Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa
File:                     3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          /VRD4Qhs5YU2LB12syBTOuhYIUBnzNUsZfuMUgaHmYw=
Subject key identifier:   67:31:1F:5C:E0:E3:20:BE:DB:9C:BD:E0:BA:86:47:A1:15:59:3A:74
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       120B6246F3DBC6C6A3BB8DF8C8880A11834A5190
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:08 +0000
ROA not before:           Thu 31 Oct 2024 17:09:08 +0000
ROA not after:            Thu 30 Oct 2025 17:14:08 +0000
asID:                     262659
IP address blocks:        179.127.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:62:46:f3:db:c6:c6:a3:bb:8d:f8:c8:88:0a:11:83:4a:51:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:08 2024 GMT
            Not After : Oct 30 17:14:08 2025 GMT
        Subject: CN=67311F5CE0E320BEDB9CBDE0BA8647A115593A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:d2:e4:24:bb:12:47:d3:8a:06:6e:ba:24:
                    2e:53:f6:c1:c6:44:32:5b:a3:a9:da:cd:9c:34:cf:
                    5b:07:5f:81:31:47:99:6a:be:aa:07:6f:dd:19:a4:
                    10:4f:0f:50:ed:0c:8a:6e:4c:e3:e2:32:6d:3f:a8:
                    b5:c1:2c:e4:90:51:57:c0:40:02:1d:7c:a3:8a:a5:
                    1b:3e:85:c4:e5:6e:ec:a3:36:0a:a9:75:a8:b7:54:
                    55:31:74:a4:92:46:7f:d1:f9:8c:3e:8d:05:e8:dd:
                    57:34:41:07:e7:22:12:af:a2:e9:13:9d:45:c4:33:
                    76:1a:77:50:c1:27:85:d6:f6:32:49:c8:d2:44:15:
                    57:df:b8:68:c5:1d:3f:07:f0:9e:f2:2d:4f:b1:54:
                    7e:21:ab:1a:42:ab:56:a1:b2:57:b9:89:3c:2c:48:
                    f7:d0:c2:a2:e0:2e:34:5b:9b:ca:f1:b9:f0:f7:ec:
                    9c:f3:88:e6:76:41:3f:d3:47:19:8c:82:ca:75:73:
                    dd:57:9e:9a:37:91:8e:b5:6f:4d:25:09:75:08:0a:
                    a0:a4:53:85:f7:37:ea:ec:80:7f:6f:9f:29:b3:43:
                    09:6b:d3:c6:84:f7:71:cd:e4:a7:f7:25:2a:35:48:
                    7a:ad:ec:1e:8d:f1:8f:c1:2f:8a:60:15:e0:18:4f:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:1F:5C:E0:E3:20:BE:DB:9C:BD:E0:BA:86:47:A1:15:59:3A:74
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:13:e1:b0:ae:af:4b:cb:b4:94:b8:08:8a:da:7d:23:f2:2d:
         75:1a:96:15:47:36:1a:ad:f2:e8:0d:f9:26:e3:8e:d1:34:0e:
         e9:3d:f3:f2:67:48:c6:18:4e:e7:ac:8e:f6:cf:e8:f2:83:bf:
         fc:fb:9f:77:3b:53:d5:2c:c0:c3:84:83:6d:c4:3c:97:0e:a2:
         2d:11:82:f5:05:2c:16:5f:93:18:e7:98:25:5a:d5:1f:f4:5c:
         c6:b5:a3:99:e6:b0:d0:ac:5e:db:39:94:93:81:da:cd:73:42:
         4e:77:cd:66:ba:b3:be:76:20:c0:27:37:c3:51:88:bf:c4:ee:
         f5:e2:36:4a:17:f4:75:dd:fd:05:bb:31:bb:31:0a:00:fc:ad:
         f9:93:0b:6d:98:cd:a5:ed:ad:20:24:42:71:cd:23:43:f6:d9:
         d4:2c:49:58:c6:6c:af:6a:9d:51:9c:60:06:9b:4d:8d:42:63:
         75:94:74:18:3c:b8:12:e7:71:89:66:7e:a7:3b:4e:96:55:eb:
         8b:90:95:d9:53:7c:37:e4:a0:b8:4b:ae:ef:79:7b:06:44:f7:
         1f:50:06:a1:21:86:2e:38:39:91:20:00:0d:06:b1:cc:9c:04:
         9f:5b:96:a4:96:38:6f:7d:c2:b0:34:59:05:5a:6c:17:fb:c9:
         41:0d:42:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEgtiRvPbxsaju434yIgKEYNKUZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzA5MDhaFw0yNTEwMzAxNzE0MDhaMDMxMTAvBgNV
BAMTKDY3MzExRjVDRTBFMzIwQkVEQjlDQkRFMEJBODY0N0ExMTU1OTNBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYtLkJLsSR9OKBm66JC5T9sHG
RDJbo6nazZw0z1sHX4ExR5lqvqoHb90ZpBBPD1DtDIpuTOPiMm0/qLXBLOSQUVfA
QAIdfKOKpRs+hcTlbuyjNgqpdai3VFUxdKSSRn/R+Yw+jQXo3Vc0QQfnIhKvoukT
nUXEM3Yad1DBJ4XW9jJJyNJEFVffuGjFHT8H8J7yLU+xVH4hqxpCq1ahsle5iTws
SPfQwqLgLjRbm8rxufD37JzziOZ2QT/TRxmMgsp1c91Xnpo3kY61b00lCXUICqCk
U4X3N+rsgH9vnymzQwlr08aE93HN5Kf3JSo1SHqt7B6N8Y/BL4pgFeAYT7flAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZzEfXODjIL7bnL3guoZHoRVZOnQwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzNzM5MmUzMTMyMzcyZTM0MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzfzAwDQYJKoZIhvcNAQELBQADggEBAGUT4bCu
r0vLtJS4CIrafSPyLXUalhVHNhqt8ugN+SbjjtE0Duk98/JnSMYYTuesjvbP6PKD
v/z7n3c7U9UswMOEg23EPJcOoi0RgvUFLBZfkxjnmCVa1R/0XMa1o5nmsNCsXts5
lJOB2s1zQk53zWa6s752IMAnN8NRiL/E7vXiNkoX9HXd/QW7MbsxCgD8rfmTC22Y
zaXtrSAkQnHNI0P22dQsSVjGbK9qnVGcYAabTY1CY3WUdBg8uBLncYlmfqc7TpZV
64uQldlTfDfkoLhLru95ewZE9x9QBqEhhi44OZEgAA0GscycBJ9blqSWOG99wrA0
WQVabBf7yUENQqo=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:49 2025 by rpki-client