Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e33302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          1pVB4EBDSgTpys4sdMdkC0CpxV0Dm9XqFTRIsH9NawM=
Subject key identifier:   24:B8:93:E1:BF:6A:0B:31:1C:CD:D8:1B:07:97:45:BE:AA:D4:C3:87
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       757414A39E9FD186E7A361C03C22B438394938D1
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:44 +0000
ROA not before:           Wed 05 Mar 2025 20:54:44 +0000
ROA not after:            Wed 04 Mar 2026 20:59:44 +0000
asID:                     52685
IP address blocks:        177.73.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:14:a3:9e:9f:d1:86:e7:a3:61:c0:3c:22:b4:38:39:49:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:44 2025 GMT
            Not After : Mar  4 20:59:44 2026 GMT
        Subject: CN=24B893E1BF6A0B311CCDD81B079745BEAAD4C387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:7d:ca:d9:da:22:38:30:3a:9d:55:16:1f:
                    6e:2d:e5:5f:50:41:69:2d:f8:17:c3:0b:5a:92:2f:
                    e5:72:d3:2f:dc:1c:5e:ae:c0:01:61:dc:2d:b1:95:
                    a9:8d:ec:ec:62:02:f7:30:e6:1e:39:38:56:bc:62:
                    62:5e:60:2f:59:72:d2:a3:77:7f:53:c6:2b:28:0c:
                    e9:a2:48:ff:a7:20:b6:fe:00:f2:35:49:51:db:6a:
                    07:4b:d4:67:32:f8:83:88:fd:ea:90:05:a9:e1:3d:
                    12:d5:b2:57:6e:d5:a6:57:ab:4e:90:a1:56:ae:c7:
                    ae:1c:7d:f1:61:aa:c1:57:a5:26:72:5c:c6:68:b1:
                    52:ae:8f:71:8e:5a:e6:fc:aa:68:61:ce:b5:f7:5d:
                    f6:87:e0:bd:a8:30:aa:b3:b2:62:43:eb:44:b3:26:
                    e4:8c:24:41:0d:e6:9a:88:f7:dc:d0:e3:bc:15:8f:
                    b7:7f:bb:3f:de:8e:d9:d2:46:b8:f9:dc:75:7c:02:
                    69:64:ba:68:66:e5:76:7f:d7:06:69:6e:cc:4a:b1:
                    87:cb:a1:b6:cb:fc:99:f1:22:2e:ee:6a:25:82:09:
                    e1:47:7a:68:73:22:3a:83:d3:ad:72:30:2f:78:37:
                    3c:a6:0a:cc:0b:7e:19:a6:2c:27:0c:3b:25:16:98:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:93:E1:BF:6A:0B:31:1C:CD:D8:1B:07:97:45:BE:AA:D4:C3:87
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:57:ae:54:8b:c8:11:3c:ea:c2:c7:d0:d9:b8:34:2e:dd:fd:
         93:e9:62:6c:b5:d1:fa:dd:e4:e6:e6:19:76:b3:45:84:a6:ea:
         91:42:73:11:5a:91:b8:5b:d3:ce:53:39:28:d0:d0:f3:87:47:
         30:cf:b5:4c:dd:6b:7e:f0:4c:cd:39:ed:65:f6:e4:77:fe:f7:
         ce:fa:16:f2:60:80:6b:31:cb:91:21:37:a8:cd:5b:cf:cb:e4:
         4f:71:56:b1:c2:fa:cc:92:4a:f4:79:d5:84:ef:51:ac:0a:d4:
         12:f0:09:be:92:b5:c2:5f:03:61:c8:5f:e2:82:66:5e:0e:8d:
         1c:2f:e9:1b:e0:14:70:0e:4b:77:d4:22:41:66:f3:b3:48:c7:
         c7:07:fd:d2:f2:d5:2e:89:b5:a3:bd:20:2a:8b:6a:aa:32:bf:
         8c:de:8d:b0:a3:7e:e4:6e:66:5b:32:6c:ed:62:0a:24:f6:7c:
         06:3f:74:0e:2c:1e:59:07:4f:ad:b5:52:45:61:9b:04:ba:ee:
         f2:bb:29:0a:ee:79:07:42:2e:18:5a:5b:2a:89:33:19:cb:f1:
         2f:ca:73:e6:84:f7:20:2f:ad:7d:1d:26:b5:86:7e:10:0a:10:
         75:6e:14:0c:a7:41:30:30:e4:a3:f9:c5:57:ac:62:09:68:22:
         1c:c0:a2:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdXQUo56f0Ybno2HAPCK0ODlJONEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNTAzMDUyMDU0NDRaFw0yNjAzMDQyMDU5NDRaMDMxMTAvBgNV
BAMTKDI0Qjg5M0UxQkY2QTBCMzExQ0NERDgxQjA3OTc0NUJFQUFENEMzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6n3K2doiODA6nVUWH24t5V9Q
QWkt+BfDC1qSL+Vy0y/cHF6uwAFh3C2xlamN7OxiAvcw5h45OFa8YmJeYC9ZctKj
d39TxisoDOmiSP+nILb+API1SVHbagdL1Gcy+IOI/eqQBanhPRLVsldu1aZXq06Q
oVaux64cffFhqsFXpSZyXMZosVKuj3GOWub8qmhhzrX3XfaH4L2oMKqzsmJD60Sz
JuSMJEEN5pqI99zQ47wVj7d/uz/ejtnSRrj53HV8Amlkumhm5XZ/1wZpbsxKsYfL
obbL/JnxIi7uaiWCCeFHemhzIjqD061yMC94NzymCswLfhmmLCcMOyUWmNJvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJLiT4b9qCzEczdgbB5dFvqrUw4cwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFJHjANBgkqhkiG9w0BAQsFAAOCAQEAuVeuVIvIETzq
wsfQ2bg0Lt39k+libLXR+t3k5uYZdrNFhKbqkUJzEVqRuFvTzlM5KNDQ84dHMM+1
TN1rfvBMzTntZfbkd/73zvoW8mCAazHLkSE3qM1bz8vkT3FWscL6zJJK9HnVhO9R
rArUEvAJvpK1wl8DYchf4oJmXg6NHC/pG+AUcA5Ld9QiQWbzs0jHxwf90vLVLom1
o70gKotqqjK/jN6NsKN+5G5mWzJs7WIKJPZ8Bj90DiweWQdPrbVSRWGbBLru8rsp
Cu55B0IuGFpbKokzGcvxL8pz5oT3IC+tfR0mtYZ+EAoQdW4UDKdBMDDko/nFV6xi
CWgiHMCiBg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:43 2025 by rpki-client