Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35392e302f32342d3234203d3e20323632353838.roa
File:                     3137372e37352e35392e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          PWdbrg46v9ZMK5w7t5UqYHsknd4tNfuazzum1hbznlc=
Subject key identifier:   9C:5E:34:F6:66:2F:C4:4F:DE:7E:AC:F6:BE:CE:02:1C:C0:7B:FA:9C
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       31BE2928342857F8A718D1568F126A45933BAF2D
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35392e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:21:16 +0000
ROA not before:           Sat 09 Apr 2022 14:16:16 +0000
ROA not after:            Sat 08 Apr 2023 14:21:16 +0000
asID:                     262588
IP address blocks:        177.75.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:be:29:28:34:28:57:f8:a7:18:d1:56:8f:12:6a:45:93:3b:af:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:16:16 2022 GMT
            Not After : Apr  8 14:21:16 2023 GMT
        Subject: CN=9C5E34F6662FC44FDE7EACF6BECE021CC07BFA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:89:c2:d8:ce:34:6b:e5:96:84:0e:80:86:
                    b8:61:cd:3e:05:88:8d:dc:43:a2:4b:a5:b0:17:33:
                    4e:12:37:63:e0:87:39:e0:3e:5a:05:e8:ff:c3:6a:
                    24:1c:e8:19:3a:64:ce:7d:7b:3f:35:e9:24:78:8d:
                    32:f6:57:85:25:fb:aa:6a:4b:36:6c:fc:4e:18:eb:
                    ca:41:e8:2f:97:06:65:27:df:06:15:4d:7a:e4:77:
                    94:fd:ab:10:ae:b9:bc:71:a0:e6:e4:70:a4:75:51:
                    e9:bf:91:be:ad:4b:5a:cf:36:0b:74:d6:2a:e0:1a:
                    e1:16:e7:33:5a:2f:9c:69:d8:c2:83:8d:8c:28:c5:
                    90:83:fa:83:93:49:55:78:57:aa:83:ab:51:6b:29:
                    ca:82:b2:ab:78:22:79:f5:7c:1e:25:32:52:30:47:
                    38:8c:ee:01:8b:4a:1c:59:10:4f:15:15:84:0f:db:
                    5c:96:37:7a:4e:37:86:ad:ef:b0:a7:1d:cd:19:5b:
                    4c:d7:ba:18:12:19:3f:47:ab:bc:bd:ff:b1:e5:c1:
                    6e:ce:a9:a5:52:95:f3:71:fd:f1:69:41:9a:14:25:
                    79:f4:90:83:b7:15:cf:54:7c:4c:6e:99:03:f1:66:
                    45:b8:03:7f:b7:89:0d:e9:74:eb:4f:b2:a4:d7:33:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:34:F6:66:2F:C4:4F:DE:7E:AC:F6:BE:CE:02:1C:C0:7B:FA:9C
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35392e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:67:4f:e8:9d:c1:3b:7a:a5:7c:a9:c3:b6:d9:b8:dd:72:
         95:e3:47:69:2d:1e:5f:59:e9:0b:8b:66:d7:1c:7b:c9:d4:5c:
         7a:0f:bd:11:79:43:c1:7e:d4:28:d3:1b:a8:90:97:14:c9:97:
         d4:ff:92:4d:17:18:34:ba:4d:df:f4:6b:f3:70:b4:54:44:d4:
         61:55:af:88:b3:98:6e:ca:96:b5:4f:19:1c:6c:6c:75:72:c3:
         14:01:cb:31:e5:bc:97:7a:b4:88:a2:61:a1:e1:a6:c3:ad:ab:
         2b:b6:5f:6e:b5:71:69:6c:ac:c5:ca:75:93:13:38:26:5e:67:
         9c:f1:4c:a8:f2:38:af:53:5d:43:ec:05:30:5e:e3:8b:ee:99:
         85:83:3b:65:bc:02:44:7e:7b:be:2c:1c:4f:d2:46:7f:93:96:
         b6:01:d8:d9:73:02:71:c9:c7:43:c2:88:da:dd:cf:05:59:dd:
         6f:74:cb:7c:e6:12:45:34:9d:70:70:c4:56:ec:16:19:0b:4e:
         d6:b6:75:31:14:7f:bd:0d:b8:ec:37:91:bf:df:0d:cc:62:bb:
         3c:2c:36:ca:af:d5:3a:3b:95:65:61:22:17:af:d0:45:b8:32:
         57:7d:20:3f:a6:44:2e:b1:33:4d:8e:8a:56:ee:31:be:50:38:
         05:54:50:9b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMb4pKDQoV/inGNFWjxJqRZM7ry0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMjA0MDkxNDE2MTZaFw0yMzA0MDgxNDIxMTZaMDMxMTAvBgNV
BAMTKDlDNUUzNEY2NjYyRkM0NEZERTdFQUNGNkJFQ0UwMjFDQzA3QkZBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xonC2M40a+WWhA6AhrhhzT4F
iI3cQ6JLpbAXM04SN2PghzngPloF6P/DaiQc6Bk6ZM59ez816SR4jTL2V4Ul+6pq
SzZs/E4Y68pB6C+XBmUn3wYVTXrkd5T9qxCuubxxoObkcKR1Uem/kb6tS1rPNgt0
1irgGuEW5zNaL5xp2MKDjYwoxZCD+oOTSVV4V6qDq1FrKcqCsqt4Inn1fB4lMlIw
RziM7gGLShxZEE8VFYQP21yWN3pON4at77CnHc0ZW0zXuhgSGT9Hq7y9/7HlwW7O
qaVSlfNx/fFpQZoUJXn0kIO3Fc9UfExumQPxZkW4A3+3iQ3pdOtPsqTXM8zNAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUnF409mYvxE/efqz2vs4CHMB7+pwwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz
NzM3MmUzNzM1MmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsUs7MA0GCSqGSIb3DQEBCwUAA4IBAQAtmWdP6J3BO3ql
fKnDttm43XKV40dpLR5fWekLi2bXHHvJ1Fx6D70ReUPBftQo0xuokJcUyZfU/5JN
Fxg0uk3f9GvzcLRURNRhVa+Is5huypa1TxkcbGx1csMUAcsx5byXerSIomGh4abD
rasrtl9utXFpbKzFynWTEzgmXmec8Uyo8jivU11D7AUwXuOL7pmFgztlvAJEfnu+
LBxP0kZ/k5a2AdjZcwJxycdDwoja3c8FWd1vdMt85hJFNJ1wcMRW7BYZC07WtnUx
FH+9DbjsN5G/3w3MYrs8LDbKr9U6O5VlYSIXr9BFuDJXfSA/pkQusTNNjopW7jG+
UDgFVFCb
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:59 2025 by rpki-client