Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35382e302f32342d3234203d3e203532353637.roa
File:                     3137372e38362e35382e302f32342d3234203d3e203532353637.roa (raw, json)
Hash identifier:          oe7B8dhqtb5Rxb6pco0372fDpvw2RDt4wQpNTCPS2o8=
Subject key identifier:   15:FF:08:7F:86:72:02:4D:79:12:64:7E:93:1D:AA:0B:63:53:0B:1C
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       132E1A887DB5EBB973615EAF112FC5921CC88988
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35382e302f32342d3234203d3e203532353637.roa
Signing time:             Mon 04 Mar 2024 17:12:03 +0000
ROA not before:           Mon 04 Mar 2024 17:07:03 +0000
ROA not after:            Mon 03 Mar 2025 17:12:03 +0000
asID:                     52567
IP address blocks:        177.86.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:1a:88:7d:b5:eb:b9:73:61:5e:af:11:2f:c5:92:1c:c8:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar  4 17:07:03 2024 GMT
            Not After : Mar  3 17:12:03 2025 GMT
        Subject: CN=15FF087F8672024D7912647E931DAA0B63530B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:2a:02:31:45:ce:76:9b:4e:14:99:fb:72:
                    98:26:60:02:f6:4c:48:a2:da:6a:a7:04:a5:97:60:
                    1e:20:5a:45:c4:9c:f3:b5:f1:05:ee:9b:a2:ee:69:
                    94:91:78:93:19:3b:12:b1:db:3a:d2:92:ac:ea:70:
                    26:30:6c:fe:5c:4d:f5:e8:af:29:de:8c:af:1b:ee:
                    45:f3:81:8a:45:d7:2e:8f:8a:80:0f:0d:38:a5:76:
                    3a:6d:d2:39:15:2a:47:a3:36:0a:e2:09:28:c3:48:
                    82:0a:10:d3:0b:9f:d0:32:df:20:ab:ae:af:5f:93:
                    f5:82:10:ad:22:15:f8:7b:5f:75:e1:91:fb:bd:9f:
                    ec:79:77:7b:6c:79:4d:2b:9e:ed:e1:81:8d:81:2b:
                    01:01:43:40:4c:d7:03:67:1e:d1:b8:35:e0:ce:f0:
                    23:b6:00:f0:f7:52:94:f2:ba:65:01:24:7f:8f:6b:
                    b0:a7:75:f5:0a:3c:1f:6d:de:e0:78:93:eb:1f:02:
                    ce:e4:fd:bf:9c:2b:23:d8:0a:9c:37:ed:55:0f:f4:
                    44:66:5e:03:de:0c:e0:5c:8d:6e:01:38:fc:44:a2:
                    fa:72:4e:4f:56:e7:9b:3f:07:e8:bc:0f:80:4e:24:
                    65:a0:c0:9f:99:8d:23:d8:f9:47:67:f1:03:78:98:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FF:08:7F:86:72:02:4D:79:12:64:7E:93:1D:AA:0B:63:53:0B:1C
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35382e302f32342d3234203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:a0:c9:76:8a:b2:1b:98:72:18:76:81:ce:58:05:ba:73:
         8c:54:bd:63:f8:c7:b5:52:53:78:db:97:08:44:ac:9d:dc:fb:
         c5:04:23:33:94:79:cf:7c:f2:fe:80:77:27:59:d0:dd:1d:89:
         8b:af:69:22:8f:31:80:f6:ca:d2:3c:96:b4:2d:1b:68:7d:73:
         65:da:dc:e3:a6:e9:9e:43:ac:2f:33:49:9e:e5:de:82:d6:95:
         f6:8f:4d:cd:96:2a:cb:90:2f:0f:5e:ee:59:81:27:84:57:e2:
         37:ed:c2:f1:9e:17:ca:e3:54:92:25:af:cf:31:24:50:5f:d3:
         fd:13:ec:a0:19:77:cf:9d:69:de:a1:37:75:46:af:5d:74:c9:
         11:71:42:94:5d:87:22:39:89:01:2e:21:37:58:0c:f4:01:1d:
         65:1b:34:c9:06:c9:2e:b1:ea:41:d1:3b:e5:2b:48:df:89:b5:
         5e:2f:15:2c:5c:69:ab:5a:eb:78:6a:26:5c:41:c9:02:02:23:
         dd:ab:74:84:75:24:56:22:3d:5b:16:33:90:a4:4c:72:79:20:
         a4:2f:ae:61:c8:ff:85:06:54:c5:95:fe:4a:f7:20:64:c1:15:
         2f:99:ea:02:59:43:7c:f1:06:d0:46:f5:62:3f:07:22:1d:7e:
         49:33:ec:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEy4aiH2167lzYV6vES/FkhzIiYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFQjJCQUNGNDMxNTgzMDAzMjY1MjgyNzhEOTJBQ0U3
Q0Y3RUI5MjAeFw0yNDAzMDQxNzA3MDNaFw0yNTAzMDMxNzEyMDNaMDMxMTAvBgNV
BAMTKDE1RkYwODdGODY3MjAyNEQ3OTEyNjQ3RTkzMURBQTBCNjM1MzBCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99CoCMUXOdptOFJn7cpgmYAL2
TEii2mqnBKWXYB4gWkXEnPO18QXum6LuaZSReJMZOxKx2zrSkqzqcCYwbP5cTfXo
rynejK8b7kXzgYpF1y6PioAPDTildjpt0jkVKkejNgriCSjDSIIKENMLn9Ay3yCr
rq9fk/WCEK0iFfh7X3Xhkfu9n+x5d3tseU0rnu3hgY2BKwEBQ0BM1wNnHtG4NeDO
8CO2APD3UpTyumUBJH+Pa7CndfUKPB9t3uB4k+sfAs7k/b+cKyPYCpw37VUP9ERm
XgPeDOBcjW4BOPxEovpyTk9W55s/B+i8D4BOJGWgwJ+ZjSPY+Udn8QN4mLYDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUFf8If4ZyAk15EmR+kx2qC2NTCxwwHwYDVR0j
BBgwFoAUZ+srrPQxWDADJlKCeNkqznz365IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhLMTdGNjE4ckdKV1BEU3hpalVldk1ybXV2Qm9XN0VuR1d3bllNQjVR
UFMvMC82N0VCMkJBQ0Y0MzE1ODMwMDMyNjUyODI3OEQ5MkFDRTdDRjdFQjkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RUIyQkFDRjQzMTU4MzAw
MzI2NTI4Mjc4RDkyQUNFN0NGN0VCOTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4SzE3RjYxOHJHSldQRFN4aWpVZXZNcm11dkJvVzdFbkdXd25ZTUI1UVBTLzAv
MzEzNzM3MmUzODM2MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFWOjANBgkqhkiG9w0BAQsFAAOCAQEAUVqgyXaKshuY
chh2gc5YBbpzjFS9Y/jHtVJTeNuXCESsndz7xQQjM5R5z3zy/oB3J1nQ3R2Ji69p
Io8xgPbK0jyWtC0baH1zZdrc46bpnkOsLzNJnuXegtaV9o9NzZYqy5AvD17uWYEn
hFfiN+3C8Z4XyuNUkiWvzzEkUF/T/RPsoBl3z51p3qE3dUavXXTJEXFClF2HIjmJ
AS4hN1gM9AEdZRs0yQbJLrHqQdE75StI34m1Xi8VLFxpq1rreGomXEHJAgIj3at0
hHUkViI9WxYzkKRMcnkgpC+uYcj/hQZUxZX+SvcgZMEVL5nqAllDfPEG0Eb1Yj8H
Ih1+STPsLw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:18 2025 by rpki-client