Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133332e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          V0nP29CyusYjeA7H61uFbb/Qb4/uZ0sFadUv8hnClfA=
Subject key identifier:   70:5F:9D:26:A0:5E:0D:6C:0D:71:A7:03:63:51:21:33:38:F0:0A:EA
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       2B2361A31EE45A3E6E401DFEC98A4AD49F971C95
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:36 +0000
ROA not before:           Fri 08 Mar 2024 18:55:36 +0000
ROA not after:            Fri 07 Mar 2025 19:00:36 +0000
asID:                     53018
IP address blocks:        177.72.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:23:61:a3:1e:e4:5a:3e:6e:40:1d:fe:c9:8a:4a:d4:9f:97:1c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:36 2024 GMT
            Not After : Mar  7 19:00:36 2025 GMT
        Subject: CN=705F9D26A05E0D6C0D71A7036351213338F00AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:f7:93:2e:19:50:b2:10:9e:1c:65:3f:c0:
                    5a:0c:5f:8b:42:e0:49:af:68:cb:a1:bd:1e:58:7c:
                    1c:0c:06:3a:a1:43:4a:52:de:8a:2a:07:40:e1:6e:
                    73:47:b0:0f:c7:54:b7:55:34:c2:9e:77:37:60:3c:
                    78:6c:46:cf:52:dc:da:62:2a:98:12:cf:86:03:19:
                    9c:5e:cb:43:44:9a:d7:d9:d4:17:93:22:6a:96:9d:
                    6a:44:3b:0d:14:89:5a:43:48:d3:6f:78:ee:c7:bc:
                    c2:43:ae:18:15:da:99:0b:c7:1e:77:23:f9:d0:1f:
                    b7:f2:3c:24:47:3e:c3:a2:84:d2:bb:97:eb:9f:7f:
                    9f:89:47:7d:f4:76:ac:a1:49:b4:d3:94:d0:c5:ea:
                    c6:93:c7:46:54:85:b3:73:90:6a:5a:32:7b:5e:fb:
                    97:5f:12:d0:d7:84:e5:94:b1:64:ee:c4:2d:58:24:
                    01:90:6c:59:bf:33:40:84:5f:ad:91:58:a4:c9:da:
                    45:8f:c4:a9:38:2f:d9:20:a2:9f:17:d5:72:5c:d4:
                    70:30:62:e1:66:ab:37:bb:6c:1a:04:65:fb:fe:76:
                    53:5e:b3:f1:6f:a5:0d:4b:77:f8:6b:1d:dd:1a:7f:
                    17:47:3e:72:88:6c:c2:ff:f2:d3:55:3c:d2:30:2c:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5F:9D:26:A0:5E:0D:6C:0D:71:A7:03:63:51:21:33:38:F0:0A:EA
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133332e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:da:22:61:7b:69:fa:25:cf:ad:60:e6:b3:e9:62:8b:71:
         2f:ce:47:a6:2b:e4:d8:58:6d:6b:9f:a0:ea:b1:d8:6f:0c:db:
         57:ed:bf:29:a1:20:56:29:5b:c7:23:ea:66:fc:b4:1e:ea:3a:
         ff:81:48:70:71:cf:89:a8:55:4c:11:5f:c4:d5:55:04:b7:03:
         8d:64:d6:57:34:d6:91:72:68:1f:ea:41:13:f3:ef:ab:38:91:
         00:2c:94:db:a2:8a:56:ea:63:53:f5:7b:ba:04:a2:91:a1:03:
         31:67:b5:48:94:bf:b6:57:8b:3a:59:d9:d2:c7:57:8c:01:70:
         ad:8c:34:94:0a:7b:36:f6:85:9b:62:97:e7:cf:2a:36:6e:f1:
         1a:1e:81:41:e4:c2:1f:a2:d9:29:71:68:a1:cd:2e:0a:4d:92:
         5f:a9:90:0f:5d:b3:cb:08:7a:08:1e:c6:ac:6c:b1:64:c5:55:
         4d:54:59:d5:11:e4:83:2a:e0:7a:81:e3:cd:14:77:95:ab:55:
         e7:c3:33:ac:ce:00:ef:e3:a2:45:46:d2:0c:24:18:bb:e3:70:
         6a:31:9f:22:c2:e7:fd:8e:6c:66:5d:2e:28:c5:5f:20:cb:03:
         3a:0e:e8:ae:ae:57:0e:1d:cf:da:6c:95:db:21:06:75:66:91:
         fb:13:86:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKyNhox7kWj5uQB3+yYpK1J+XHJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYyMDBFNEM3MUYzODJEODdBRTQzMTU1OURENkJENzRE
MTkyMjM2QjAeFw0yNDAzMDgxODU1MzZaFw0yNTAzMDcxOTAwMzZaMDMxMTAvBgNV
BAMTKDcwNUY5RDI2QTA1RTBENkMwRDcxQTcwMzYzNTEyMTMzMzhGMDBBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHfeTLhlQshCeHGU/wFoMX4tC
4EmvaMuhvR5YfBwMBjqhQ0pS3ooqB0DhbnNHsA/HVLdVNMKedzdgPHhsRs9S3Npi
KpgSz4YDGZxey0NEmtfZ1BeTImqWnWpEOw0UiVpDSNNveO7HvMJDrhgV2pkLxx53
I/nQH7fyPCRHPsOihNK7l+uff5+JR330dqyhSbTTlNDF6saTx0ZUhbNzkGpaMnte
+5dfEtDXhOWUsWTuxC1YJAGQbFm/M0CEX62RWKTJ2kWPxKk4L9kgop8X1XJc1HAw
YuFmqze7bBoEZfv+dlNes/FvpQ1Ld/hrHd0afxdHPnKIbML/8tNVPNIwLBJBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcF+dJqBeDWwNcacDY1EhMzjwCuowHwYDVR0j
BBgwFoAU/yAOTHHzgth65DFVnda9dNGSI2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC9GRjIwMEU0QzcxRjM4MkQ4N0FFNDMxNTU5REQ2QkQ3NEQxOTIyMzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGMjAwRTRDNzFGMzgyRDg3
QUU0MzE1NTlERDZCRDc0RDE5MjIzNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUiFMA0GCSqGSIb3DQEBCwUAA4IBAQAqktoiYXtp
+iXPrWDms+lii3EvzkemK+TYWG1rn6DqsdhvDNtX7b8poSBWKVvHI+pm/LQe6jr/
gUhwcc+JqFVMEV/E1VUEtwONZNZXNNaRcmgf6kET8++rOJEALJTboopW6mNT9Xu6
BKKRoQMxZ7VIlL+2V4s6WdnSx1eMAXCtjDSUCns29oWbYpfnzyo2bvEaHoFB5MIf
otkpcWihzS4KTZJfqZAPXbPLCHoIHsasbLFkxVVNVFnVEeSDKuB6gePNFHeVq1Xn
wzOszgDv46JFRtIMJBi743BqMZ8iwuf9jmxmXS4oxV8gywM6DuiurlcOHc/abJXb
IQZ1ZpH7E4a4
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:20 2025 by rpki-client