Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32362e302f32342d3234203d3e20323731303532.roa
File:                     3137372e33362e32362e302f32342d3234203d3e20323731303532.roa (raw, json)
Hash identifier:          oU3015D9RO2GM38yvTsKqbBXZ05JvEMSDyHZtxrGkqw=
Subject key identifier:   B4:79:FD:5C:13:A9:47:B9:A8:0C:ED:5D:A1:F6:05:74:91:B9:72:E7
Certificate issuer:       /CN=8A85A2B696265963D003C217E5D0C15821D5B028
Certificate serial:       68CA8BCF050BDE527E33D522F7B50D6525BE9A50
Authority key identifier: 8A:85:A2:B6:96:26:59:63:D0:03:C2:17:E5:D0:C1:58:21:D5:B0:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A85A2B696265963D003C217E5D0C15821D5B028.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32362e302f32342d3234203d3e20323731303532.roa
Signing time:             Sat 16 Jul 2022 21:38:31 +0000
ROA not before:           Sat 16 Jul 2022 21:33:31 +0000
ROA not after:            Sat 15 Jul 2023 21:38:31 +0000
asID:                     271052
IP address blocks:        177.36.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ca:8b:cf:05:0b:de:52:7e:33:d5:22:f7:b5:0d:65:25:be:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A85A2B696265963D003C217E5D0C15821D5B028
        Validity
            Not Before: Jul 16 21:33:31 2022 GMT
            Not After : Jul 15 21:38:31 2023 GMT
        Subject: CN=B479FD5C13A947B9A80CED5DA1F6057491B972E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9c:76:a2:be:24:fd:e4:d0:32:f4:e6:40:ff:
                    1b:66:73:55:1a:46:ad:07:72:50:2c:a9:94:2c:f9:
                    51:29:f1:3f:e2:8b:cf:fc:03:3b:7f:18:a3:2d:09:
                    91:4c:86:ec:ba:d0:c0:01:e5:9e:d5:68:cd:c7:7e:
                    fc:f9:50:ef:85:92:e1:00:ea:b7:f5:c1:4f:e8:14:
                    cb:55:28:36:62:f2:9b:d0:97:96:33:39:02:7e:71:
                    9f:43:cd:79:d2:98:ed:7f:c1:62:ad:e2:fb:e9:37:
                    aa:e0:ba:ec:bf:84:9f:82:61:a2:3e:5a:59:e1:a4:
                    af:7e:49:21:19:d2:fe:be:8b:0a:4d:0f:85:99:7b:
                    d0:2b:af:53:31:f9:5f:2d:ed:a4:34:3c:a5:75:54:
                    f4:d4:3e:02:22:7f:ba:9b:aa:34:27:1c:2f:5a:61:
                    ba:36:ed:79:85:72:e9:74:75:13:4e:53:9a:00:8b:
                    3d:91:de:06:bd:cd:ed:b9:8e:0a:fd:7f:3a:68:82:
                    a7:7a:79:cb:05:e2:b4:51:27:11:ec:9a:89:05:35:
                    a3:1f:2b:ee:f5:25:f8:5a:95:92:87:c9:d3:24:3f:
                    32:c4:6c:34:1f:17:8f:9f:f3:b0:2f:76:71:53:cc:
                    08:49:45:30:ad:30:e7:f2:b3:5d:1e:d5:3e:c2:e8:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:79:FD:5C:13:A9:47:B9:A8:0C:ED:5D:A1:F6:05:74:91:B9:72:E7
            X509v3 Authority Key Identifier:
                keyid:8A:85:A2:B6:96:26:59:63:D0:03:C2:17:E5:D0:C1:58:21:D5:B0:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/8A85A2B696265963D003C217E5D0C15821D5B028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A85A2B696265963D003C217E5D0C15821D5B028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32362e302f32342d3234203d3e20323731303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:23:6b:c9:57:09:9a:48:b1:a2:9a:c0:03:28:0f:43:ff:39:
         d3:bd:8f:78:48:93:ed:9c:37:69:f3:a9:73:77:e6:0a:93:6e:
         de:a7:8a:ff:7a:6b:89:e3:6d:57:94:19:6f:b5:16:a3:76:0e:
         72:fc:b1:32:32:fc:3b:eb:b3:49:3f:60:55:56:35:1a:39:a6:
         9d:8e:72:ab:80:35:86:46:cf:b9:7d:68:5e:76:c7:27:5b:e6:
         4c:c6:ec:b1:b7:bc:58:ab:cb:29:6d:9d:f4:d1:40:fc:d8:7b:
         54:31:7a:0f:05:33:09:ce:a8:ba:40:97:b3:87:d1:82:01:23:
         2c:b6:ec:3c:21:13:cf:7e:9f:49:ba:4b:dd:ff:61:17:ec:f2:
         72:ce:c7:ad:d3:3c:18:2a:3b:01:7d:9e:bd:47:55:0b:cb:38:
         5b:ca:33:4d:65:80:d9:ef:b1:52:7b:d9:c9:23:80:30:08:c9:
         81:8d:2b:9a:af:55:70:bb:4b:55:4a:d5:1b:a2:01:3d:82:66:
         ac:aa:6e:d1:ec:c3:53:79:3a:84:3c:80:3a:86:65:14:7b:2c:
         f2:87:2b:9a:34:e3:ed:00:18:3f:35:a8:5b:17:fa:91:27:43:
         1d:09:76:df:8b:8c:64:bc:d5:03:38:58:28:be:b2:b2:0e:6e:
         47:f3:de:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaMqLzwUL3lJ+M9Ui97UNZSW+mlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4NUEyQjY5NjI2NTk2M0QwMDNDMjE3RTVEMEMxNTgy
MUQ1QjAyODAeFw0yMjA3MTYyMTMzMzFaFw0yMzA3MTUyMTM4MzFaMDMxMTAvBgNV
BAMTKEI0NzlGRDVDMTNBOTQ3QjlBODBDRUQ1REExRjYwNTc0OTFCOTcyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3nHaiviT95NAy9OZA/xtmc1Ua
Rq0HclAsqZQs+VEp8T/ii8/8Azt/GKMtCZFMhuy60MAB5Z7VaM3Hfvz5UO+FkuEA
6rf1wU/oFMtVKDZi8pvQl5YzOQJ+cZ9DzXnSmO1/wWKt4vvpN6rguuy/hJ+CYaI+
WlnhpK9+SSEZ0v6+iwpND4WZe9Arr1Mx+V8t7aQ0PKV1VPTUPgIif7qbqjQnHC9a
Ybo27XmFcul0dRNOU5oAiz2R3ga9ze25jgr9fzpogqd6ecsF4rRRJxHsmokFNaMf
K+71JfhalZKHydMkPzLEbDQfF4+f87AvdnFTzAhJRTCtMOfys10e1T7C6P1NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtHn9XBOpR7moDO1dofYFdJG5cucwHwYDVR0j
BBgwFoAUioWitpYmWWPQA8IX5dDBWCHVsCgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtvaXVkTVdDOUNIVXg0V1RBUUtVNTZDSnZHUFc5RzJKeTRBU1FIRDkz
TUovMC84QTg1QTJCNjk2MjY1OTYzRDAwM0MyMTdFNUQwQzE1ODIxRDVCMDI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBODVBMkI2OTYyNjU5NjNE
MDAzQzIxN0U1RDBDMTU4MjFENUIwMjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Frb2l1ZE1XQzlDSFV4NFdUQVFLVTU2Q0p2R1BXOUcySnk0QVNRSEQ5M01KLzAv
MzEzNzM3MmUzMzM2MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSQaMA0GCSqGSIb3DQEBCwUAA4IBAQBAI2vJVwma
SLGimsADKA9D/znTvY94SJPtnDdp86lzd+YKk27ep4r/emuJ421XlBlvtRajdg5y
/LEyMvw767NJP2BVVjUaOaadjnKrgDWGRs+5fWhedscnW+ZMxuyxt7xYq8spbZ30
0UD82HtUMXoPBTMJzqi6QJezh9GCASMstuw8IRPPfp9Jukvd/2EX7PJyzset0zwY
KjsBfZ69R1ULyzhbyjNNZYDZ77FSe9nJI4AwCMmBjSuar1Vwu0tVStUbogE9gmas
qm7R7MNTeTqEPIA6hmUUeyzyhyuaNOPtABg/NahbF/qRJ0MdCXbfi4xkvNUDOFgo
vrKyDm5H8956
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:27:41 2025 by rpki-client