Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138332e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138332e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          beaP4DrV3x0MaIyRGCwY7Rb88/+9u3Ka0Gjks6s03oA=
Subject key identifier:   14:65:28:86:DB:35:CB:82:CB:1E:18:7D:C0:AC:98:18:13:0B:F8:5E
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       1E4D64591E3789E320EACF9362D4FCE287F0D164
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138332e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:11 +0000
ROA not before:           Tue 25 Jun 2024 15:16:11 +0000
ROA not after:            Tue 24 Jun 2025 15:21:11 +0000
asID:                     28306
IP address blocks:        177.91.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:64:59:1e:37:89:e3:20:ea:cf:93:62:d4:fc:e2:87:f0:d1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:11 2024 GMT
            Not After : Jun 24 15:21:11 2025 GMT
        Subject: CN=14652886DB35CB82CB1E187DC0AC9818130BF85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:75:29:2e:c8:17:e5:e4:7c:bd:1a:c8:f4:
                    a4:09:bb:d7:d4:25:6f:a5:64:a0:1d:a0:29:b1:11:
                    82:68:e4:ae:6a:61:fe:86:f7:e5:7e:5b:1f:fd:43:
                    a0:eb:2b:fd:a7:e8:0f:48:e4:f5:33:74:32:5c:9a:
                    3b:d4:a8:55:b2:7c:4e:11:4d:60:65:45:f4:b7:82:
                    1f:5f:a0:8f:55:4e:44:da:05:31:98:19:d6:2f:65:
                    eb:69:a8:c9:65:93:95:a6:6c:2b:8e:bd:23:bc:99:
                    72:57:ac:1b:44:6c:22:57:12:0e:04:d6:cf:ef:f9:
                    66:a2:a0:71:a8:a5:16:31:95:1e:25:72:6f:1b:21:
                    6a:53:e4:f6:ae:9d:ba:7e:98:f0:08:59:1b:66:9d:
                    46:1d:09:b6:a5:95:31:f4:8f:fa:cc:ca:d0:6b:af:
                    70:91:d3:78:21:e5:d1:dd:43:9a:fc:43:20:0f:c0:
                    d6:63:f1:47:02:cb:c3:93:21:06:51:43:07:81:84:
                    02:2e:c3:ac:4a:59:e2:26:a4:4b:74:73:a1:58:37:
                    1f:75:0f:71:b6:37:fc:b9:10:b4:5d:c4:b6:bb:fb:
                    b1:6a:0d:66:53:50:60:ea:24:d3:e0:7d:45:cf:3a:
                    f3:fb:3b:d2:15:b9:cd:20:ae:53:a2:b2:50:a8:eb:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:28:86:DB:35:CB:82:CB:1E:18:7D:C0:AC:98:18:13:0B:F8:5E
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138332e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:0a:47:3b:1f:0d:a7:53:31:c1:23:35:6f:8f:12:23:a9:
         4e:4d:1d:31:a6:ef:39:3e:50:1e:96:2b:d7:87:bf:ed:27:03:
         8f:7f:a2:74:83:8e:37:67:37:ad:be:a9:79:4f:52:f2:3f:4b:
         9c:20:06:2a:2a:06:0a:5f:2c:27:62:dd:fe:de:06:e3:10:35:
         8d:cd:42:ee:fd:97:c4:cb:46:4a:5d:9f:24:35:71:02:b1:8d:
         8f:eb:1d:bc:39:98:59:be:ea:18:3d:28:cc:01:f3:bc:04:06:
         3c:3c:86:14:46:7a:14:c1:97:ac:0c:f7:82:39:51:51:cc:fb:
         af:cd:72:fc:08:85:13:93:08:71:7a:bd:02:58:6b:14:5e:26:
         22:4b:a1:99:2a:1f:ed:c5:a4:d4:f7:a4:3d:be:f2:01:0c:b2:
         bf:23:7c:67:63:d4:42:61:22:48:ff:8e:f1:2e:04:38:54:7e:
         fb:ef:6b:ef:c3:b5:e7:63:55:59:4b:36:87:a4:87:ca:1a:e6:
         dd:b8:ed:3c:ee:81:d7:4a:61:cb:11:a0:d4:92:d4:1d:58:d2:
         d7:7e:42:1b:6f:3b:3e:f6:ea:8b:9e:08:6b:38:39:6e:28:b2:
         f8:98:8a:0a:f7:72:d2:78:13:e2:c1:c0:1d:d3:8e:53:11:ff:
         31:3a:cf:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHk1kWR43ieMg6s+TYtT84ofw0WQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTFaFw0yNTA2MjQxNTIxMTFaMDMxMTAvBgNV
BAMTKDE0NjUyODg2REIzNUNCODJDQjFFMTg3REMwQUM5ODE4MTMwQkY4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l3UpLsgX5eR8vRrI9KQJu9fU
JW+lZKAdoCmxEYJo5K5qYf6G9+V+Wx/9Q6DrK/2n6A9I5PUzdDJcmjvUqFWyfE4R
TWBlRfS3gh9foI9VTkTaBTGYGdYvZetpqMllk5WmbCuOvSO8mXJXrBtEbCJXEg4E
1s/v+WaioHGopRYxlR4lcm8bIWpT5Paunbp+mPAIWRtmnUYdCballTH0j/rMytBr
r3CR03gh5dHdQ5r8QyAPwNZj8UcCy8OTIQZRQweBhAIuw6xKWeImpEt0c6FYNx91
D3G2N/y5ELRdxLa7+7FqDWZTUGDqJNPgfUXPOvP7O9IVuc0grlOislCo66DNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFGUohts1y4LLHhh9wKyYGBML+F4wHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzNzM3MmUzOTMxMmUzMTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVu3MA0GCSqGSIb3DQEBCwUAA4IBAQBk1QpHOx8N
p1MxwSM1b48SI6lOTR0xpu85PlAelivXh7/tJwOPf6J0g443Zzetvql5T1LyP0uc
IAYqKgYKXywnYt3+3gbjEDWNzULu/ZfEy0ZKXZ8kNXECsY2P6x28OZhZvuoYPSjM
AfO8BAY8PIYURnoUwZesDPeCOVFRzPuvzXL8CIUTkwhxer0CWGsUXiYiS6GZKh/t
xaTU96Q9vvIBDLK/I3xnY9RCYSJI/47xLgQ4VH7772vvw7XnY1VZSzaHpIfKGubd
uO087oHXSmHLEaDUktQdWNLXfkIbbzs+9uqLnghrODluKLL4mIoK93LSeBPiwcAd
045TEf8xOs/V
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:04 2025 by rpki-client