Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3232302e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          Ds4hPugUYlxsTLcBfskcbp8aIWtqVUOzoXxsACCMsJo=
Subject key identifier:   2B:97:CC:32:82:32:76:FD:6D:E6:84:62:39:79:5E:FB:54:A1:EC:12
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       1111211CCD410174E2D7B3AD58C7C18EBFA98A54
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:21:1c:cd:41:01:74:e2:d7:b3:ad:58:c7:c1:8e:bf:a9:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=2B97CC32823276FD6DE6846239795EFB54A1EC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:43:3b:89:0a:19:d2:f5:37:fa:4e:14:d8:
                    39:79:d6:16:58:9c:b9:d9:bd:b8:7a:1e:1f:db:d9:
                    44:88:81:de:7f:72:aa:c4:da:5a:c5:72:50:94:27:
                    15:f1:98:70:c6:83:aa:a3:ef:b3:b0:df:cd:ae:a3:
                    f8:40:33:04:0b:13:8e:29:a2:70:14:79:8b:f0:ea:
                    1e:89:73:6d:4c:ba:de:2b:d7:29:7e:42:8b:aa:bf:
                    be:48:89:72:de:14:6c:4d:9d:a6:a9:fa:c7:16:b5:
                    a0:fb:52:a5:4e:bf:95:67:0d:e4:73:54:86:79:ba:
                    30:6a:ba:f2:7c:3e:98:97:93:f0:9d:df:59:d8:cd:
                    f4:35:e1:88:82:85:2d:4f:37:89:9c:94:aa:cd:dd:
                    9d:b1:91:29:31:51:73:37:d1:08:f4:b8:b7:5b:93:
                    be:2f:4c:b0:c9:de:ec:b2:e5:de:61:f9:dd:45:3b:
                    24:8e:16:9a:3a:04:ee:b5:2f:80:0c:1d:da:71:3d:
                    5c:85:76:6f:2b:78:82:ca:f4:97:8f:66:55:ee:d4:
                    f0:a7:7f:e0:3e:1e:d8:87:f4:53:22:21:81:44:01:
                    cb:4b:e2:a2:fc:ff:c8:bc:a1:cc:58:cd:a2:31:12:
                    e6:9d:30:14:c1:ff:3a:6b:be:62:b8:f0:ad:29:b4:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:CC:32:82:32:76:FD:6D:E6:84:62:39:79:5E:FB:54:A1:EC:12
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:f8:e1:84:3f:67:01:ec:0b:c9:84:92:a0:c6:56:4a:a4:
         5d:0b:b4:14:2e:fe:ca:5e:cf:f8:18:17:fb:50:1c:a1:6a:be:
         9c:2f:a6:b8:a2:9e:d6:dd:00:c0:64:24:87:72:50:4f:f3:37:
         12:17:e6:8f:5c:1f:ae:c9:f1:dd:80:85:10:c5:34:ce:41:26:
         f0:d1:60:9c:07:cd:42:d7:45:f6:78:a8:6e:4c:1d:96:f8:c8:
         88:1f:77:ab:c8:5e:6d:66:45:17:26:8a:ee:31:2e:8f:8a:4a:
         bb:a6:51:24:4a:1d:48:07:09:eb:ec:21:dc:e0:e6:d9:bc:15:
         fb:eb:5a:7c:8b:89:a9:57:49:2e:d2:57:10:b8:83:d2:fb:64:
         7b:31:0b:2f:a2:52:6c:dc:70:51:ee:4e:bd:16:42:b2:af:c8:
         a3:1b:71:89:cf:53:81:3e:67:10:19:c1:53:f9:f2:6e:8b:c6:
         ae:e2:db:4c:c2:c1:ae:d4:b4:6a:b5:71:f9:f6:86:f9:e5:38:
         93:08:80:bd:cb:ee:85:45:c8:80:ac:79:a8:7f:15:47:7e:2a:
         ec:f8:17:7d:49:ec:d0:be:12:9d:5f:9a:9e:ed:e5:f4:69:46:
         c2:74:db:10:37:10:02:69:c0:c1:e9:33:fe:23:5b:dc:0f:ea:
         30:ed:19:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEREhHM1BAXTi17OtWMfBjr+pilQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzlaFw0yNDEyMzEyMTE2MzlaMDMxMTAvBgNV
BAMTKDJCOTdDQzMyODIzMjc2RkQ2REU2ODQ2MjM5Nzk1RUZCNTRBMUVDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL0M7iQoZ0vU3+k4U2Dl51hZY
nLnZvbh6Hh/b2USIgd5/cqrE2lrFclCUJxXxmHDGg6qj77Ow382uo/hAMwQLE44p
onAUeYvw6h6Jc21Mut4r1yl+Qouqv75IiXLeFGxNnaap+scWtaD7UqVOv5VnDeRz
VIZ5ujBquvJ8PpiXk/Cd31nYzfQ14YiChS1PN4mclKrN3Z2xkSkxUXM30Qj0uLdb
k74vTLDJ3uyy5d5h+d1FOySOFpo6BO61L4AMHdpxPVyFdm8reILK9JePZlXu1PCn
f+A+HtiH9FMiIYFEActL4qL8/8i8ocxYzaIxEuadMBTB/zprvmK48K0ptAO/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUK5fMMoIydv1t5oRiOXle+1Sh7BIwHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGa3DANBgkqhkiG9w0BAQsFAAOCAQEAEuD4
4YQ/ZwHsC8mEkqDGVkqkXQu0FC7+yl7P+BgX+1AcoWq+nC+muKKe1t0AwGQkh3JQ
T/M3Ehfmj1wfrsnx3YCFEMU0zkEm8NFgnAfNQtdF9niobkwdlvjIiB93q8hebWZF
FyaK7jEuj4pKu6ZRJEodSAcJ6+wh3ODm2bwV++tafIuJqVdJLtJXELiD0vtkezEL
L6JSbNxwUe5OvRZCsq/Ioxtxic9TgT5nEBnBU/nybovGruLbTMLBrtS0arVx+faG
+eU4kwiAvcvuhUXIgKx5qH8VR34q7PgXfUns0L4SnV+anu3l9GlGwnTbEDcQAmnA
wekz/iNb3A/qMO0Z7g==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:20:21 2025 by rpki-client