Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
File:                     3137372e33392e37322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          SofYKGhDFHhejir6q5kOHq/gjkCexBKtUywv7TjdW7w=
Subject key identifier:   70:A3:0A:13:7B:20:06:AE:42:44:9B:CC:CE:0E:3C:3F:DA:71:F0:D4
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       0158C6DBD3216A384CB25492B5BEEC1843749BBD
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     52977
IP address blocks:        177.39.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:58:c6:db:d3:21:6a:38:4c:b2:54:92:b5:be:ec:18:43:74:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=70A30A137B2006AE42449BCCCE0E3C3FDA71F0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:d3:86:1c:7f:be:67:0c:80:b2:c4:95:d9:
                    9f:6a:b0:91:3f:b9:e2:3b:8d:26:97:52:5e:e1:70:
                    e1:b0:84:4d:5d:25:33:9c:ca:ef:3e:52:a1:83:73:
                    e0:5e:16:9d:4e:36:4b:af:0f:e6:fe:7c:07:e6:2d:
                    bd:4f:a5:ae:45:57:a6:01:d4:08:1a:47:2d:20:61:
                    fd:9a:7d:a1:f1:d5:cb:a1:b2:52:72:bb:d1:51:ee:
                    e1:07:e0:2c:5b:1d:de:a3:fd:88:3c:a8:c9:03:56:
                    7e:70:4d:74:44:69:ac:2d:8e:08:ab:ba:4a:1e:a7:
                    7a:09:40:f0:7b:32:1f:1a:43:5a:2b:39:f5:05:1e:
                    94:8f:a3:cd:f0:85:17:67:d4:d3:9e:c9:f9:83:74:
                    b2:7c:4a:75:04:dd:16:96:ca:b1:17:a5:46:96:f6:
                    c9:85:2e:38:86:f7:07:5e:b4:8f:0b:f4:36:46:b4:
                    09:d9:47:31:28:5f:4a:87:7c:dc:88:9e:14:ec:a7:
                    c4:a5:e4:97:c0:6a:1f:66:70:3f:4d:9d:83:6e:ef:
                    20:7e:48:10:94:c9:c4:2f:af:36:d3:1c:6c:63:57:
                    e6:c6:f8:f5:4d:2a:b6:b4:c2:8b:2a:2f:d9:ea:c7:
                    b9:dc:af:80:e5:fd:22:ff:11:58:40:a8:d4:b6:40:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A3:0A:13:7B:20:06:AE:42:44:9B:CC:CE:0E:3C:3F:DA:71:F0:D4
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:71:1d:c0:c8:6c:04:00:46:79:3e:7e:e1:f0:b7:56:82:
         8b:22:0d:c3:24:88:f8:59:82:ff:05:ac:72:49:f1:6e:30:1c:
         81:e9:6f:53:12:8b:f8:f0:fe:84:b2:9c:74:1c:e1:fc:34:61:
         ea:e3:cc:b6:1a:67:2b:0e:35:89:8e:fb:97:7d:22:ae:3a:57:
         d5:36:ff:3b:51:2e:8f:ab:a2:4a:4e:e1:8e:4b:ce:74:c6:43:
         e3:62:53:67:1e:8f:2c:fb:6d:61:26:2a:fc:af:c8:e7:32:b0:
         41:9c:fd:72:96:fd:b7:57:a4:39:4c:c9:5d:97:aa:dd:8b:f4:
         04:81:18:93:03:5d:58:68:a4:22:81:2e:5e:d8:23:4e:26:4c:
         34:af:1c:b3:c5:7d:f7:36:6e:59:3c:9a:c1:1e:01:e2:d3:67:
         31:8c:95:aa:ad:ce:bc:c2:a0:f1:61:b2:61:bb:08:ea:da:b2:
         ca:41:a8:0d:83:fd:cf:8c:2f:84:80:4c:65:df:fa:68:a9:19:
         77:99:af:c9:99:f9:b3:fb:63:e7:75:13:17:e8:65:86:31:83:
         b3:fe:d7:04:3c:4e:f2:ed:67:58:6f:15:36:81:70:91:1f:71:
         09:4d:39:03:e6:89:17:55:58:92:e0:90:de:6e:6c:e1:70:89:
         a6:c9:28:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAVjG29MhajhMslSStb7sGEN0m70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMDMxMTAvBgNV
BAMTKDcwQTMwQTEzN0IyMDA2QUU0MjQ0OUJDQ0NFMEUzQzNGREE3MUYwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9tOGHH++ZwyAssSV2Z9qsJE/
ueI7jSaXUl7hcOGwhE1dJTOcyu8+UqGDc+BeFp1ONkuvD+b+fAfmLb1Ppa5FV6YB
1AgaRy0gYf2afaHx1cuhslJyu9FR7uEH4CxbHd6j/Yg8qMkDVn5wTXREaawtjgir
ukoep3oJQPB7Mh8aQ1orOfUFHpSPo83whRdn1NOeyfmDdLJ8SnUE3RaWyrEXpUaW
9smFLjiG9wdetI8L9DZGtAnZRzEoX0qHfNyInhTsp8Sl5JfAah9mcD9NnYNu7yB+
SBCUycQvrzbTHGxjV+bG+PVNKra0wosqL9nqx7ncr4Dl/SL/EVhAqNS2QFtRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcKMKE3sgBq5CRJvMzg48P9px8NQwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzM3MmUzMzM5MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArEnSDANBgkqhkiG9w0BAQsFAAOCAQEAAN1xHcDIbAQA
Rnk+fuHwt1aCiyINwySI+FmC/wWscknxbjAcgelvUxKL+PD+hLKcdBzh/DRh6uPM
thpnKw41iY77l30irjpX1Tb/O1Euj6uiSk7hjkvOdMZD42JTZx6PLPttYSYq/K/I
5zKwQZz9cpb9t1ekOUzJXZeq3Yv0BIEYkwNdWGikIoEuXtgjTiZMNK8cs8V99zZu
WTyawR4B4tNnMYyVqq3OvMKg8WGyYbsI6tqyykGoDYP9z4wvhIBMZd/6aKkZd5mv
yZn5s/tj53UTF+hlhjGDs/7XBDxO8u1nWG8VNoFwkR9xCU05A+aJF1VYkuCQ3m5s
4XCJpskoHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:37 2025 by rpki-client