Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa
File:                     3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (raw, json)
Hash identifier:          rrNIzMkOetutqSWFRXAvvZbZjyZznAEfNKm17cvcB2g=
Subject key identifier:   CF:18:DE:1E:E0:DB:CC:C5:62:F2:0F:FB:06:FC:84:38:3C:DF:97:9D
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       5FE77DB1318413D7F54E9EEABEEB58D3A25813A0
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa
Signing time:             Thu 06 Mar 2025 20:46:03 +0000
ROA not before:           Thu 06 Mar 2025 20:41:03 +0000
ROA not after:            Thu 05 Mar 2026 20:46:03 +0000
asID:                     262322
IP address blocks:        177.124.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e7:7d:b1:31:84:13:d7:f5:4e:9e:ea:be:eb:58:d3:a2:58:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Mar  6 20:41:03 2025 GMT
            Not After : Mar  5 20:46:03 2026 GMT
        Subject: CN=CF18DE1EE0DBCCC562F20FFB06FC84383CDF979D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:9d:ba:91:33:a5:6d:64:c3:f4:48:1b:05:
                    f9:e8:7a:e1:55:f6:3b:78:b9:f6:20:60:0a:2d:40:
                    3a:dc:4a:da:ed:5c:2f:de:b7:5e:a3:7f:66:ef:b4:
                    d0:0d:a8:54:d0:bb:3e:02:30:f8:1b:c1:33:a2:db:
                    42:6f:37:0d:31:d2:4a:47:80:28:76:6f:7c:d0:c1:
                    bc:02:2b:e9:62:df:70:e3:52:5b:67:60:47:10:92:
                    57:e9:1b:fe:6a:22:ad:cb:15:2d:47:92:37:f2:4d:
                    e3:00:86:18:9a:cb:3a:24:0f:5d:00:b6:24:f7:6b:
                    41:b8:12:51:6a:de:83:9e:79:94:5c:78:81:4c:89:
                    92:6b:c0:26:52:b3:11:40:6d:76:fc:ef:a8:6d:3a:
                    ae:dc:a3:e8:1f:96:54:1b:60:d8:c4:c3:a1:f6:22:
                    fd:bb:ea:33:ae:58:15:54:77:52:89:cd:d6:a8:f9:
                    62:08:9e:c0:77:3c:81:dd:9f:33:da:48:2c:41:07:
                    41:95:3a:86:38:59:9b:98:77:83:2a:b3:ae:93:95:
                    25:bb:e4:b0:55:59:c0:62:f5:01:93:05:b0:cb:98:
                    57:80:77:96:0f:ad:2d:b0:1f:1f:96:b1:7f:1e:b2:
                    ea:1f:88:b3:78:ca:9e:54:4f:e0:85:0b:ce:2d:61:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:18:DE:1E:E0:DB:CC:C5:62:F2:0F:FB:06:FC:84:38:3C:DF:97:9D
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:95:2c:92:bb:16:19:4e:38:29:32:8f:07:42:7b:65:4d:62:
         65:c9:b2:2d:9e:e4:7e:46:3e:9c:1c:13:bb:45:54:88:a4:e4:
         fb:d7:de:5b:2a:a6:ad:8f:e5:2b:24:37:88:f7:b1:bd:76:c7:
         48:b9:f4:24:7f:81:e0:87:48:9f:70:58:da:d2:33:1b:25:4d:
         93:cf:68:e0:7b:fb:51:dc:3c:25:28:6a:88:10:e8:d5:56:b2:
         57:38:a7:f9:a9:f6:6e:a5:5c:22:e3:ad:c8:6c:63:38:4a:a0:
         bf:ec:75:94:61:fd:81:79:fc:01:05:2c:74:92:95:7c:94:ef:
         0a:6a:79:b1:fe:be:33:96:a5:7b:98:e4:46:ae:04:24:11:9f:
         2d:2e:66:ed:f5:2c:ce:09:8d:6d:a0:a6:60:67:50:ab:e7:ad:
         d0:6d:c7:8e:a6:c7:0f:ab:a9:da:87:4e:10:0c:4c:54:61:c9:
         b5:25:93:fb:c1:b9:84:9c:11:93:f8:53:19:e7:2e:3b:b7:f2:
         5d:17:d3:5c:df:b4:b3:04:53:46:af:40:c7:54:4d:3d:e2:a0:
         19:c1:2f:5a:bf:d9:30:eb:37:f5:7c:a8:74:f7:e6:80:4d:a9:
         12:90:f5:9e:ff:bb:87:4b:fc:74:a1:5b:c0:aa:08:89:ff:44:
         6a:38:66:63
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX+d9sTGEE9f1Tp7qvutY06JYE6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRjVBRDFEREQxRUFDNjExOEM5Rjg0NzU1MDZBRkIy
Q0JDMkQyNTAeFw0yNTAzMDYyMDQxMDNaFw0yNjAzMDUyMDQ2MDNaMDMxMTAvBgNV
BAMTKENGMThERTFFRTBEQkNDQzU2MkYyMEZGQjA2RkM4NDM4M0NERjk3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnC526kTOlbWTD9EgbBfnoeuFV
9jt4ufYgYAotQDrcStrtXC/et16jf2bvtNANqFTQuz4CMPgbwTOi20JvNw0x0kpH
gCh2b3zQwbwCK+li33DjUltnYEcQklfpG/5qIq3LFS1HkjfyTeMAhhiayzokD10A
tiT3a0G4ElFq3oOeeZRceIFMiZJrwCZSsxFAbXb876htOq7co+gfllQbYNjEw6H2
Iv276jOuWBVUd1KJzdao+WIInsB3PIHdnzPaSCxBB0GVOoY4WZuYd4Mqs66TlSW7
5LBVWcBi9QGTBbDLmFeAd5YPrS2wHx+WsX8esuofiLN4yp5UT+CFC84tYYkdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzxjeHuDbzMVi8g/7BvyEODzfl50wHwYDVR0j
BBgwFoAULK9a0d3R6sYRjJ+EdVBq+yy8LSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq
SmsvMS8yQ0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUY1QUQxREREMUVBQzYx
MThDOUY4NDc1NTA2QUZCMkNCQzJEMjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvQ2NWYnlIS2tMQ2Y5NXprUnQzZnlpc2JIWWNuM285b1pZWjU2WlZiakprLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzEzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7F8cDANBgkqhkiG9w0BAQsFAAOCAQEAkJUs
krsWGU44KTKPB0J7ZU1iZcmyLZ7kfkY+nBwTu0VUiKTk+9feWyqmrY/lKyQ3iPex
vXbHSLn0JH+B4IdIn3BY2tIzGyVNk89o4Hv7Udw8JShqiBDo1VayVzin+an2bqVc
IuOtyGxjOEqgv+x1lGH9gXn8AQUsdJKVfJTvCmp5sf6+M5ale5jkRq4EJBGfLS5m
7fUszgmNbaCmYGdQq+et0G3HjqbHD6up2odOEAxMVGHJtSWT+8G5hJwRk/hTGecu
O7fyXRfTXN+0swRTRq9Ax1RNPeKgGcEvWr/ZMOs39XyodPfmgE2pEpD1nv+7h0v8
dKFbwKoIif9EajhmYw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:06:53 2025 by rpki-client