Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e3130392e302f32342d3234203d3e203238333036.roa
File:                     3137372e3230302e3130392e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          0UJ4tQCEpuVJk8pU/UUUc1aZw0czhRN8+EC/tFTJOjQ=
Subject key identifier:   89:D3:3B:FC:3F:1A:1F:19:12:F1:E2:38:CC:16:C4:F0:C7:E1:9F:5E
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       5A0CECA065E853EFA03C9121286B189BAD1B2BAD
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e3130392e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:13 +0000
ROA not before:           Tue 25 Jun 2024 15:16:13 +0000
ROA not after:            Tue 24 Jun 2025 15:21:13 +0000
asID:                     28306
IP address blocks:        177.200.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:ec:a0:65:e8:53:ef:a0:3c:91:21:28:6b:18:9b:ad:1b:2b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:13 2024 GMT
            Not After : Jun 24 15:21:13 2025 GMT
        Subject: CN=89D33BFC3F1A1F1912F1E238CC16C4F0C7E19F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:e9:dd:ae:f7:09:47:39:ef:73:28:05:bb:
                    e1:b1:8d:33:ec:4c:5f:3c:b3:91:70:dc:86:92:9f:
                    8e:55:1f:3e:38:d1:23:a7:13:1b:20:03:e2:be:78:
                    81:15:2d:d8:de:57:be:96:56:f4:f4:bb:2a:58:c8:
                    dc:6c:76:52:25:16:be:16:7b:eb:52:fb:1c:df:f0:
                    37:32:9e:59:54:20:d4:69:f7:18:90:24:51:a4:3d:
                    5b:39:92:46:91:a0:4e:e3:bb:64:80:f1:44:31:ce:
                    72:91:4f:08:5b:64:19:29:22:f1:51:9a:4e:c7:1a:
                    b7:ce:2e:28:4e:4c:43:73:f9:67:51:5f:ac:fb:7b:
                    d1:0d:10:b2:7c:8e:08:61:a6:96:a9:1c:50:90:cf:
                    5a:aa:a5:27:f3:9b:2f:8a:cf:0e:a7:25:99:aa:a5:
                    3b:d8:f1:bd:01:55:0b:d2:fb:cd:6d:bd:4f:51:fd:
                    5e:7c:9e:bc:59:21:7c:e2:cb:af:39:18:af:3b:5a:
                    6e:2c:52:0d:d7:c1:6e:b0:a0:37:c4:37:8f:31:64:
                    d9:c3:7f:cc:7a:e3:09:4b:d3:f2:cf:1e:c7:11:38:
                    92:f4:01:79:df:fb:c1:2f:b0:f7:27:1e:fd:78:d5:
                    e7:1d:64:cd:ea:5d:1c:9c:0a:52:6f:47:6c:18:3d:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:3B:FC:3F:1A:1F:19:12:F1:E2:38:CC:16:C4:F0:C7:E1:9F:5E
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e3130392e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:64:ac:2c:ae:c0:09:66:c2:f7:a0:d4:53:4d:08:77:8c:
         5f:8d:4c:b4:47:0b:fc:c9:7e:3f:6a:d7:39:28:1e:4a:45:75:
         be:e5:ad:3d:7c:ce:86:ff:e1:8f:3f:c3:f7:ef:7f:f8:2b:55:
         3b:8c:0a:b6:34:80:6d:20:59:0a:c1:4b:3f:0a:e9:2a:14:49:
         a3:60:26:64:39:b6:cd:f0:2e:a0:ca:21:6b:3a:ed:eb:25:49:
         3d:a3:2b:ef:62:f2:67:fb:1a:89:07:e9:04:88:82:9c:f6:67:
         8c:e8:1d:39:7c:43:dc:ae:74:89:f0:d2:6a:62:a5:8e:2e:19:
         d3:b8:c2:47:69:56:9e:8f:b4:07:fd:8a:45:85:65:3c:9e:6f:
         d7:94:da:68:b7:1e:b2:cf:06:ac:36:0e:05:eb:71:99:c5:f2:
         60:3e:ca:4e:16:2a:dd:0d:f8:4b:14:9c:0c:ba:07:05:ee:c9:
         89:1d:da:de:39:cc:2f:26:62:1f:e0:12:c3:df:a2:05:72:08:
         0b:50:aa:ce:91:b2:65:57:f6:a9:c3:f8:4f:5c:d9:88:b4:68:
         b9:6a:0b:04:d8:0c:1f:9c:dc:55:5a:fd:28:20:e2:1a:0b:e6:
         4b:2b:4e:77:64:a0:3e:1c:5d:ea:80:65:d5:31:9e:ef:8e:c1:
         9e:a1:eb:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWgzsoGXoU++gPJEhKGsYm60bK60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTNaFw0yNTA2MjQxNTIxMTNaMDMxMTAvBgNV
BAMTKDg5RDMzQkZDM0YxQTFGMTkxMkYxRTIzOENDMTZDNEYwQzdFMTlGNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5+ndrvcJRznvcygFu+GxjTPs
TF88s5Fw3IaSn45VHz440SOnExsgA+K+eIEVLdjeV76WVvT0uypYyNxsdlIlFr4W
e+tS+xzf8DcynllUINRp9xiQJFGkPVs5kkaRoE7ju2SA8UQxznKRTwhbZBkpIvFR
mk7HGrfOLihOTENz+WdRX6z7e9ENELJ8jghhppapHFCQz1qqpSfzmy+Kzw6nJZmq
pTvY8b0BVQvS+81tvU9R/V58nrxZIXziy685GK87Wm4sUg3XwW6woDfEN48xZNnD
f8x64wlL0/LPHscROJL0AXnf+8EvsPcnHv141ecdZM3qXRycClJvR2wYPR7XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUidM7/D8aHxkS8eI4zBbE8Mfhn14wHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxyG0wDQYJKoZIhvcNAQELBQADggEBAHoJZKws
rsAJZsL3oNRTTQh3jF+NTLRHC/zJfj9q1zkoHkpFdb7lrT18zob/4Y8/w/fvf/gr
VTuMCrY0gG0gWQrBSz8K6SoUSaNgJmQ5ts3wLqDKIWs67eslST2jK+9i8mf7GokH
6QSIgpz2Z4zoHTl8Q9yudInw0mpipY4uGdO4wkdpVp6PtAf9ikWFZTyeb9eU2mi3
HrLPBqw2DgXrcZnF8mA+yk4WKt0N+EsUnAy6BwXuyYkd2t45zC8mYh/gEsPfogVy
CAtQqs6RsmVX9qnD+E9c2Yi0aLlqCwTYDB+c3FVa/Sgg4hoL5ksrTndkoD4cXeqA
ZdUxnu+OwZ6h63g=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:01 2025 by rpki-client