Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          bxOlns3n1B2i5ubnScVkWi8t0FBA5dM+10rMRRtrFdI=
Subject key identifier:   B4:97:C6:C6:1B:55:D4:40:8E:AC:3A:D1:2D:77:B7:5F:52:21:91:2B
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       537F08FC6236FAEE3C4E87FC742028881B64348F
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:08:fc:62:36:fa:ee:3c:4e:87:fc:74:20:28:88:1b:64:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=B497C6C61B55D4408EAC3AD12D77B75F5221912B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:ff:9e:bb:b3:09:d0:8c:19:28:71:b5:6b:
                    a1:62:51:85:de:86:1f:f9:5c:b7:9b:2c:4a:4c:92:
                    d2:79:06:cf:df:c8:a1:7d:c1:94:f0:12:9b:e2:f6:
                    93:ad:7b:23:ba:5c:14:47:eb:0f:de:76:47:57:f4:
                    fa:07:e4:9d:2d:1e:38:48:37:bb:6d:f1:77:70:ca:
                    cc:89:d1:a8:95:0c:ad:06:88:d4:8c:c3:aa:e8:1c:
                    4e:e4:a4:01:88:57:2f:0c:1d:fe:34:71:82:55:7e:
                    a7:cc:9d:9f:98:d4:ae:67:f8:99:e0:a7:e5:ed:70:
                    69:15:e9:96:3a:67:10:51:1a:da:72:6b:09:8c:ab:
                    fd:62:c1:3c:6e:e1:44:57:d2:e3:6a:3f:af:f8:85:
                    fb:fe:72:ed:3d:bc:e6:84:cd:9b:8f:52:79:f5:09:
                    0d:8f:4a:ba:4f:bd:2b:9d:9f:4f:6e:5b:fe:20:d4:
                    6c:3c:56:8e:ef:14:6f:3c:c8:eb:7d:9c:dc:5c:f1:
                    9e:0f:62:2b:c3:77:9c:5d:8b:23:29:27:29:3c:e6:
                    8d:d2:c0:74:aa:6e:33:25:aa:b6:b3:d7:04:69:36:
                    11:79:17:87:59:72:bc:c6:77:57:c2:00:cd:19:9d:
                    15:d6:c7:82:b6:a4:9f:9e:c5:58:be:2d:44:b7:3b:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:97:C6:C6:1B:55:D4:40:8E:AC:3A:D1:2D:77:B7:5F:52:21:91:2B
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:99:63:7a:29:7d:76:26:48:e9:c3:bb:72:a6:91:67:7a:fe:
         9f:22:1e:02:dc:f2:f7:3c:29:76:57:5f:4a:e3:66:4f:95:02:
         39:dd:0a:76:9d:fd:73:aa:f4:79:ca:78:d6:b9:fa:3d:ac:5a:
         9f:e5:fd:72:b9:1b:d8:ad:db:aa:4e:a0:04:67:c7:cc:a5:35:
         89:33:52:9b:e9:4b:4f:aa:78:45:19:a0:46:ba:f7:66:68:49:
         0c:a3:c3:e9:9b:4b:bf:91:6f:f1:c3:7a:d1:84:0f:8b:69:03:
         79:de:c6:49:8f:5d:db:87:27:9b:9f:2f:16:a5:b5:17:23:ef:
         33:fb:81:4b:9e:7a:af:05:7c:ed:03:d6:e7:57:6e:51:01:0b:
         06:06:29:d6:ed:29:20:94:12:f9:70:06:75:79:ae:35:81:d0:
         b8:4e:f3:14:4a:c6:7e:10:54:ab:17:13:c2:25:1a:92:39:42:
         9d:c7:5e:1e:1c:fd:62:57:52:62:4d:2b:82:97:5e:80:26:5f:
         b1:26:52:c1:7c:46:50:b5:f3:29:60:6b:98:3c:5e:de:de:3b:
         9b:af:ba:e7:e7:8c:84:4f:9b:f4:d2:44:11:ab:04:ea:8d:50:
         d2:6b:27:5b:1d:86:2c:c2:c5:98:a2:bb:69:4c:35:86:af:8f:
         f2:11:07:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU38I/GI2+u48Tof8dCAoiBtkNI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzlaFw0yNDEyMzEyMTE2MzlaMDMxMTAvBgNV
BAMTKEI0OTdDNkM2MUI1NUQ0NDA4RUFDM0FEMTJENzdCNzVGNTIyMTkxMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3f+eu7MJ0IwZKHG1a6FiUYXe
hh/5XLebLEpMktJ5Bs/fyKF9wZTwEpvi9pOteyO6XBRH6w/edkdX9PoH5J0tHjhI
N7tt8XdwysyJ0aiVDK0GiNSMw6roHE7kpAGIVy8MHf40cYJVfqfMnZ+Y1K5n+Jng
p+XtcGkV6ZY6ZxBRGtpyawmMq/1iwTxu4URX0uNqP6/4hfv+cu09vOaEzZuPUnn1
CQ2PSrpPvSudn09uW/4g1Gw8Vo7vFG88yOt9nNxc8Z4PYivDd5xdiyMpJyk85o3S
wHSqbjMlqraz1wRpNhF5F4dZcrzGd1fCAM0ZnRXWx4K2pJ+exVi+LUS3O8zHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtJfGxhtV1ECOrDrRLXe3X1IhkSswHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGayDANBgkqhkiG9w0BAQsFAAOCAQEAnJlj
eil9diZI6cO7cqaRZ3r+nyIeAtzy9zwpdldfSuNmT5UCOd0Kdp39c6r0ecp41rn6
Paxan+X9crkb2K3bqk6gBGfHzKU1iTNSm+lLT6p4RRmgRrr3ZmhJDKPD6ZtLv5Fv
8cN60YQPi2kDed7GSY9d24cnm58vFqW1FyPvM/uBS556rwV87QPW51duUQELBgYp
1u0pIJQS+XAGdXmuNYHQuE7zFErGfhBUqxcTwiUakjlCncdeHhz9YldSYk0rgpde
gCZfsSZSwXxGULXzKWBrmDxe3t47m6+65+eMhE+b9NJEEasE6o1Q0msnWx2GLMLF
mKK7aUw1hq+P8hEHvA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:00 2025 by rpki-client