Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          5CqxQuvowOFNpvFHPiHdJuHX9KklRdDxgK+fHV5VYHI=
Subject key identifier:   53:5F:C6:85:A0:F6:0D:E2:D6:B1:3B:F9:C9:53:F4:8B:FD:FB:CC:66
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       455B81FA32B6527E3E7BA8D0D36FD5C98709790F
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:52 +0000
ROA not before:           Thu 07 Nov 2024 01:18:52 +0000
ROA not after:            Thu 06 Nov 2025 01:23:52 +0000
asID:                     263444
IP address blocks:        177.91.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5b:81:fa:32:b6:52:7e:3e:7b:a8:d0:d3:6f:d5:c9:87:09:79:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:52 2024 GMT
            Not After : Nov  6 01:23:52 2025 GMT
        Subject: CN=535FC685A0F60DE2D6B13BF9C953F48BFDFBCC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:de:ce:3b:6f:4e:1c:0d:24:ee:d3:da:c0:
                    b3:fb:42:ef:c1:54:75:33:dc:38:13:59:f2:ed:8d:
                    ed:95:e4:5d:c4:aa:55:cc:27:bd:1d:54:1b:0a:43:
                    37:2f:1c:03:3f:64:c7:05:0b:4d:0f:5d:ed:e2:f1:
                    4f:b4:f3:57:06:96:a6:32:61:f6:b5:d8:43:a9:79:
                    46:01:44:cd:55:04:a7:d4:45:52:07:e5:b4:52:41:
                    cc:b8:54:70:0c:e7:6d:b0:19:d7:0f:f4:b0:61:a3:
                    19:b8:64:b0:d1:67:78:25:2e:62:20:25:cc:4b:94:
                    50:7b:62:d1:7c:38:9c:bb:ab:13:f2:46:78:90:45:
                    a1:b8:9e:4e:11:ef:97:89:11:a4:31:bb:6a:fc:3a:
                    86:55:46:bf:ce:dc:b1:b7:51:5b:81:81:cb:93:b9:
                    38:92:2a:89:4d:af:2a:51:4c:5d:38:a6:f5:b8:24:
                    e7:05:71:29:c1:19:5d:e5:59:d0:d3:04:bb:fb:78:
                    9a:4a:aa:d6:de:fa:fe:8c:62:93:f3:19:04:d3:92:
                    1d:51:7d:a4:2c:8b:24:2a:a3:af:81:90:bb:a2:47:
                    ae:54:0f:4a:dc:d5:13:1a:a7:2a:80:74:0e:56:2f:
                    8e:b2:5c:d9:fd:4f:1d:39:73:55:57:69:20:ec:cc:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5F:C6:85:A0:F6:0D:E2:D6:B1:3B:F9:C9:53:F4:8B:FD:FB:CC:66
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:84:95:67:c9:5b:dd:e8:fb:a4:9f:d6:5c:9d:4b:48:b1:b4:
         0a:bf:b5:bc:77:83:34:8d:ce:0a:60:ff:48:d1:68:0c:d6:33:
         6a:4a:f2:21:c5:d6:91:a0:99:25:6f:81:fc:25:ae:cd:e8:c9:
         22:63:3d:fe:d7:bd:d9:32:bf:1b:42:d3:55:4a:bb:2a:5c:6a:
         07:50:0d:fb:1a:69:f6:45:55:54:12:b1:14:fb:4b:76:c2:cb:
         05:c7:87:10:0a:ee:ae:ad:07:ff:12:39:1b:b2:9c:52:30:84:
         3e:0c:96:1e:fb:b0:3d:04:f9:34:aa:61:9c:d5:91:17:3e:0f:
         92:a5:30:8f:37:11:d1:5a:e8:d1:95:bf:bf:b3:c2:31:75:44:
         9b:78:1d:a8:1b:11:86:f3:46:0b:90:d4:4f:4c:cd:02:88:bd:
         ea:fb:4c:09:ba:1e:1a:ff:d7:a5:8a:ed:28:76:5f:f4:da:e2:
         14:4c:73:c7:d9:e8:6d:fa:98:ef:c9:2f:45:21:f2:54:7b:aa:
         69:c9:99:41:54:ef:14:c9:6f:ba:65:9b:78:b6:84:11:8e:f5:
         2c:ac:10:e7:d2:ef:84:94:e0:c1:54:64:8d:c9:db:78:5c:94:
         06:bf:83:4a:2b:a9:98:1b:7b:ad:6d:c8:5d:c1:2f:0b:56:73:
         1a:7a:ac:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURVuB+jK2Un4+e6jQ02/VyYcJeQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE0MDEzQTI1Rjc3MTI5Qzc0QjA2OUMxNzcyREYyM0Mw
ODVGQTlGQzAeFw0yNDExMDcwMTE4NTJaFw0yNTExMDYwMTIzNTJaMDMxMTAvBgNV
BAMTKDUzNUZDNjg1QTBGNjBERTJENkIxM0JGOUM5NTNGNDhCRkRGQkNDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzR97OO29OHA0k7tPawLP7Qu/B
VHUz3DgTWfLtje2V5F3EqlXMJ70dVBsKQzcvHAM/ZMcFC00PXe3i8U+081cGlqYy
Yfa12EOpeUYBRM1VBKfURVIH5bRSQcy4VHAM522wGdcP9LBhoxm4ZLDRZ3glLmIg
JcxLlFB7YtF8OJy7qxPyRniQRaG4nk4R75eJEaQxu2r8OoZVRr/O3LG3UVuBgcuT
uTiSKolNrypRTF04pvW4JOcFcSnBGV3lWdDTBLv7eJpKqtbe+v6MYpPzGQTTkh1R
faQsiyQqo6+BkLuiR65UD0rc1RMapyqAdA5WL46yXNn9Tx05c1VXaSDszDl9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU1/GhaD2DeLWsTv5yVP0i/37zGYwHwYDVR0j
BBgwFoAUQUATol93Epx0sGnBdy3yPAhfqfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC80MTQwMTNBMjVGNzcxMjlDNzRCMDY5QzE3NzJERjIzQzA4NUZBOUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNDAxM0EyNUY3NzEyOUM3
NEIwNjlDMTc3MkRGMjNDMDg1RkE5RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzEzNzM3MmUzOTMxMmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxW6MwDQYJKoZIhvcNAQELBQADggEBAJeElWfJ
W93o+6Sf1lydS0ixtAq/tbx3gzSNzgpg/0jRaAzWM2pK8iHF1pGgmSVvgfwlrs3o
ySJjPf7XvdkyvxtC01VKuypcagdQDfsaafZFVVQSsRT7S3bCywXHhxAK7q6tB/8S
ORuynFIwhD4Mlh77sD0E+TSqYZzVkRc+D5KlMI83EdFa6NGVv7+zwjF1RJt4Hagb
EYbzRguQ1E9MzQKIver7TAm6Hhr/16WK7Sh2X/Ta4hRMc8fZ6G36mO/JL0Uh8lR7
qmnJmUFU7xTJb7plm3i2hBGO9SysEOfS74SU4MFUZI3J23hclAa/g0orqZgbe61t
yF3BLwtWcxp6rNA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:32 2025 by rpki-client