Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132322e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3132322e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          ItLJTdSDxID7O5PJVpLv+zb3QQ0hy14/6u1c9HlM5Fw=
Subject key identifier:   04:33:8F:6A:A4:68:BD:CE:D0:4F:B1:C7:DF:81:66:42:09:C6:10:A6
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       62580B40FD65722B14CECBB13A3519AEC3727FFF
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132322e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:29 +0000
ROA not before:           Tue 10 Oct 2023 13:52:29 +0000
ROA not after:            Tue 08 Oct 2024 13:57:29 +0000
asID:                     262808
IP address blocks:        177.37.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:0b:40:fd:65:72:2b:14:ce:cb:b1:3a:35:19:ae:c3:72:7f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:29 2023 GMT
            Not After : Oct  8 13:57:29 2024 GMT
        Subject: CN=04338F6AA468BDCED04FB1C7DF81664209C610A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:a5:11:22:bf:89:4a:60:21:28:85:df:0a:
                    74:e4:d8:9b:b0:66:de:40:8d:55:cc:01:2f:26:39:
                    b2:3a:a8:b3:b7:51:69:4b:e6:b6:b8:3e:f4:34:41:
                    76:13:d9:66:8d:c3:51:a4:4a:0f:13:fd:8b:7a:8d:
                    10:ba:be:f4:c4:96:d5:1f:9f:ea:40:5f:6f:8c:ca:
                    5d:02:16:be:b1:1d:4f:79:07:bd:ab:c8:54:53:a7:
                    d6:5a:9d:4a:f0:e0:2c:9e:e3:6a:16:92:97:5a:95:
                    88:1b:f6:95:07:95:97:c9:1d:56:92:3f:b3:62:31:
                    d2:65:fc:26:53:51:10:f7:f4:ea:5d:86:e7:66:f9:
                    a6:a8:02:89:b0:06:d2:51:85:0f:f5:c3:46:f0:36:
                    ca:41:e9:65:4b:8f:56:b0:70:0a:19:79:a9:ec:f3:
                    9a:88:3b:88:64:42:92:d2:b9:c1:76:d5:d7:a6:5e:
                    09:cf:e4:e6:af:1e:a1:cc:1d:ad:43:66:80:5a:b9:
                    02:76:23:ee:f9:e1:a7:ab:ed:44:aa:64:1b:cb:c9:
                    1a:61:2c:37:67:c9:95:18:56:4e:2d:c8:7b:43:4b:
                    98:6c:6e:69:e4:d4:fe:52:46:48:a8:27:dc:b4:dc:
                    e7:23:95:ec:91:15:f7:b6:5f:82:ef:46:92:c8:55:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:33:8F:6A:A4:68:BD:CE:D0:4F:B1:C7:DF:81:66:42:09:C6:10:A6
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132322e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:88:b5:6d:7d:ab:bf:b0:20:7c:09:cb:ac:7e:a4:b7:70:
         86:0b:76:f2:34:5a:0f:d9:ea:ed:94:5b:59:a5:b5:d2:7d:e9:
         2d:22:dc:17:d6:10:a3:22:26:d4:c2:aa:70:2f:12:b4:38:c1:
         08:f1:0c:a5:f0:66:87:31:ad:5c:e6:16:b6:a7:4c:d1:81:ba:
         47:7f:40:8b:c6:f0:50:cc:43:7a:13:84:2b:ce:91:95:54:97:
         f6:0e:d9:ce:84:fc:2a:8a:50:79:05:d9:45:50:d5:55:fc:3a:
         d0:d7:76:08:67:ba:82:4a:90:3c:ef:dc:a4:c6:dd:8d:39:34:
         e6:40:41:84:1b:c0:7c:e5:6e:d7:a0:2d:84:c1:bd:e7:b3:90:
         ce:f8:6b:d8:4a:6e:40:8a:1b:d0:2e:98:9b:0e:07:e4:98:e9:
         08:bd:68:03:1d:c9:1a:0b:c9:78:51:29:ae:fa:d7:61:17:e4:
         43:88:cb:ce:12:79:a3:ef:bc:88:d7:a2:41:b8:58:5a:6d:d1:
         2a:42:60:6e:7e:33:fa:b0:b5:ce:3d:8f:f2:13:e1:dc:9e:e9:
         86:2d:6d:5e:eb:9b:cb:89:32:e7:aa:71:c6:ac:73:db:97:ce:
         4b:e0:3e:13:35:8e:e1:5d:66:8b:a4:d9:13:6a:c8:6b:9c:cc:
         5b:a4:7f:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYlgLQP1lcisUzsuxOjUZrsNyf/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMjlaFw0yNDEwMDgxMzU3MjlaMDMxMTAvBgNV
BAMTKDA0MzM4RjZBQTQ2OEJEQ0VEMDRGQjFDN0RGODE2NjQyMDlDNjEwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/qURIr+JSmAhKIXfCnTk2Juw
Zt5AjVXMAS8mObI6qLO3UWlL5ra4PvQ0QXYT2WaNw1GkSg8T/Yt6jRC6vvTEltUf
n+pAX2+Myl0CFr6xHU95B72ryFRTp9ZanUrw4Cye42oWkpdalYgb9pUHlZfJHVaS
P7NiMdJl/CZTURD39Opdhudm+aaoAomwBtJRhQ/1w0bwNspB6WVLj1awcAoZeans
85qIO4hkQpLSucF21demXgnP5OavHqHMHa1DZoBauQJ2I+754aer7USqZBvLyRph
LDdnyZUYVk4tyHtDS5hsbmnk1P5SRkioJ9y03OcjleyRFfe2X4LvRpLIVaSBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBDOPaqRovc7QT7HH34FmQgnGEKYwHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzNzM3MmUzMzM3MmUzMTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJXowDQYJKoZIhvcNAQELBQADggEBADGNiLVt
fau/sCB8CcusfqS3cIYLdvI0Wg/Z6u2UW1mltdJ96S0i3BfWEKMiJtTCqnAvErQ4
wQjxDKXwZocxrVzmFranTNGBukd/QIvG8FDMQ3oThCvOkZVUl/YO2c6E/CqKUHkF
2UVQ1VX8OtDXdghnuoJKkDzv3KTG3Y05NOZAQYQbwHzlbtegLYTBveezkM74a9hK
bkCKG9AumJsOB+SY6Qi9aAMdyRoLyXhRKa7612EX5EOIy84SeaPvvIjXokG4WFpt
0SpCYG5+M/qwtc49j/IT4dye6YYtbV7rm8uJMueqccasc9uXzkvgPhM1juFdZouk
2RNqyGuczFukf7Y=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:38 2025 by rpki-client