Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131352e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3131352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          yxuHlOIeQSkUKkEVE0gLQvfnddfTXKRGHTewo7TsSWs=
Subject key identifier:   C3:54:58:4C:E4:0B:DA:20:8E:6D:1A:8C:9C:FF:4A:01:2B:69:67:0C
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       610EF2A809A1F6E71179C78422A18F6576002969
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:29 +0000
ROA not before:           Tue 10 Oct 2023 13:52:29 +0000
ROA not after:            Tue 08 Oct 2024 13:57:29 +0000
asID:                     262808
IP address blocks:        177.37.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:f2:a8:09:a1:f6:e7:11:79:c7:84:22:a1:8f:65:76:00:29:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:29 2023 GMT
            Not After : Oct  8 13:57:29 2024 GMT
        Subject: CN=C354584CE40BDA208E6D1A8C9CFF4A012B69670C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:02:29:33:c3:7f:12:fc:46:73:51:27:f0:
                    e2:96:16:08:ec:9c:f9:48:6a:bf:6f:d9:97:a2:7f:
                    c1:1f:c1:15:ad:f3:6c:b0:ad:77:12:90:6c:43:ab:
                    6c:d4:d5:20:d0:89:4a:59:da:e5:17:00:98:83:a8:
                    8b:00:ee:b4:7b:21:74:6a:4e:b1:be:3e:73:46:cf:
                    4c:aa:1e:d3:54:51:10:c5:45:cb:7f:83:6a:74:8a:
                    ba:4e:5d:d1:a0:24:4c:c9:13:53:db:18:dc:39:15:
                    d0:73:9e:a9:8b:ee:f5:12:7a:6f:0c:ed:e8:89:b5:
                    17:e6:66:85:1e:c4:48:18:63:1b:cb:88:81:36:90:
                    c2:8d:8d:dd:fa:85:cd:bd:ff:96:22:43:50:63:d6:
                    24:7f:3b:e1:25:21:ae:0e:0a:d7:90:d0:d6:ec:af:
                    eb:b1:34:2c:51:6b:bd:b5:d1:e4:00:c1:be:24:bb:
                    00:0b:41:65:d2:34:6a:a1:9a:b9:93:25:7b:4f:1c:
                    d6:d2:d1:e0:6d:35:2b:13:05:c9:4f:d7:42:ae:21:
                    86:6c:e1:a2:16:ce:c6:b2:da:22:d9:72:f0:e3:33:
                    b7:2d:f4:51:1a:13:67:e4:c2:f4:5a:49:06:09:8b:
                    81:e6:26:97:f3:4e:3b:78:63:15:c0:ee:b0:3c:7f:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:58:4C:E4:0B:DA:20:8E:6D:1A:8C:9C:FF:4A:01:2B:69:67:0C
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:8a:48:eb:5d:7d:8e:88:88:e1:f1:f1:c9:bf:77:89:d9:
         03:d1:fe:ab:f3:e0:cb:c0:ed:18:84:b9:f4:ff:8f:90:cd:01:
         92:a7:f3:3b:b3:e3:73:14:96:26:42:2e:c2:65:b5:ec:05:2e:
         d9:08:f9:b7:6c:32:84:8d:6f:6c:c9:86:6a:d9:5b:c6:7c:c7:
         58:9c:22:e7:f5:5a:4e:a5:21:8b:63:54:4f:55:a4:b4:12:45:
         b7:ce:54:b2:d5:82:b7:e1:36:ee:df:7d:1e:3b:15:57:9b:1c:
         dd:64:84:be:d7:07:4b:68:21:31:5b:22:36:3a:8b:64:ac:97:
         d5:ee:15:df:b6:01:e9:c5:1f:d6:33:c2:4c:3c:f2:40:f8:ea:
         a8:eb:1e:db:9a:93:40:d8:67:c4:18:80:a8:92:72:dd:5d:6c:
         46:f6:99:56:f3:6a:ff:d8:ca:89:70:c4:15:d4:8a:57:e1:c0:
         7a:76:90:40:ca:74:48:7c:21:87:c5:71:4e:1f:91:c2:c4:d0:
         9b:2f:20:87:c6:84:76:e1:c0:bd:53:f3:5a:95:0f:6b:db:f6:
         73:01:e5:72:e3:5f:0c:dd:e4:c0:40:b8:eb:3e:4a:fd:c5:df:
         a2:ca:cd:c3:f0:08:13:f0:5b:4f:49:01:58:26:48:e9:01:82:
         a1:6b:7e:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYQ7yqAmh9ucReceEIqGPZXYAKWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMjlaFw0yNDEwMDgxMzU3MjlaMDMxMTAvBgNV
BAMTKEMzNTQ1ODRDRTQwQkRBMjA4RTZEMUE4QzlDRkY0QTAxMkI2OTY3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FAIpM8N/EvxGc1En8OKWFgjs
nPlIar9v2Zeif8EfwRWt82ywrXcSkGxDq2zU1SDQiUpZ2uUXAJiDqIsA7rR7IXRq
TrG+PnNGz0yqHtNUURDFRct/g2p0irpOXdGgJEzJE1PbGNw5FdBznqmL7vUSem8M
7eiJtRfmZoUexEgYYxvLiIE2kMKNjd36hc29/5YiQ1Bj1iR/O+ElIa4OCteQ0Nbs
r+uxNCxRa7210eQAwb4kuwALQWXSNGqhmrmTJXtPHNbS0eBtNSsTBclP10KuIYZs
4aIWzsay2iLZcvDjM7ct9FEaE2fkwvRaSQYJi4HmJpfzTjt4YxXA7rA8f2z9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw1RYTOQL2iCObRqMnP9KAStpZwwwHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzNzM3MmUzMzM3MmUzMTMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJXMwDQYJKoZIhvcNAQELBQADggEBAD4jikjr
XX2OiIjh8fHJv3eJ2QPR/qvz4MvA7RiEufT/j5DNAZKn8zuz43MUliZCLsJltewF
LtkI+bdsMoSNb2zJhmrZW8Z8x1icIuf1Wk6lIYtjVE9VpLQSRbfOVLLVgrfhNu7f
fR47FVebHN1khL7XB0toITFbIjY6i2Ssl9XuFd+2AenFH9Yzwkw88kD46qjrHtua
k0DYZ8QYgKiSct1dbEb2mVbzav/YyolwxBXUilfhwHp2kEDKdEh8IYfFcU4fkcLE
0JsvIIfGhHbhwL1T81qVD2vb9nMB5XLjXwzd5MBAuOs+Sv3F36LKzcPwCBPwW09J
AVgmSOkBgqFrfqY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:23:58 2025 by rpki-client