Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa
File:                     3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          aXwXtUW8SVog4CbHhafFovBoZ1KkYxEBDtE7YidwXls=
Subject key identifier:   7D:24:48:E4:BC:EA:D0:BB:FA:A2:4F:43:5C:99:61:45:6D:5C:7D:1F
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       76811C084DB196D916A36B2A8A92DF5059D037CA
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:19:00 +0000
ROA not before:           Fri 09 Feb 2024 17:14:00 +0000
ROA not after:            Fri 07 Feb 2025 17:19:00 +0000
asID:                     263614
IP address blocks:        177.23.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:1c:08:4d:b1:96:d9:16:a3:6b:2a:8a:92:df:50:59:d0:37:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:14:00 2024 GMT
            Not After : Feb  7 17:19:00 2025 GMT
        Subject: CN=7D2448E4BCEAD0BBFAA24F435C9961456D5C7D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:d6:ce:61:c9:a0:bd:01:29:0c:73:db:19:
                    56:3d:77:68:e8:9c:54:28:7d:95:28:70:f1:4b:71:
                    36:f4:2a:ea:34:cf:29:e6:e8:94:1f:47:87:b7:f4:
                    10:35:fe:b2:38:f8:41:b5:40:37:33:e6:17:f9:a0:
                    1f:76:68:c4:22:09:45:68:96:a3:26:1d:ce:e8:9c:
                    46:e6:73:25:d3:0e:cb:28:61:2f:be:45:ea:a2:ee:
                    02:ae:af:dc:51:0f:59:41:25:35:f3:0d:07:3b:32:
                    d8:83:f7:e0:bb:da:93:0b:bf:b0:85:1e:0d:b0:39:
                    30:3a:95:93:97:ff:1d:06:fd:3a:8c:e1:5b:28:b5:
                    ae:0f:ea:74:b2:c0:8c:e7:a1:f7:c8:2f:02:e1:2c:
                    ac:04:2a:7d:24:f2:7d:d0:24:ac:1f:05:cb:22:73:
                    bc:76:5f:96:a8:86:3a:88:62:8e:f9:3b:7a:11:b6:
                    5d:11:f9:96:d3:0b:5e:cf:73:8b:07:c7:b2:e7:89:
                    3a:d7:cf:03:a9:65:59:61:43:1f:4b:bb:28:5f:bf:
                    c6:11:84:eb:91:c8:17:da:f8:58:ba:cf:b0:46:41:
                    8b:ed:1e:68:8e:a4:03:ed:91:8e:09:6d:8d:fc:a0:
                    39:75:b0:d9:03:05:f5:7a:4f:7f:98:f0:c6:c5:3e:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:24:48:E4:BC:EA:D0:BB:FA:A2:4F:43:5C:99:61:45:6D:5C:7D:1F
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:00:f0:d1:ed:89:ff:2f:42:5d:4c:33:f0:05:2a:9b:96:
         65:c0:39:4d:51:19:a9:61:56:db:fe:26:5c:1b:cf:32:bc:ab:
         ce:6a:3d:c8:b9:43:0f:31:9b:15:0f:3d:1a:9e:f4:e6:e5:22:
         38:a2:cf:5e:1b:63:b1:15:7a:32:a0:33:39:72:d4:38:2e:3d:
         55:a4:99:3f:94:4c:d6:90:d5:5b:25:b9:75:0b:b5:28:0d:1b:
         fd:4b:0a:15:9a:ab:dc:61:bf:21:eb:b9:2c:81:1d:1e:8e:fe:
         79:56:be:b4:d4:6c:4b:47:13:f0:d7:c6:f5:0e:a3:e3:eb:16:
         39:0c:01:07:cf:26:5f:85:14:ed:46:33:97:ad:09:db:34:4f:
         7c:9a:36:d9:a9:69:e6:1f:4e:ea:38:73:df:a9:21:ff:60:b0:
         1d:bf:f3:26:93:6d:2f:71:a1:5b:99:cc:e9:63:3b:fc:14:1c:
         ed:c9:15:61:21:0c:6d:45:66:7f:5e:c0:46:ca:d7:5d:90:90:
         65:c5:e1:1c:6e:37:10:48:db:54:25:38:33:9a:9e:b8:70:a0:
         39:0a:cc:29:69:65:4f:85:db:91:a4:0c:4f:14:fc:86:e8:39:
         bb:c7:67:91:a4:14:ea:12:a7:8c:3d:0f:f0:ff:89:c6:b6:cd:
         e6:76:5c:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdoEcCE2xltkWo2sqipLfUFnQN8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM0QzJGODFDOTlCNUQxRkU3RDQyQjc1OThFMzAyNDc0
RDMxQzgzQjAeFw0yNDAyMDkxNzE0MDBaFw0yNTAyMDcxNzE5MDBaMDMxMTAvBgNV
BAMTKDdEMjQ0OEU0QkNFQUQwQkJGQUEyNEY0MzVDOTk2MTQ1NkQ1QzdEMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMNbOYcmgvQEpDHPbGVY9d2jo
nFQofZUocPFLcTb0Kuo0zynm6JQfR4e39BA1/rI4+EG1QDcz5hf5oB92aMQiCUVo
lqMmHc7onEbmcyXTDssoYS++Reqi7gKur9xRD1lBJTXzDQc7MtiD9+C72pMLv7CF
Hg2wOTA6lZOX/x0G/TqM4Vsota4P6nSywIznoffILwLhLKwEKn0k8n3QJKwfBcsi
c7x2X5aohjqIYo75O3oRtl0R+ZbTC17Pc4sHx7LniTrXzwOpZVlhQx9Luyhfv8YR
hOuRyBfa+Fi6z7BGQYvtHmiOpAPtkY4JbY38oDl1sNkDBfV6T3+Y8MbFPsS7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfSRI5Lzq0Lv6ok9DXJlhRW1cfR8wHwYDVR0j
BBgwFoAUDEwvgcmbXR/n1Ct1mOMCR00xyDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC8wQzRDMkY4MUM5OUI1RDFGRTdENDJCNzU5OEUzMDI0NzREMzFDODNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDNEMyRjgxQzk5QjVEMUZF
N0Q0MkI3NTk4RTMwMjQ3NEQzMUM4M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzEzNzM3MmUzMjMzMmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2wwDQYJKoZIhvcNAQELBQADggEBADf+APDR
7Yn/L0JdTDPwBSqblmXAOU1RGalhVtv+JlwbzzK8q85qPci5Qw8xmxUPPRqe9Obl
Ijiiz14bY7EVejKgMzly1DguPVWkmT+UTNaQ1VsluXULtSgNG/1LChWaq9xhvyHr
uSyBHR6O/nlWvrTUbEtHE/DXxvUOo+PrFjkMAQfPJl+FFO1GM5etCds0T3yaNtmp
aeYfTuo4c9+pIf9gsB2/8yaTbS9xoVuZzOljO/wUHO3JFWEhDG1FZn9ewEbK112Q
kGXF4RxuNxBI21QlODOanrhwoDkKzClpZU+F25GkDE8U/IboObvHZ5GkFOoSp4w9
D/D/ica2zeZ2XHY=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:05 2025 by rpki-client