Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa
File:                     3137372e3133372e34372e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          lPHjn/JT+6+IOroIBGYq6nlawYwHYmfCOrPvBmIPrKQ=
Subject key identifier:   1B:39:CD:12:DA:00:B3:2B:BF:63:F7:67:FC:2C:4F:59:4B:11:6F:9B
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       13D734FC93BCD63AC393AA40FEABC13F79092EA8
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:11 +0000
ROA not before:           Thu 06 Mar 2025 04:37:11 +0000
ROA not after:            Thu 05 Mar 2026 04:42:11 +0000
asID:                     28210
IP address blocks:        177.137.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:34:fc:93:bc:d6:3a:c3:93:aa:40:fe:ab:c1:3f:79:09:2e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:11 2025 GMT
            Not After : Mar  5 04:42:11 2026 GMT
        Subject: CN=1B39CD12DA00B32BBF63F767FC2C4F594B116F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:75:8d:f7:e1:30:e6:36:19:5f:ab:05:52:
                    02:ea:a3:c2:e5:26:6a:88:d3:dc:e7:4f:a8:25:7e:
                    93:9b:6e:22:65:3a:a7:bd:a1:f2:66:b3:b8:e6:eb:
                    12:30:a5:87:5e:76:ba:9b:46:7f:5f:c1:e1:8f:6e:
                    a6:c3:1c:89:b5:27:ac:c1:12:bb:f8:a1:09:d8:64:
                    c7:9e:cf:f3:aa:48:fe:93:58:07:fd:81:3e:1a:52:
                    01:65:44:2d:f1:31:ef:8f:c9:ca:f2:ff:29:49:03:
                    a3:ce:fc:95:8c:8b:b3:85:77:34:88:2c:f5:79:59:
                    34:8e:28:52:2f:51:3f:42:9c:35:ba:8f:79:15:a8:
                    40:99:55:b9:7d:0d:c6:2e:53:06:10:e2:25:49:6d:
                    23:80:07:c0:0f:78:0f:0e:7e:c6:4a:58:27:dc:14:
                    48:9c:9d:df:a5:63:e4:76:3f:1f:2e:6c:23:e5:39:
                    40:24:09:05:46:56:a7:6c:ea:ed:ad:54:43:ce:92:
                    a1:0c:f2:a3:e1:d3:2b:ed:6f:d4:9a:5b:e2:09:29:
                    9a:8c:9e:2a:8c:d6:36:29:e9:87:0b:d9:7c:95:87:
                    78:1d:77:41:81:92:89:c2:67:a2:2c:21:9c:e0:bf:
                    fc:19:f3:4a:26:96:24:2e:33:f8:7c:31:c1:42:4e:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:39:CD:12:DA:00:B3:2B:BF:63:F7:67:FC:2C:4F:59:4B:11:6F:9B
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:54:82:7c:1d:a2:a0:ee:1e:d0:36:35:1c:d6:29:19:9b:8b:
         73:c7:ca:5c:b0:4f:16:37:60:26:42:19:b8:0b:05:7c:59:1e:
         46:48:90:d5:5c:68:d3:e0:d4:24:bd:2a:cb:fe:36:29:ee:2e:
         21:b3:a4:61:94:1c:0d:f9:dd:b2:02:c6:44:4a:23:5c:d4:0d:
         14:e8:ba:f2:be:d7:be:7a:39:a2:e6:e6:22:88:71:96:20:b0:
         0c:fa:c5:7d:3b:56:a1:de:59:69:c7:cd:c7:cc:0a:04:e7:d2:
         08:2f:67:8d:26:d5:15:5c:0b:57:0f:e1:52:19:96:60:bd:83:
         24:fd:d9:2c:62:1b:d2:e5:ac:ec:cd:96:67:70:bc:c0:3b:a8:
         9a:50:05:74:ba:3a:6b:22:86:b1:68:65:cb:eb:ed:b2:ec:3d:
         3f:f9:ff:84:06:26:21:2e:9b:44:db:6f:ed:03:05:db:25:32:
         e5:79:c4:75:74:40:f4:4a:22:97:0d:74:ea:d7:2a:d6:c0:76:
         16:0f:72:b3:38:94:a5:d2:7f:56:fb:61:2d:12:73:d9:34:9e:
         05:46:fc:45:1a:09:d6:fb:58:bd:47:97:fd:c2:fb:8b:3e:6e:
         32:61:9b:fa:e8:7e:cc:6a:9a:31:59:7a:f9:31:ae:46:cc:a0:
         ba:77:6c:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE9c0/JO81jrDk6pA/qvBP3kJLqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTAzMDYwNDM3MTFaFw0yNjAzMDUwNDQyMTFaMDMxMTAvBgNV
BAMTKDFCMzlDRDEyREEwMEIzMkJCRjYzRjc2N0ZDMkM0RjU5NEIxMTZGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D3WN9+Ew5jYZX6sFUgLqo8Ll
JmqI09znT6glfpObbiJlOqe9ofJms7jm6xIwpYdedrqbRn9fweGPbqbDHIm1J6zB
Erv4oQnYZMeez/OqSP6TWAf9gT4aUgFlRC3xMe+Pycry/ylJA6PO/JWMi7OFdzSI
LPV5WTSOKFIvUT9CnDW6j3kVqECZVbl9DcYuUwYQ4iVJbSOAB8APeA8OfsZKWCfc
FEicnd+lY+R2Px8ubCPlOUAkCQVGVqds6u2tVEPOkqEM8qPh0yvtb9SaW+IJKZqM
niqM1jYp6YcL2XyVh3gdd0GBkonCZ6IsIZzgv/wZ80omliQuM/h8McFCTm6RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGznNEtoAsyu/Y/dn/CxPWUsRb5swHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzM3MmUzMTMzMzcyZTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYkvMA0GCSqGSIb3DQEBCwUAA4IBAQBnVIJ8HaKg
7h7QNjUc1ikZm4tzx8pcsE8WN2AmQhm4CwV8WR5GSJDVXGjT4NQkvSrL/jYp7i4h
s6RhlBwN+d2yAsZESiNc1A0U6Lryvte+ejmi5uYiiHGWILAM+sV9O1ah3llpx83H
zAoE59IIL2eNJtUVXAtXD+FSGZZgvYMk/dksYhvS5azszZZncLzAO6iaUAV0ujpr
IoaxaGXL6+2y7D0/+f+EBiYhLptE22/tAwXbJTLlecR1dED0SiKXDXTq1yrWwHYW
D3KzOJSl0n9W+2EtEnPZNJ4FRvxFGgnW+1i9R5f9wvuLPm4yYZv66H7MapoxWXr5
Ma5GzKC6d2zI
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:22 2025 by rpki-client