:1b:b6:f8:4b:db:ad:72:72:a5:1d:2e:ba:41:c0:
         a1:dc:35:6c:71:42:b9:32:a4:25:9e:eb:5b:71:54:49:81:be:
         2e:e0:df:4e:f3:4b:dc:ea:23:86:7b:fd:79:18:8e:62:68:71:
         46:55:58:7b:00:3c:82:47:3e:2f:34:86:d5:ab:63:68:e1:78:
         56:29:50:4a:ea:3e:02:a6:8e:0e:5e:4a:6c:08:27:d2:86:c3:
         26:d9:0b:4c:1d:3a:d7:15:b5:05:d7:18:25:c4:72:9d:23:31:
         34:64:60:ef:3d:b2:ae:56:48:02:8b:89:7e:49:fb:d0:f5:7b:
         66:42:51:ed
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURA6K6Y503bV6hjLGMq58mKucuw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNTAzMDUyMDU0NDVaFw0yNjAzMDQyMDU5NDVaMDMxMTAvBgNV
BAMTKDk0MjZGMzU2NzlCRTlFOEIyRkI4RUI3MjZGRTg5MjM2ODY3N0E1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtF5oIsZ+zoVQVX/oey0ug2qEr
cnrHiXpIWCdrbaAMb/JGbRf2qf4eiduDmYLj7E/DY+K/CPPG0IjOYELMHnc0efxb
II5z9aFNG2TFPVpGmj38L0rHYz+SNrYg7YIIcwaLmpkSuJPvPOEFYFZlgK0kf7BU
Z9pY2GBU93973NSHziI2j+iQUNE4wv7XOo9XPrIhN8b5Cb4QEGdCndXsIbF4NWYt
DSWBJ+eINlabDKG2+9HLDaqnona6HXpiiK/Ppx9orW9m+vz+Q2Ux5zvWQTjuBzo+
GN4NOCO5tQi1PIKAvlg78NY01o7hKYFm5g4zcDuKx+hk4O1k/3IL9EYDGK/5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlCbzVnm+nosvuOtyb+iSNoZ3pcYwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJGDANBgkqhkiG9w0BAQsFAAOCAQEAxi73oxF7O690
e9BUPXp81EH/iv5q6X+taqWrK1tbvl0ZjaKQI8zbRCmy4Lj+hRR2W4pXWr0mm6o5
McV6j/3IPKXlBL40ivj6Sw3DX2VqXQI6nPhPTknVTB3Yfzs3rue7x8eHYfT1IUhH
BnyxVKHuJHvbP3CQhvZhB6u203uM8O2+txu2+EvbrXJypR0uukHAodw1bHFCuTKk
JZ7rW3FUSYG+LuDfTvNL3Oojhnv9eRiOYmhxRlVYewA8gkc+LzSG1atjaOF4VilQ
Suo+AqaODl5KbAgn0obDJtkLTB061xW1BdcYJcRynSMxNGRg7z2yrlZIAouJfkn7
0PV7ZkJR7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:32 2025 by rpki-client