Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
File:                     3137372e38342e34302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          8lAxpoHN0cPLmBISxaokeboqnT1u07//nilPkj7iMjg=
Subject key identifier:   F0:5F:E8:55:34:24:D4:B0:55:10:21:10:96:E1:AA:A5:24:2B:4C:7C
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       0A6963E0C0EA8632664FDC0B6F137418612E1DC7
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
Signing time:             Wed 05 Mar 2025 19:00:27 +0000
ROA not before:           Wed 05 Mar 2025 18:55:27 +0000
ROA not after:            Wed 04 Mar 2026 19:00:27 +0000
asID:                     52708
IP address blocks:        177.84.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:69:63:e0:c0:ea:86:32:66:4f:dc:0b:6f:13:74:18:61:2e:1d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Mar  5 18:55:27 2025 GMT
            Not After : Mar  4 19:00:27 2026 GMT
        Subject: CN=F05FE8553424D4B05510211096E1AAA5242B4C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:fa:75:4c:d1:16:80:70:bb:66:0d:e8:31:
                    74:09:6e:b2:ae:1a:81:b8:1f:03:f8:9d:c1:30:0d:
                    65:21:37:a2:5b:fb:2a:6e:64:d1:d5:82:e7:a7:66:
                    0b:a5:34:fc:59:a7:d8:9c:92:73:e1:c4:b8:8a:aa:
                    ee:4f:2d:b2:c5:a4:d9:35:37:20:f2:d0:1c:c7:c5:
                    17:0f:ba:62:4f:8b:3d:43:6a:66:a7:27:44:44:e4:
                    4d:02:9f:7c:61:9f:07:82:da:87:ec:a7:d7:86:27:
                    b3:21:cc:69:be:ef:da:aa:71:21:3f:ff:c3:03:40:
                    21:8e:78:19:ce:46:f6:92:5d:d8:0c:6e:f6:78:07:
                    21:f8:91:c7:cc:93:bf:a0:6c:6d:39:08:d2:c2:1e:
                    af:c1:d5:4c:d2:3b:dd:bb:fd:9f:58:0c:7f:c8:24:
                    e8:c9:12:a3:d1:4e:0a:68:de:0f:67:68:4f:7d:14:
                    2b:9e:a6:00:bc:aa:1a:7d:8b:ee:fa:38:43:a1:37:
                    f0:61:db:5f:41:67:f4:31:2a:f4:0a:92:95:e9:39:
                    48:05:c2:b8:34:b5:e9:2b:ee:76:a9:a8:0c:be:cf:
                    02:a9:6b:df:36:83:f5:73:45:31:d5:b6:3f:22:12:
                    5d:9f:a8:d5:e7:1c:a5:4c:25:05:ed:72:cb:df:cc:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:E8:55:34:24:D4:B0:55:10:21:10:96:E1:AA:A5:24:2B:4C:7C
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:dd:3d:22:bc:a2:67:d4:66:64:e4:57:db:d2:27:3b:f5:
         bf:88:bf:fe:94:2a:f8:75:8e:f8:01:72:1b:f3:d7:9e:1b:94:
         4b:56:60:7c:ad:6f:95:57:24:18:90:ab:c4:a4:9b:23:8c:13:
         6c:d5:fa:8e:70:88:3d:53:a1:52:54:d5:b4:ce:27:07:7d:bd:
         f5:8a:a1:48:b2:dd:ff:fc:14:b3:d3:50:02:b0:7c:73:86:9d:
         1f:9c:c1:ed:d9:d0:e5:9f:51:76:5d:4d:16:4d:91:67:d0:7d:
         55:21:dd:ef:45:b8:89:c6:cd:d5:4a:44:5a:64:3d:e0:fb:62:
         4a:32:ff:3b:a9:a7:c3:2b:72:85:d4:5c:df:36:18:5f:92:00:
         b5:52:46:39:18:77:4f:3a:16:07:bf:41:7c:06:0d:0a:7b:47:
         fe:d3:84:2f:91:c6:b2:df:d5:25:bb:c3:10:03:e5:09:3a:be:
         2e:7e:9f:cb:cd:86:ea:6d:49:3a:5c:b6:02:f3:c8:95:5d:2d:
         9e:24:4f:0f:ff:b0:60:26:9d:c1:85:83:55:c9:68:8f:5c:34:
         98:89:68:7e:6b:f8:d9:0e:c7:c9:4f:9e:8a:77:78:e1:d8:61:
         2d:fc:0b:1d:d7:41:09:e5:b2:c7:a7:28:06:6a:25:73:ff:0f:
         be:5a:70:2d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCmlj4MDqhjJmT9wLbxN0GGEuHccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNTAzMDUxODU1MjdaFw0yNjAzMDQxOTAwMjdaMDMxMTAvBgNV
BAMTKEYwNUZFODU1MzQyNEQ0QjA1NTEwMjExMDk2RTFBQUE1MjQyQjRDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8vp1TNEWgHC7Zg3oMXQJbrKu
GoG4HwP4ncEwDWUhN6Jb+ypuZNHVguenZgulNPxZp9icknPhxLiKqu5PLbLFpNk1
NyDy0BzHxRcPumJPiz1DamanJ0RE5E0Cn3xhnweC2ofsp9eGJ7MhzGm+79qqcSE/
/8MDQCGOeBnORvaSXdgMbvZ4ByH4kcfMk7+gbG05CNLCHq/B1UzSO927/Z9YDH/I
JOjJEqPRTgpo3g9naE99FCuepgC8qhp9i+76OEOhN/Bh219BZ/QxKvQKkpXpOUgF
wrg0tekr7napqAy+zwKpa982g/VzRTHVtj8iEl2fqNXnHKVMJQXtcsvfzNFHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8F/oVTQk1LBVECEQluGqpSQrTHwwHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzEv
MzEzNzM3MmUzODM0MmUzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM3
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFUKDANBgkqhkiG9w0BAQsFAAOCAQEAI7rdPSK8omfU
ZmTkV9vSJzv1v4i//pQq+HWO+AFyG/PXnhuUS1ZgfK1vlVckGJCrxKSbI4wTbNX6
jnCIPVOhUlTVtM4nB3299YqhSLLd//wUs9NQArB8c4adH5zB7dnQ5Z9Rdl1NFk2R
Z9B9VSHd70W4icbN1UpEWmQ94PtiSjL/O6mnwytyhdRc3zYYX5IAtVJGORh3TzoW
B79BfAYNCntH/tOEL5HGst/VJbvDEAPlCTq+Ln6fy82G6m1JOly2AvPIlV0tniRP
D/+wYCadwYWDVcloj1w0mIlofmv42Q7HyU+eind44dhhLfwLHddBCeWyx6coBmol
c/8PvlpwLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:58:01 2025 by rpki-client