Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e3132342e3139322e302f31392d3234203d3e203137323232.roa
File:                     3137372e3132342e3139322e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          UcvjAtcAn2dOP+3qLGhLmSgU1dvBPUBCBfqMyjZYi88=
Subject key identifier:   18:23:BF:77:04:13:3F:7E:7E:1D:E9:88:F1:7B:9C:C6:46:53:EC:0E
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       2A2CA361F9BFE0F5B177AEC9533D1988A3716D21
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e3132342e3139322e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:41 +0000
ROA not before:           Mon 25 Mar 2024 22:50:41 +0000
ROA not after:            Mon 24 Mar 2025 22:55:41 +0000
asID:                     17222
IP address blocks:        177.124.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2c:a3:61:f9:bf:e0:f5:b1:77:ae:c9:53:3d:19:88:a3:71:6d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:41 2024 GMT
            Not After : Mar 24 22:55:41 2025 GMT
        Subject: CN=1823BF7704133F7E7E1DE988F17B9CC64653EC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:d5:07:d0:b2:13:60:65:ac:b8:8e:ec:b5:
                    e8:d6:e4:1d:d6:92:94:6e:30:b6:4a:b6:d6:0e:e9:
                    c9:98:bb:98:fb:95:6e:ae:51:f9:b3:96:77:1e:99:
                    8f:a9:f1:96:6b:47:cf:dd:e2:fc:ec:1e:8f:23:d6:
                    b6:c1:58:21:55:29:47:b3:f2:bb:62:f1:67:a5:65:
                    87:51:39:02:18:7c:7a:fb:f1:09:59:56:68:50:22:
                    61:37:72:68:ac:47:4a:3f:14:41:4f:84:00:1c:8c:
                    4d:4f:91:eb:8e:e7:b4:37:7d:e7:10:bc:e8:72:10:
                    ae:fa:9b:40:b8:08:8d:61:c5:1f:b5:5e:19:94:d0:
                    76:46:82:5e:5f:12:b7:46:bf:b3:29:11:bb:88:14:
                    51:7e:d1:92:3f:28:ae:fd:13:b9:26:7a:7c:74:7d:
                    80:ae:2d:a8:70:12:5f:ac:20:01:6b:d1:fd:52:8d:
                    91:ef:05:1a:57:95:33:4b:8f:4c:64:99:a6:fa:48:
                    ef:5e:c1:f5:e7:15:77:0b:02:a4:f8:1a:cf:07:36:
                    14:21:dc:80:08:ca:29:9e:68:52:10:39:eb:80:d6:
                    2e:e1:67:e8:3b:3b:da:fc:90:af:83:c1:2f:98:f5:
                    c6:0f:b5:29:03:91:04:d0:d3:50:e7:2e:d7:99:f9:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:BF:77:04:13:3F:7E:7E:1D:E9:88:F1:7B:9C:C6:46:53:EC:0E
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e3132342e3139322e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:24:ba:d5:f6:b1:ac:3e:63:50:3d:45:42:69:13:87:84:a9:
         b5:9d:14:ae:b5:09:88:21:ba:bd:b4:92:fe:52:c4:4c:9c:c7:
         1f:5f:60:69:39:41:cb:4a:a0:fc:5a:00:f3:f6:dd:74:f8:d2:
         a4:1e:14:e2:8e:e0:ca:af:d0:81:91:0f:c5:a5:ff:c1:c1:d3:
         10:64:cf:f3:2c:47:e7:f1:7c:a5:86:99:71:a5:19:4d:79:89:
         82:a0:ff:bc:30:11:cb:82:95:e0:aa:c3:57:43:77:d2:45:62:
         af:4b:02:c1:6f:b9:e4:34:ff:25:b5:ff:aa:98:66:37:8e:d1:
         f6:ab:b2:29:34:20:16:ee:4c:a5:b4:bb:de:9a:a3:7e:a5:0e:
         9b:20:16:36:57:6a:cd:7a:0e:28:37:1f:cd:07:fb:07:85:2a:
         10:97:ae:8a:3a:bb:4d:35:63:9b:d5:10:9e:12:61:b1:33:43:
         4a:dc:5d:fc:c5:63:e4:ff:93:6d:21:b5:2b:e0:3f:f8:2a:cf:
         6f:19:95:5a:22:de:64:95:b5:0b:3b:10:8c:03:7a:8f:72:19:
         7a:01:13:55:a4:b0:d9:b8:55:3c:d8:ff:44:e2:d2:d0:a4:83:
         ef:34:bf:c5:ac:c1:21:e8:a3:7f:0c:9a:a8:61:c3:1f:fd:3e:
         a4:cc:e0:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKiyjYfm/4PWxd67JUz0ZiKNxbSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGOUJGQkY1M0NCNjY2QUFGNzZGRTczMjc2QjcwMUM3
RTIzN0E2RTAeFw0yNDAzMjUyMjUwNDFaFw0yNTAzMjQyMjU1NDFaMDMxMTAvBgNV
BAMTKDE4MjNCRjc3MDQxMzNGN0U3RTFERTk4OEYxN0I5Q0M2NDY1M0VDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qNUH0LITYGWsuI7stejW5B3W
kpRuMLZKttYO6cmYu5j7lW6uUfmzlncemY+p8ZZrR8/d4vzsHo8j1rbBWCFVKUez
8rti8WelZYdROQIYfHr78QlZVmhQImE3cmisR0o/FEFPhAAcjE1PkeuO57Q3fecQ
vOhyEK76m0C4CI1hxR+1XhmU0HZGgl5fErdGv7MpEbuIFFF+0ZI/KK79E7kmenx0
fYCuLahwEl+sIAFr0f1SjZHvBRpXlTNLj0xkmab6SO9ewfXnFXcLAqT4Gs8HNhQh
3IAIyimeaFIQOeuA1i7hZ+g7O9r8kK+DwS+Y9cYPtSkDkQTQ01DnLteZ+aCPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGCO/dwQTP35+HemI8XucxkZT7A4wHwYDVR0j
BBgwFoAUQ/m/v1PLZmqvdv5zJ2twHH4jem4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMC80M0Y5QkZCRjUzQ0I2NjZBQUY3NkZFNzMyNzZCNzAxQzdFMjM3QTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzRjlCRkJGNTNDQjY2NkFB
Rjc2RkU3MzI3NkI3MDFDN0UyMzdBNkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzAv
MzEzNzM3MmUzMTMyMzQyZTMxMzkzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMx
MzczMjMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxfMAwDQYJKoZIhvcNAQELBQADggEBAMUkutX2
saw+Y1A9RUJpE4eEqbWdFK61CYghur20kv5SxEycxx9fYGk5QctKoPxaAPP23XT4
0qQeFOKO4Mqv0IGRD8Wl/8HB0xBkz/MsR+fxfKWGmXGlGU15iYKg/7wwEcuCleCq
w1dDd9JFYq9LAsFvueQ0/yW1/6qYZjeO0farsik0IBbuTKW0u96ao36lDpsgFjZX
as16Dig3H80H+weFKhCXroo6u001Y5vVEJ4SYbEzQ0rcXfzFY+T/k20htSvgP/gq
z28ZlVoi3mSVtQs7EIwDeo9yGXoBE1WksNm4VTzY/0Ti0tCkg+80v8WswSHoo38M
mqhhwx/9PqTM4KA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:13 2025 by rpki-client