Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132352e33322e302f32312d3234203d3e20323632333333.roa
File:                     3137372e3132352e33322e302f32312d3234203d3e20323632333333.roa (raw, json)
Hash identifier:          SSdKtn7P9jR0PeS5a3Lp0QTi/oVVA0TyM0/4P07KlOY=
Subject key identifier:   41:06:02:8E:E5:AF:B7:E0:E8:F3:FD:28:48:EE:36:EA:DA:67:1B:C2
Certificate issuer:       /CN=1C59C959F078E431B9CFA56B9F699727769D35A1
Certificate serial:       29D092B8393387C47D4611C7FB23E1DD0F86BAF9
Authority key identifier: 1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C59C959F078E431B9CFA56B9F699727769D35A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132352e33322e302f32312d3234203d3e20323632333333.roa
Signing time:             Tue 23 Aug 2022 14:27:44 +0000
ROA not before:           Tue 23 Aug 2022 14:22:44 +0000
ROA not after:            Tue 22 Aug 2023 14:27:44 +0000
asID:                     262333
IP address blocks:        177.125.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d0:92:b8:39:33:87:c4:7d:46:11:c7:fb:23:e1:dd:0f:86:ba:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C59C959F078E431B9CFA56B9F699727769D35A1
        Validity
            Not Before: Aug 23 14:22:44 2022 GMT
            Not After : Aug 22 14:27:44 2023 GMT
        Subject: CN=4106028EE5AFB7E0E8F3FD2848EE36EADA671BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:4e:61:2c:49:b5:c8:3e:7e:51:93:44:92:
                    5c:58:0f:be:65:36:1b:b6:5c:3c:ee:f0:39:92:46:
                    08:20:08:85:a7:c2:45:ff:45:95:08:5c:64:06:de:
                    77:e5:d9:6a:82:0a:f0:dd:a3:00:c2:d5:ee:fa:fb:
                    b0:93:0f:a4:1a:e9:9b:1b:cd:f4:bd:8e:10:1a:38:
                    d4:dd:27:0f:41:73:7e:50:c6:1c:b7:8b:d9:78:07:
                    c9:19:09:57:3c:47:9f:61:93:17:a9:d2:6f:9e:13:
                    63:6d:79:ab:3e:9c:c9:cd:67:b1:a8:81:55:27:8e:
                    4a:b3:47:44:4d:47:80:5d:ee:a5:45:22:55:8f:5b:
                    07:a8:4c:a1:bd:cc:06:dc:fa:86:e6:84:93:38:19:
                    ec:0f:de:97:49:3a:78:24:31:e1:29:cf:e0:f2:63:
                    8f:02:d0:13:69:02:6f:fc:4a:8c:57:63:b3:39:e6:
                    df:06:ab:df:51:ed:c8:cb:87:fe:0f:a6:fe:2b:58:
                    97:64:0d:da:21:98:e1:43:21:c7:a3:74:8e:d7:4e:
                    a7:bb:8a:58:f5:1f:31:23:f6:fa:83:7a:7e:46:30:
                    c3:45:9d:fb:2c:fe:13:f1:9e:11:e6:93:b2:89:62:
                    73:5d:af:7b:77:72:21:6a:2d:73:5d:4a:a2:6e:01:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:06:02:8E:E5:AF:B7:E0:E8:F3:FD:28:48:EE:36:EA:DA:67:1B:C2
            X509v3 Authority Key Identifier:
                keyid:1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/1C59C959F078E431B9CFA56B9F699727769D35A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C59C959F078E431B9CFA56B9F699727769D35A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132352e33322e302f32312d3234203d3e20323632333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:a8:bd:2e:9c:35:8c:70:51:54:dd:36:05:0c:4c:5a:f9:
         4d:5b:82:50:eb:66:82:d8:b8:3a:c7:34:72:c8:cc:3a:e3:8e:
         7f:0f:00:16:00:d7:86:e7:09:47:75:ae:e8:14:93:86:c2:e0:
         89:e6:d5:2c:c2:ec:46:b9:eb:a4:d7:a0:b6:92:77:32:82:a0:
         d1:fc:68:43:20:da:aa:57:26:2c:a6:b2:62:ce:6c:52:de:81:
         69:e9:80:d9:21:71:97:1b:fc:7f:fa:74:21:13:e4:38:59:b0:
         e7:e2:1e:16:f4:b6:80:12:7a:6d:c2:f7:91:b4:9c:9d:3f:29:
         5c:42:db:63:23:8a:61:f4:d7:59:ba:3c:ff:de:84:5b:82:20:
         f5:79:1e:1b:37:b0:0c:e0:09:14:37:43:f9:3b:48:32:72:a4:
         de:10:6c:73:ef:49:9c:92:01:df:a2:2e:e8:59:45:5a:18:89:
         8a:a7:b9:0c:e0:cb:fd:88:f5:76:4f:67:79:9c:db:b0:19:fc:
         4c:57:8d:1f:e9:f3:97:6b:1a:86:75:2d:a5:8a:5e:25:c5:3c:
         ae:7c:d6:dc:56:3b:80:e1:62:ba:a7:15:3a:4b:cd:73:08:18:
         d6:5f:ce:9f:81:fc:b9:82:58:5b:84:6d:bc:1b:21:de:53:a3:
         70:cd:42:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKdCSuDkzh8R9RhHH+yPh3Q+GuvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1OUM5NTlGMDc4RTQzMUI5Q0ZBNTZCOUY2OTk3Mjc3
NjlEMzVBMTAeFw0yMjA4MjMxNDIyNDRaFw0yMzA4MjIxNDI3NDRaMDMxMTAvBgNV
BAMTKDQxMDYwMjhFRTVBRkI3RTBFOEYzRkQyODQ4RUUzNkVBREE2NzFCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWE5hLEm1yD5+UZNEklxYD75l
Nhu2XDzu8DmSRgggCIWnwkX/RZUIXGQG3nfl2WqCCvDdowDC1e76+7CTD6Qa6Zsb
zfS9jhAaONTdJw9Bc35Qxhy3i9l4B8kZCVc8R59hkxep0m+eE2Nteas+nMnNZ7Go
gVUnjkqzR0RNR4Bd7qVFIlWPWweoTKG9zAbc+obmhJM4GewP3pdJOngkMeEpz+Dy
Y48C0BNpAm/8SoxXY7M55t8Gq99R7cjLh/4Ppv4rWJdkDdohmOFDIcejdI7XTqe7
ilj1HzEj9vqDen5GMMNFnfss/hPxnhHmk7KJYnNdr3t3ciFqLXNdSqJuAdiZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQQYCjuWvt+Do8/0oSO426tpnG8IwHwYDVR0j
BBgwFoAUHFnJWfB45DG5z6Vrn2mXJ3adNaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC8xQzU5Qzk1OUYwNzhFNDMxQjlDRkE1NkI5RjY5OTcyNzc2OUQzNUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNTlDOTU5RjA3OEU0MzFC
OUNGQTU2QjlGNjk5NzI3NzY5RDM1QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzNzM3MmUzMTMyMzUyZTMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxfSAwDQYJKoZIhvcNAQELBQADggEBAFr1qL0u
nDWMcFFU3TYFDExa+U1bglDrZoLYuDrHNHLIzDrjjn8PABYA14bnCUd1rugUk4bC
4Inm1SzC7Ea566TXoLaSdzKCoNH8aEMg2qpXJiymsmLObFLegWnpgNkhcZcb/H/6
dCET5DhZsOfiHhb0toASem3C95G0nJ0/KVxC22MjimH011m6PP/ehFuCIPV5Hhs3
sAzgCRQ3Q/k7SDJypN4QbHPvSZySAd+iLuhZRVoYiYqnuQzgy/2I9XZPZ3mc27AZ
/ExXjR/p85drGoZ1LaWKXiXFPK581txWO4DhYrqnFTpLzXMIGNZfzp+B/LmCWFuE
bbwbId5To3DNQnA=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:26 2025 by rpki-client