Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134322e302f32342d3234203d3e20323633313331.roa
File:                     3137372e3132382e3134322e302f32342d3234203d3e20323633313331.roa (raw, json)
Hash identifier:          9K7EiIu9o2OfH25Iit9Fe+n2sj2kGTi+9IwImkL5GKQ=
Subject key identifier:   0B:A9:BB:63:AA:D5:94:9D:D3:9F:A8:7C:A3:E6:DF:F8:81:7F:B7:23
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       01FF96257B922AFA16352D9D4EB2622543368752
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134322e302f32342d3234203d3e20323633313331.roa
Signing time:             Tue 25 Jul 2023 20:06:48 +0000
ROA not before:           Tue 25 Jul 2023 20:01:48 +0000
ROA not after:            Tue 23 Jul 2024 20:06:48 +0000
asID:                     263131
IP address blocks:        177.128.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:96:25:7b:92:2a:fa:16:35:2d:9d:4e:b2:62:25:43:36:87:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 25 20:01:48 2023 GMT
            Not After : Jul 23 20:06:48 2024 GMT
        Subject: CN=0BA9BB63AAD5949DD39FA87CA3E6DFF8817FB723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:16:c6:8c:c3:50:ec:af:11:af:35:bc:c6:
                    18:b8:c3:2a:38:38:ad:5c:79:0b:98:3e:ba:d0:f4:
                    c8:60:d1:d6:56:c5:9a:5e:83:2e:e9:31:ee:d2:a1:
                    18:89:30:bc:65:42:fa:2a:ca:ec:6f:d8:3c:fa:c4:
                    b9:0a:3e:5f:bb:e8:fd:d9:f9:d9:9a:47:75:d3:c6:
                    b8:40:41:e7:49:dd:3f:b3:fb:eb:00:b7:ba:4f:dc:
                    d6:6c:c5:d9:d5:dd:c6:70:20:1e:eb:46:89:ea:ba:
                    2d:d8:a5:92:0e:12:70:0a:9e:14:0e:d8:43:61:5f:
                    e9:74:b1:0f:6f:09:66:98:0c:04:30:00:ab:bc:26:
                    5c:82:4b:85:62:d7:89:25:82:e4:07:be:c5:72:56:
                    d1:7a:e8:a2:56:67:f7:91:69:63:bb:a9:2d:97:a1:
                    7d:88:10:fa:91:c4:fe:94:d4:ea:a5:aa:4c:c7:36:
                    90:71:cc:26:24:d5:5e:4f:4f:f6:b5:45:86:c5:37:
                    ec:90:ad:5e:63:97:33:cd:ad:24:1a:bb:c5:aa:b7:
                    02:38:8a:49:79:a7:df:14:3e:b8:c2:d3:ee:41:95:
                    f4:93:47:75:63:66:a9:34:d0:cb:35:a4:48:b4:7f:
                    a4:e2:c2:6d:8a:e4:46:62:a4:38:21:2a:f6:eb:eb:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:BB:63:AA:D5:94:9D:D3:9F:A8:7C:A3:E6:DF:F8:81:7F:B7:23
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134322e302f32342d3234203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:9c:ba:d6:0c:8b:9b:ea:b0:1e:2a:b5:5b:13:30:eb:50:
         c9:a0:26:3b:49:1a:26:8b:f9:68:50:51:35:9f:6e:67:94:c0:
         17:da:a4:78:ab:b0:ff:98:41:a4:46:0a:ac:86:70:0d:e4:29:
         8e:86:a8:50:f2:e5:6c:02:9d:1a:38:cf:c6:eb:e6:fe:86:0e:
         b9:71:5a:b4:aa:f9:f7:cb:60:c7:5c:91:b7:9f:9b:cd:1c:8e:
         7d:27:54:2e:5d:ea:2d:88:7e:85:37:94:0d:0f:ca:2b:c4:60:
         64:a5:63:f4:2b:db:19:ef:0e:41:4a:4e:9c:4f:5a:9d:95:7c:
         dd:40:f4:1e:a7:73:29:a9:e3:0b:d1:7b:1f:30:6d:2a:c7:63:
         0c:ee:91:d4:28:45:3d:79:ec:db:e7:54:a6:90:53:b2:54:8e:
         91:b6:df:3b:5d:61:38:57:85:a0:ac:9d:5f:65:a9:66:ca:a9:
         ee:b9:0a:c1:bc:1d:a3:f6:3d:39:31:7b:a9:e5:97:59:e2:f6:
         f3:14:fd:8f:6a:a2:09:29:e3:87:f2:48:97:81:d1:ba:5f:fb:
         dd:0b:2d:ab:80:5d:1e:d9:b0:60:6a:4d:a2:5f:d4:7c:1e:d8:
         02:86:d2:3c:f7:ac:4c:d1:b7:b5:3c:3c:83:03:20:ad:20:31:
         dc:a5:0d:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAf+WJXuSKvoWNS2dTrJiJUM2h1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRTdCQTZFQkNBN0ZCQzYyNTlDOTZCOTkxRDMyOTVD
ODQ2QjdCNTAeFw0yMzA3MjUyMDAxNDhaFw0yNDA3MjMyMDA2NDhaMDMxMTAvBgNV
BAMTKDBCQTlCQjYzQUFENTk0OUREMzlGQTg3Q0EzRTZERkY4ODE3RkI3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RxbGjMNQ7K8RrzW8xhi4wyo4
OK1ceQuYPrrQ9Mhg0dZWxZpegy7pMe7SoRiJMLxlQvoqyuxv2Dz6xLkKPl+76P3Z
+dmaR3XTxrhAQedJ3T+z++sAt7pP3NZsxdnV3cZwIB7rRonqui3YpZIOEnAKnhQO
2ENhX+l0sQ9vCWaYDAQwAKu8JlyCS4Vi14klguQHvsVyVtF66KJWZ/eRaWO7qS2X
oX2IEPqRxP6U1OqlqkzHNpBxzCYk1V5PT/a1RYbFN+yQrV5jlzPNrSQau8WqtwI4
ikl5p98UPrjC0+5BlfSTR3VjZqk00Ms1pEi0f6Tiwm2K5EZipDghKvbr63BNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUC6m7Y6rVlJ3Tn6h8o+bf+IF/tyMwHwYDVR0j
BBgwFoAUwB57puvKf7xiWclrmR0ylchGt7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpjMWtoajRjTWVVVkNXYkdWb2pZMVVucHBmZWN3cGVYdEJjcWFzN2VG
MUIvMC9DMDFFN0JBNkVCQ0E3RkJDNjI1OUM5NkI5OTFEMzI5NUM4NDZCN0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwMUU3QkE2RUJDQTdGQkM2
MjU5Qzk2Qjk5MUQzMjk1Qzg0NkI3QjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaYzFraGo0Y01lVVZDV2JHVm9qWTFVbnBwZmVjd3BlWHRCY3FhczdlRjFCLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGAjjANBgkqhkiG9w0BAQsFAAOCAQEADvWc
utYMi5vqsB4qtVsTMOtQyaAmO0kaJov5aFBRNZ9uZ5TAF9qkeKuw/5hBpEYKrIZw
DeQpjoaoUPLlbAKdGjjPxuvm/oYOuXFatKr598tgx1yRt5+bzRyOfSdULl3qLYh+
hTeUDQ/KK8RgZKVj9CvbGe8OQUpOnE9anZV83UD0HqdzKanjC9F7HzBtKsdjDO6R
1ChFPXns2+dUppBTslSOkbbfO11hOFeFoKydX2WpZsqp7rkKwbwdo/Y9OTF7qeWX
WeL28xT9j2qiCSnjh/JIl4HRul/73Qstq4BdHtmwYGpNol/UfB7YAobSPPesTNG3
tTw8gwMgrSAx3KUN1Q==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:26 2025 by rpki-client