Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135382e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          vFtrZj3jUkUSwGubA/9z/LWNRXykam2e6zFHEWAhvdA=
Subject key identifier:   F4:AF:71:FE:54:91:80:7F:0D:EA:8A:97:F4:4D:33:56:17:A7:A8:7E
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       2F7505169AED493C65331E28BB340E1F27A3EDA6
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:47 +0000
ROA not before:           Fri 14 Feb 2025 17:42:47 +0000
ROA not after:            Fri 13 Feb 2026 17:47:47 +0000
asID:                     52772
IP address blocks:        177.39.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:05:16:9a:ed:49:3c:65:33:1e:28:bb:34:0e:1f:27:a3:ed:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:47 2025 GMT
            Not After : Feb 13 17:47:47 2026 GMT
        Subject: CN=F4AF71FE5491807F0DEA8A97F44D335617A7A87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:31:b6:63:cd:62:ff:b3:f0:83:d8:14:56:
                    5f:b5:ea:50:d9:87:e2:dd:fc:60:e0:f6:39:86:2e:
                    b8:96:49:01:77:95:21:18:67:52:e0:3e:85:38:fd:
                    bf:55:ab:65:8f:c5:db:17:55:26:52:68:50:92:09:
                    d4:84:cd:72:30:e6:5b:51:91:78:6f:f3:51:59:77:
                    70:b5:b5:24:0f:c9:e2:e2:ad:a9:cb:cc:3d:4a:96:
                    e5:19:7d:c2:2c:57:2f:22:03:b5:95:4d:9c:2a:88:
                    4e:fa:0a:e5:79:68:d6:32:47:88:2b:cb:50:4b:e6:
                    8e:c3:01:1c:4e:f4:9b:08:85:5d:55:0d:27:8c:2b:
                    29:c9:75:67:dc:a3:cd:e0:c4:01:00:2c:cb:3a:4d:
                    c3:be:fa:fc:4b:f1:a1:0c:29:8b:c8:6c:e5:93:d1:
                    2e:2f:4f:7b:eb:30:ff:c8:6d:b0:63:fa:9e:f3:2f:
                    11:91:68:1f:01:6e:db:38:68:93:47:4d:8f:0d:49:
                    1d:c9:aa:45:11:24:9a:a7:81:3b:83:5a:68:26:2d:
                    47:bb:1c:28:55:9e:35:31:9d:59:e1:fe:29:ea:2e:
                    ad:02:1c:ff:6d:18:97:6f:7e:e0:2c:5e:02:13:01:
                    c5:dd:fa:44:e9:eb:96:fa:db:07:2c:24:91:1e:c7:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:71:FE:54:91:80:7F:0D:EA:8A:97:F4:4D:33:56:17:A7:A8:7E
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:86:b7:09:20:4e:54:fe:de:e1:07:40:a7:42:12:46:24:
         0f:b5:f9:f0:c2:c0:06:54:84:ef:9b:3b:17:05:12:4f:e6:be:
         2b:37:13:f2:28:8f:96:42:5c:74:91:68:a5:31:6a:eb:98:9a:
         f5:c8:a5:0c:46:f7:ea:56:44:49:a7:c7:0a:a2:b5:99:72:40:
         2c:39:9f:ff:ee:17:23:6f:ce:69:7a:22:20:87:50:c6:99:72:
         aa:2c:67:77:d3:f0:69:57:2c:1b:68:e9:10:2c:26:c3:e1:62:
         10:9a:e5:81:71:6a:8d:4c:b7:02:f5:b4:73:4b:a9:c1:3f:36:
         e0:c8:ee:53:b3:55:4f:b0:a8:86:e0:6e:26:47:10:d5:07:88:
         b1:2e:ed:47:80:1e:26:c7:a8:ba:fb:b1:a8:9d:a6:77:47:19:
         d9:58:dd:73:c9:df:9c:18:95:ab:7f:04:cf:16:99:17:1f:20:
         94:c1:c4:c7:a0:1a:67:99:75:03:6e:be:00:a0:7d:eb:8a:7f:
         b0:2d:76:fc:55:cb:59:f5:10:5f:bd:bb:f5:f8:53:20:ac:ef:
         d9:04:62:0c:25:27:ab:b0:1f:9e:70:21:64:91:9d:aa:bc:5d:
         6e:4b:55:94:47:8e:8d:c0:42:6a:81:67:3f:98:15:74:e9:fd:
         e8:47:64:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL3UFFprtSTxlMx4ouzQOHyej7aYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGNkFDM0Q4RjUwNkJEQ0VDODEyQkRGRDJDRkIzMzFB
MjUxRUFDOTAeFw0yNTAyMTQxNzQyNDdaFw0yNjAyMTMxNzQ3NDdaMDMxMTAvBgNV
BAMTKEY0QUY3MUZFNTQ5MTgwN0YwREVBOEE5N0Y0NEQzMzU2MTdBN0E4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcTG2Y81i/7Pwg9gUVl+16lDZ
h+Ld/GDg9jmGLriWSQF3lSEYZ1LgPoU4/b9Vq2WPxdsXVSZSaFCSCdSEzXIw5ltR
kXhv81FZd3C1tSQPyeLiranLzD1KluUZfcIsVy8iA7WVTZwqiE76CuV5aNYyR4gr
y1BL5o7DARxO9JsIhV1VDSeMKynJdWfco83gxAEALMs6TcO++vxL8aEMKYvIbOWT
0S4vT3vrMP/IbbBj+p7zLxGRaB8Bbts4aJNHTY8NSR3JqkURJJqngTuDWmgmLUe7
HChVnjUxnVnh/inqLq0CHP9tGJdvfuAsXgITAcXd+kTp65b62wcsJJEexwGrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9K9x/lSRgH8N6oqX9E0zVhenqH4wHwYDVR0j
BBgwFoAUMvasPY9Qa9zsgSvf0s+zMaJR6skwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC8zMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEyNTFFQUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjZBQzNEOEY1MDZCRENF
QzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzEzNzM3MmUzMzM5MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSeeMA0GCSqGSIb3DQEBCwUAA4IBAQCrDIa3CSBO
VP7e4QdAp0ISRiQPtfnwwsAGVITvmzsXBRJP5r4rNxPyKI+WQlx0kWilMWrrmJr1
yKUMRvfqVkRJp8cKorWZckAsOZ//7hcjb85peiIgh1DGmXKqLGd30/BpVywbaOkQ
LCbD4WIQmuWBcWqNTLcC9bRzS6nBPzbgyO5Ts1VPsKiG4G4mRxDVB4ixLu1HgB4m
x6i6+7GonaZ3RxnZWN1zyd+cGJWrfwTPFpkXHyCUwcTHoBpnmXUDbr4AoH3rin+w
LXb8VctZ9RBfvbv1+FMgrO/ZBGIMJSersB+ecCFkkZ2qvF1uS1WUR46NwEJqgWc/
mBV06f3oR2TE
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:55 2025 by rpki-client