Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3231203d3e2033333536.roa
File:                     3137392e39362e3137362e302f32312d3231203d3e2033333536.roa (raw, json)
Hash identifier:          h39aaL0OyOzeURHIkiPYF9KiaGnsB80SqdgPTJo5feA=
Subject key identifier:   17:F0:77:65:3F:3C:98:00:0E:CC:27:64:96:CB:AB:04:06:8E:F3:1D
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       130583444B2F7E9F886B246341FB3A6AA2FD29B4
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3231203d3e2033333536.roa
Signing time:             Mon 19 Dec 2022 16:47:32 +0000
ROA not before:           Mon 19 Dec 2022 16:42:32 +0000
ROA not after:            Mon 18 Dec 2023 16:47:32 +0000
asID:                     3356
IP address blocks:        179.96.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:05:83:44:4b:2f:7e:9f:88:6b:24:63:41:fb:3a:6a:a2:fd:29:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 16:42:32 2022 GMT
            Not After : Dec 18 16:47:32 2023 GMT
        Subject: CN=17F077653F3C98000ECC276496CBAB04068EF31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:53:02:87:9b:65:e2:4c:31:d9:bb:d5:fb:
                    79:5a:ae:f8:e8:bb:6e:6b:47:25:12:df:67:f2:6d:
                    5d:cf:1c:3b:3a:c9:45:0f:02:cc:48:55:99:58:32:
                    fb:56:90:c7:21:76:ca:cb:c5:46:aa:e0:9c:d9:18:
                    16:0f:b4:14:31:a3:6a:4d:39:35:2a:65:df:5b:8d:
                    e9:9e:26:d6:de:04:25:38:75:d0:4a:5d:63:f6:5b:
                    fc:22:c7:5b:e0:4f:40:1a:a3:43:a6:41:9d:20:d6:
                    29:73:60:d9:20:e6:9c:89:67:60:03:33:2b:c6:35:
                    96:a9:9b:ba:28:a1:f4:27:b8:15:b9:83:09:ed:c4:
                    39:54:23:ac:34:42:fd:c0:90:ef:13:69:28:c0:2b:
                    02:c6:a1:8d:72:d5:11:5b:b4:27:bd:9c:44:25:86:
                    50:c4:98:ce:70:60:f0:8b:e9:4e:02:fc:f9:73:c0:
                    73:da:ff:42:c4:fd:ce:10:86:64:e4:aa:17:f9:22:
                    73:00:1a:7c:82:3c:10:2b:ab:19:9d:c1:30:0d:0a:
                    dd:6e:b8:ef:ce:af:31:fa:36:01:93:ca:f5:86:13:
                    cc:d9:fe:47:d1:22:bc:8a:0a:2d:2e:4c:39:53:a7:
                    a8:a1:24:0c:94:3a:82:8a:65:84:bd:a2:26:80:4d:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F0:77:65:3F:3C:98:00:0E:CC:27:64:96:CB:AB:04:06:8E:F3:1D
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3231203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:07:7d:59:0e:06:a3:17:f0:c7:51:77:bb:ea:99:3f:0b:8e:
         7d:15:51:a3:43:df:1a:9d:6e:7b:55:d3:cd:c2:bd:93:e8:55:
         0e:61:35:57:53:ef:b2:a8:cf:dd:e2:60:92:bf:c7:1c:6a:35:
         cf:a4:59:c7:8c:5a:03:f7:f4:79:97:b3:12:12:9b:8a:3f:b6:
         d0:97:92:bc:fd:7e:1a:62:6b:c3:8c:cb:e3:5e:c9:c8:09:7e:
         b1:e1:0a:0c:26:cd:c0:9a:4a:2d:0a:30:8d:3b:b9:49:28:8a:
         9d:9b:42:bd:2d:8a:be:b5:a8:db:0b:32:5e:fa:c7:8f:ae:d4:
         cb:02:ad:f3:22:b0:5b:53:ed:77:f9:6e:85:c1:b2:6f:64:92:
         51:f5:58:db:85:10:32:ae:47:1c:c5:f3:40:71:38:10:c2:ba:
         42:4b:cc:46:37:2a:23:09:65:1d:97:e0:f9:6d:22:ff:34:55:
         6f:76:ca:09:72:e2:6f:b1:c0:29:3c:73:46:81:c1:76:e3:c1:
         57:d8:f8:c2:98:c9:c5:ba:76:5f:51:a2:2b:a9:e6:90:15:05:
         2c:56:b4:c9:60:11:09:ca:67:6a:33:9e:df:f1:b3:c3:ec:6e:
         0b:36:b6:0b:8a:01:2f:12:ca:7c:8e:3e:51:3f:db:cc:e4:d7:
         31:b9:09:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEwWDREsvfp+IayRjQfs6aqL9KbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NEI0RUZGQUIyRkY2MkEyNTE4RjI4RkEzQUY5MDZG
RjgwQzI3NzAeFw0yMjEyMTkxNjQyMzJaFw0yMzEyMTgxNjQ3MzJaMDMxMTAvBgNV
BAMTKDE3RjA3NzY1M0YzQzk4MDAwRUNDMjc2NDk2Q0JBQjA0MDY4RUYzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzVMCh5tl4kwx2bvV+3larvjo
u25rRyUS32fybV3PHDs6yUUPAsxIVZlYMvtWkMchdsrLxUaq4JzZGBYPtBQxo2pN
OTUqZd9bjemeJtbeBCU4ddBKXWP2W/wix1vgT0Aao0OmQZ0g1ilzYNkg5pyJZ2AD
MyvGNZapm7ooofQnuBW5gwntxDlUI6w0Qv3AkO8TaSjAKwLGoY1y1RFbtCe9nEQl
hlDEmM5wYPCL6U4C/PlzwHPa/0LE/c4QhmTkqhf5InMAGnyCPBArqxmdwTANCt1u
uO/OrzH6NgGTyvWGE8zZ/kfRIryKCi0uTDlTp6ihJAyUOoKKZYS9oiaATWRBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUF/B3ZT88mAAOzCdklsurBAaO8x0wHwYDVR0j
BBgwFoAUJES07/qy/2KiUY8o+jr5Bv+AwncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMS8yNDQ0QjRFRkZBQjJGRjYyQTI1MThGMjhGQTNBRjkwNkZGODBDMjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDRCNEVGRkFCMkZGNjJB
MjUxOEYyOEZBM0FGOTA2RkY4MEMyNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzEv
MzEzNzM5MmUzOTM2MmUzMTM3MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMzMz
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7NgsDANBgkqhkiG9w0BAQsFAAOCAQEAOAd9WQ4Goxfw
x1F3u+qZPwuOfRVRo0PfGp1ue1XTzcK9k+hVDmE1V1PvsqjP3eJgkr/HHGo1z6RZ
x4xaA/f0eZezEhKbij+20JeSvP1+GmJrw4zL417JyAl+seEKDCbNwJpKLQowjTu5
SSiKnZtCvS2KvrWo2wsyXvrHj67UywKt8yKwW1Ptd/luhcGyb2SSUfVY24UQMq5H
HMXzQHE4EMK6QkvMRjcqIwllHZfg+W0i/zRVb3bKCXLib7HAKTxzRoHBduPBV9j4
wpjJxbp2X1GiK6nmkBUFLFa0yWARCcpnajOe3/Gzw+xuCza2C4oBLxLKfI4+UT/b
zOTXMbkJ6Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:25 2025 by rpki-client