Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132342e302f32342d3234203d3e20323632383038.roa
File:                     3137372e33372e3132342e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          7yykT/RsapIaEhFBY1QF2HPuQ+3X6xajcNxgV0CYtuQ=
Subject key identifier:   CB:9F:D1:BC:B9:35:1B:8A:0B:66:07:BB:A9:4A:76:53:6F:B0:53:CA
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       77B0704A64DA6B4653B171FFEC88956432D51DF4
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132342e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:28 +0000
ROA not before:           Tue 10 Oct 2023 13:52:28 +0000
ROA not after:            Tue 08 Oct 2024 13:57:28 +0000
asID:                     262808
IP address blocks:        177.37.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:70:4a:64:da:6b:46:53:b1:71:ff:ec:88:95:64:32:d5:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:28 2023 GMT
            Not After : Oct  8 13:57:28 2024 GMT
        Subject: CN=CB9FD1BCB9351B8A0B6607BBA94A76536FB053CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:7a:ae:66:3e:a1:42:ec:3d:c5:e2:5b:de:
                    4d:59:13:04:db:62:05:9c:44:f9:1a:c1:c8:ad:92:
                    91:69:5d:9a:bf:21:0b:b8:a2:39:cd:b7:9e:fa:c0:
                    a1:f3:19:54:a5:3d:a8:49:71:04:45:dc:bf:7d:62:
                    0b:e3:10:9f:80:13:75:cb:11:5a:12:4a:c5:96:64:
                    63:d6:51:46:b7:ef:41:6a:9b:e8:07:a9:29:52:3d:
                    2f:df:aa:b6:32:42:9f:10:33:6c:39:7f:b2:c0:18:
                    2f:ee:e0:4e:5f:84:70:5d:62:3b:46:ad:11:35:b1:
                    8a:73:53:bd:f8:45:66:9e:fa:74:d5:02:bc:09:c0:
                    aa:c9:ef:46:21:6f:b0:f9:c1:8a:b5:03:31:e6:b8:
                    45:b6:b8:37:1a:ad:56:6d:e7:1a:6a:14:21:43:9f:
                    5c:db:cc:15:c3:df:8f:5e:18:0d:74:15:1b:f2:da:
                    b0:ba:46:39:f6:f6:59:10:2d:2e:ec:d9:33:72:4a:
                    74:29:78:ff:06:77:66:15:2c:29:59:64:fc:58:9d:
                    8b:3b:e9:a7:d8:63:21:4c:e3:42:47:b3:ba:02:b8:
                    c1:c6:d9:58:dd:a4:36:ad:9c:cf:26:96:94:df:36:
                    25:b0:b6:c1:b7:16:a4:89:6f:60:f1:7b:a6:00:bb:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:D1:BC:B9:35:1B:8A:0B:66:07:BB:A9:4A:76:53:6F:B0:53:CA
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3132342e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:7a:df:a3:cc:3f:05:d0:a3:ff:54:17:39:3e:4d:9e:84:
         d6:93:7a:c4:7b:8c:a3:d1:10:4f:bb:55:1f:89:7b:a2:d3:d8:
         13:d6:f9:4f:54:f8:09:bf:8f:94:d4:06:92:a5:c0:bd:a2:e7:
         26:5e:9e:bc:18:13:e8:25:81:b3:2f:1b:c2:ca:0b:e6:c3:06:
         f4:ae:38:e8:b4:79:c1:cc:ca:b7:2a:d2:b2:2f:d9:26:19:6f:
         e6:d0:34:6b:8a:a3:18:f6:65:45:5a:4e:0d:27:42:c0:67:c0:
         23:d7:88:c3:22:3e:93:bc:e5:32:8b:77:a7:c8:18:b9:20:47:
         21:25:e7:78:36:a1:3d:ca:8e:71:8e:2b:d7:d5:76:44:92:9e:
         f1:1f:0e:e6:f2:6f:01:13:a3:3f:5a:96:ad:ed:88:36:4c:af:
         df:b0:7c:5a:db:2f:6c:b4:96:65:2c:8f:7c:8a:89:05:57:c9:
         3a:be:71:a7:80:8c:dc:49:5e:d6:cc:7e:a7:c2:e2:00:dc:d8:
         c0:4c:ee:8e:b2:6d:b3:d3:51:28:34:b5:c5:37:59:51:8d:e5:
         c4:a3:3f:a0:48:3e:02:4a:c8:e4:47:2d:44:d1:1f:93:35:cf:
         dc:63:dc:64:47:13:73:0a:56:45:a0:b9:83:61:bd:53:a1:1d:
         0c:e3:d7:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd7BwSmTaa0ZTsXH/7IiVZDLVHfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMjhaFw0yNDEwMDgxMzU3MjhaMDMxMTAvBgNV
BAMTKENCOUZEMUJDQjkzNTFCOEEwQjY2MDdCQkE5NEE3NjUzNkZCMDUzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICnquZj6hQuw9xeJb3k1ZEwTb
YgWcRPkawcitkpFpXZq/IQu4ojnNt576wKHzGVSlPahJcQRF3L99YgvjEJ+AE3XL
EVoSSsWWZGPWUUa370Fqm+gHqSlSPS/fqrYyQp8QM2w5f7LAGC/u4E5fhHBdYjtG
rRE1sYpzU734RWae+nTVArwJwKrJ70Yhb7D5wYq1AzHmuEW2uDcarVZt5xpqFCFD
n1zbzBXD349eGA10FRvy2rC6Rjn29lkQLS7s2TNySnQpeP8Gd2YVLClZZPxYnYs7
6afYYyFM40JHs7oCuMHG2VjdpDatnM8mlpTfNiWwtsG3FqSJb2Dxe6YAuwVRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy5/RvLk1G4oLZge7qUp2U2+wU8owHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzNzM3MmUzMzM3MmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJXwwDQYJKoZIhvcNAQELBQADggEBAET1et+j
zD8F0KP/VBc5Pk2ehNaTesR7jKPREE+7VR+Je6LT2BPW+U9U+Am/j5TUBpKlwL2i
5yZenrwYE+glgbMvG8LKC+bDBvSuOOi0ecHMyrcq0rIv2SYZb+bQNGuKoxj2ZUVa
Tg0nQsBnwCPXiMMiPpO85TKLd6fIGLkgRyEl53g2oT3KjnGOK9fVdkSSnvEfDuby
bwEToz9alq3tiDZMr9+wfFrbL2y0lmUsj3yKiQVXyTq+caeAjNxJXtbMfqfC4gDc
2MBM7o6ybbPTUSg0tcU3WVGN5cSjP6BIPgJKyORHLUTRH5M1z9xj3GRHE3MKVkWg
uYNhvVOhHQzj1yk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:45:32 2025 by rpki-client