Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa
File:                     3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (raw, json)
Hash identifier:          Vrz0ehOpjLN30mQv66eRRmbukAiz6f5NUmOk8uRYhMM=
Subject key identifier:   9F:F6:45:6A:17:81:61:B5:C9:A6:F0:62:F3:E8:FD:B3:1F:91:25:D9
Certificate issuer:       /CN=08955ACA1E6ED830C574209FC72217F211993283
Certificate serial:       453FA8F6F50441A3728B7296F7CE032D1BE8DDB9
Authority key identifier: 08:95:5A:CA:1E:6E:D8:30:C5:74:20:9F:C7:22:17:F2:11:99:32:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08955ACA1E6ED830C574209FC72217F211993283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa
Signing time:             Thu 30 Nov 2023 20:28:13 +0000
ROA not before:           Thu 30 Nov 2023 20:23:13 +0000
ROA not after:            Thu 28 Nov 2024 20:28:13 +0000
asID:                     262322
IP address blocks:        177.124.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3f:a8:f6:f5:04:41:a3:72:8b:72:96:f7:ce:03:2d:1b:e8:dd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08955ACA1E6ED830C574209FC72217F211993283
        Validity
            Not Before: Nov 30 20:23:13 2023 GMT
            Not After : Nov 28 20:28:13 2024 GMT
        Subject: CN=9FF6456A178161B5C9A6F062F3E8FDB31F9125D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:99:04:fb:39:d4:2c:4b:7e:6e:82:e3:a5:
                    f5:6e:29:ee:47:29:26:62:1a:66:be:6b:96:c4:68:
                    a5:ab:e3:31:dd:87:f8:d0:ca:5a:34:82:ea:e2:2c:
                    43:74:1e:9b:d5:96:66:98:12:34:ec:3d:b7:f5:9e:
                    13:5b:f3:fe:fd:56:10:e9:41:2c:21:1a:a5:b0:82:
                    d2:a8:1b:d7:a8:16:1e:ab:52:be:6a:77:44:65:40:
                    73:73:68:cc:67:35:5d:8d:7d:68:23:85:8f:7b:da:
                    5f:90:5f:2c:96:40:0a:ef:50:e1:63:54:14:4d:16:
                    39:cc:4d:b6:c7:69:c6:cf:78:f4:73:fc:64:34:f7:
                    12:0d:1f:f3:63:5e:cb:ab:c8:87:42:6a:15:99:84:
                    dd:41:f9:bd:93:c1:56:b6:5d:a3:95:f6:e6:1c:ea:
                    c1:9a:ab:e0:e2:71:ef:26:91:03:62:dc:f7:20:1e:
                    a8:43:87:1f:c8:ad:c0:3e:6a:b4:91:ac:01:55:1a:
                    f7:a3:8c:8f:9b:16:fe:a2:19:41:58:27:36:44:ab:
                    64:99:0b:15:92:26:43:4c:81:f1:29:a4:09:c4:f3:
                    3f:cc:1c:59:a8:bf:75:8d:68:da:5f:6a:59:55:3a:
                    d1:77:df:9c:71:ee:ac:8a:55:b6:d0:08:8d:5d:5b:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F6:45:6A:17:81:61:B5:C9:A6:F0:62:F3:E8:FD:B3:1F:91:25:D9
            X509v3 Authority Key Identifier:
                keyid:08:95:5A:CA:1E:6E:D8:30:C5:74:20:9F:C7:22:17:F2:11:99:32:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/08955ACA1E6ED830C574209FC72217F211993283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08955ACA1E6ED830C574209FC72217F211993283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:c6:0b:71:d8:81:32:61:d9:1a:10:04:cc:db:37:e1:91:
         83:92:6c:20:04:20:5c:1b:fe:a0:43:b8:d1:60:0d:75:4b:6e:
         95:1f:12:61:25:12:35:2a:b0:86:47:ad:98:ae:26:4a:74:91:
         bc:98:5e:97:2c:4b:d4:13:e7:fc:cf:f8:77:08:66:69:28:d6:
         52:20:b3:df:11:66:4c:73:17:a7:79:b8:a3:46:33:83:fd:68:
         cc:b6:68:2d:ca:75:25:28:5a:99:22:c6:f6:44:65:69:5b:b3:
         db:85:41:d1:36:2b:55:7a:23:5a:cd:45:25:d1:af:df:26:c8:
         9b:ad:40:a4:9d:aa:40:17:f2:c1:4d:19:db:b3:8f:95:c3:e7:
         ab:b2:cb:82:d1:e1:e0:25:30:fa:0c:e6:d6:d4:0c:c5:63:5a:
         5a:5a:6b:76:95:7d:0a:9a:58:9a:01:29:42:1a:1c:45:09:14:
         49:2f:17:0b:5d:1a:9c:9c:5a:ac:68:d5:09:ed:cb:ec:41:d4:
         13:96:c7:55:f7:1f:39:a4:43:34:f3:c4:9d:2c:37:4a:ba:f5:
         e0:8b:e1:0e:8c:c3:d1:3a:b4:3d:b0:f5:55:99:8b:c6:38:7a:
         15:24:2e:11:79:79:9a:f9:1a:ea:07:d6:13:88:a2:5d:b6:03:
         79:ce:71:f3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURT+o9vUEQaNyi3KW984DLRvo3bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg5NTVBQ0ExRTZFRDgzMEM1NzQyMDlGQzcyMjE3RjIx
MTk5MzI4MzAeFw0yMzExMzAyMDIzMTNaFw0yNDExMjgyMDI4MTNaMDMxMTAvBgNV
BAMTKDlGRjY0NTZBMTc4MTYxQjVDOUE2RjA2MkYzRThGREIzMUY5MTI1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtR5kE+znULEt+boLjpfVuKe5H
KSZiGma+a5bEaKWr4zHdh/jQylo0guriLEN0HpvVlmaYEjTsPbf1nhNb8/79VhDp
QSwhGqWwgtKoG9eoFh6rUr5qd0RlQHNzaMxnNV2NfWgjhY972l+QXyyWQArvUOFj
VBRNFjnMTbbHacbPePRz/GQ09xINH/NjXsuryIdCahWZhN1B+b2TwVa2XaOV9uYc
6sGaq+Dice8mkQNi3PcgHqhDhx/IrcA+arSRrAFVGvejjI+bFv6iGUFYJzZEq2SZ
CxWSJkNMgfEppAnE8z/MHFmov3WNaNpfallVOtF335xx7qyKVbbQCI1dW3YLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUn/ZFaheBYbXJpvBi8+j9sx+RJdkwHwYDVR0j
BBgwFoAUCJVayh5u2DDFdCCfxyIX8hGZMoMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq
SmsvMC8wODk1NUFDQTFFNkVEODMwQzU3NDIwOUZDNzIyMTdGMjExOTkzMjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4OTU1QUNBMUU2RUQ4MzBD
NTc0MjA5RkM3MjIxN0YyMTE5OTMyODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvQ2NWYnlIS2tMQ2Y5NXprUnQzZnlpc2JIWWNuM285b1pZWjU2WlZiakprLzAv
MzEzNzM3MmUzMTMyMzQyZTMxMzEzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7F8cDANBgkqhkiG9w0BAQsFAAOCAQEASzjG
C3HYgTJh2RoQBMzbN+GRg5JsIAQgXBv+oEO40WANdUtulR8SYSUSNSqwhketmK4m
SnSRvJhelyxL1BPn/M/4dwhmaSjWUiCz3xFmTHMXp3m4o0Yzg/1ozLZoLcp1JSha
mSLG9kRlaVuz24VB0TYrVXojWs1FJdGv3ybIm61ApJ2qQBfywU0Z27OPlcPnq7LL
gtHh4CUw+gzm1tQMxWNaWlprdpV9CppYmgEpQhocRQkUSS8XC10anJxarGjVCe3L
7EHUE5bHVfcfOaRDNPPEnSw3Srr14IvhDozD0Tq0PbD1VZmLxjh6FSQuEXl5mvka
6gfWE4iiXbYDec5x8w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:07 2025 by rpki-client