Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/3137372e37322e382e302f32312d3234203d3e203532383134.roa
File:                     3137372e37322e382e302f32312d3234203d3e203532383134.roa (raw, json)
Hash identifier:          C9KBBLpWQhEIjv2Z/7TnZ4R53u+F9YE8z1WhJroDNEc=
Subject key identifier:   C0:E0:7D:04:82:9F:8C:B5:29:48:B6:FA:32:6F:D3:FF:06:31:E5:A4
Certificate issuer:       /CN=15E6FB27B20CF7D8B14B5F711A666248B5C2CA49
Certificate serial:       3570D3416C0CE08D31C7430367D322154CDB3D4E
Authority key identifier: 15:E6:FB:27:B2:0C:F7:D8:B1:4B:5F:71:1A:66:62:48:B5:C2:CA:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E6FB27B20CF7D8B14B5F711A666248B5C2CA49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/3137372e37322e382e302f32312d3234203d3e203532383134.roa
Signing time:             Sat 21 Dec 2024 15:53:29 +0000
ROA not before:           Sat 21 Dec 2024 15:48:29 +0000
ROA not after:            Sat 20 Dec 2025 15:53:29 +0000
asID:                     52814
IP address blocks:        177.72.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:70:d3:41:6c:0c:e0:8d:31:c7:43:03:67:d3:22:15:4c:db:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15E6FB27B20CF7D8B14B5F711A666248B5C2CA49
        Validity
            Not Before: Dec 21 15:48:29 2024 GMT
            Not After : Dec 20 15:53:29 2025 GMT
        Subject: CN=C0E07D04829F8CB52948B6FA326FD3FF0631E5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:17:d8:67:aa:47:5d:21:43:15:77:aa:57:
                    d6:97:c7:0e:7d:0e:f6:fd:0e:db:2f:2e:cb:e2:c7:
                    ac:8d:bc:2b:1c:56:67:55:0e:b2:84:6b:33:d3:a0:
                    03:70:ab:91:81:5a:23:5c:e6:c7:86:4a:4f:c0:04:
                    fd:c0:3e:0b:2e:90:61:8f:31:12:20:f7:ea:81:87:
                    2b:63:c2:35:4a:ba:fb:86:b8:ad:ac:62:55:d8:9f:
                    d7:4f:f2:81:f2:f9:9c:75:d4:65:38:b2:3c:41:a5:
                    b2:ad:36:db:5d:5b:3c:a4:a6:6f:a8:45:b8:52:ad:
                    f0:09:c9:d9:79:e8:44:e7:32:c9:05:7b:ee:b5:80:
                    ba:13:aa:83:5d:29:42:78:46:17:65:4b:24:42:cf:
                    85:39:c4:e7:7a:53:b0:55:88:64:a2:bc:d2:25:36:
                    5d:61:be:71:62:2f:ad:89:fb:a1:6d:10:bd:8a:9f:
                    8d:83:26:8c:dd:30:48:d2:e3:e7:90:b5:e9:7a:ac:
                    3c:5c:5e:64:f6:f0:b9:16:bc:3b:f0:c1:7d:5d:16:
                    87:e9:d3:38:cd:fe:f4:11:93:a2:04:4d:5f:90:71:
                    44:e0:6e:3a:c3:37:75:f7:ed:36:da:d1:0b:f8:26:
                    a5:ba:4a:4c:db:c4:50:71:8a:a9:ef:72:bb:94:21:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:7D:04:82:9F:8C:B5:29:48:B6:FA:32:6F:D3:FF:06:31:E5:A4
            X509v3 Authority Key Identifier:
                keyid:15:E6:FB:27:B2:0C:F7:D8:B1:4B:5F:71:1A:66:62:48:B5:C2:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/15E6FB27B20CF7D8B14B5F711A666248B5C2CA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E6FB27B20CF7D8B14B5F711A666248B5C2CA49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/3137372e37322e382e302f32312d3234203d3e203532383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:47:35:c6:11:15:24:21:c4:5a:41:7d:24:7a:a1:72:b5:
         75:be:32:53:45:b3:aa:91:e0:66:47:0e:f9:84:7f:ba:55:44:
         fc:03:fd:66:39:f9:6f:ba:ca:b7:c3:55:ac:0c:21:c1:af:04:
         7b:86:bc:cf:cc:da:6d:41:42:27:5c:52:4d:38:65:8f:b8:e2:
         0a:b0:f5:27:4a:07:89:33:be:3d:95:e9:f4:ed:a7:b3:17:74:
         95:dc:0d:d5:39:18:cf:f4:1b:1b:4a:6b:ee:95:54:20:2b:41:
         7f:4b:1e:b2:b1:bb:88:26:a6:43:06:89:36:15:2b:6b:2f:a5:
         f3:ad:54:ed:d0:d4:eb:ed:a4:ca:e5:df:d7:d0:9e:c2:88:c5:
         f5:20:57:fc:f7:a8:f5:ca:8b:1c:4c:fc:8a:f0:34:15:8b:6b:
         93:0d:95:80:13:e7:d0:ef:18:56:80:da:53:c3:35:ac:68:a9:
         65:e4:dd:62:9d:2a:ed:a6:c5:fb:d4:2e:dc:3b:18:1f:06:ea:
         a9:5a:94:71:2e:bd:62:43:e7:b0:46:cf:d7:39:1a:54:bd:3d:
         92:6a:48:9e:0d:61:02:4c:b2:4f:c3:ea:d8:fd:a5:d2:47:fb:
         99:2f:9b:e4:a5:fc:65:0f:46:bd:ac:fd:b7:d8:c5:ed:9f:e1:
         6e:13:8e:04
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUNXDTQWwM4I0xx0MDZ9MiFUzbPU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVFNkZCMjdCMjBDRjdEOEIxNEI1RjcxMUE2NjYyNDhC
NUMyQ0E0OTAeFw0yNDEyMjExNTQ4MjlaFw0yNTEyMjAxNTUzMjlaMDMxMTAvBgNV
BAMTKEMwRTA3RDA0ODI5RjhDQjUyOTQ4QjZGQTMyNkZEM0ZGMDYzMUU1QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSxfYZ6pHXSFDFXeqV9aXxw59
Dvb9DtsvLsvix6yNvCscVmdVDrKEazPToANwq5GBWiNc5seGSk/ABP3APgsukGGP
MRIg9+qBhytjwjVKuvuGuK2sYlXYn9dP8oHy+Zx11GU4sjxBpbKtNttdWzykpm+o
RbhSrfAJydl56ETnMskFe+61gLoTqoNdKUJ4RhdlSyRCz4U5xOd6U7BViGSivNIl
Nl1hvnFiL62J+6FtEL2Kn42DJozdMEjS4+eQtel6rDxcXmT28LkWvDvwwX1dFofp
0zjN/vQRk6IETV+QcUTgbjrDN3X37Tba0Qv4JqW6SkzbxFBxiqnvcruUIeOJAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUwOB9BIKfjLUpSLb6Mm/T/wYx5aQwHwYDVR0j
BBgwFoAUFeb7J7IM99ixS19xGmZiSLXCykkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWRmdWVkckw0QlRXRkpMWGVlSk5oUVVmcGFTYkM4UFBodFFaQXlOS1N6
YmEvMC8xNUU2RkIyN0IyMENGN0Q4QjE0QjVGNzExQTY2NjI0OEI1QzJDQTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1RTZGQjI3QjIwQ0Y3RDhC
MTRCNUY3MTFBNjY2MjQ4QjVDMkNBNDkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VkZnVlZHJMNEJUV0ZKTFhlZUpOaFFVZnBhU2JDOFBQaHRRWkF5TktTemJhLzAv
MzEzNzM3MmUzNzMyMmUzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIzODMx
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxSAgwDQYJKoZIhvcNAQELBQADggEBAD16RzXGERUkIcRa
QX0keqFytXW+MlNFs6qR4GZHDvmEf7pVRPwD/WY5+W+6yrfDVawMIcGvBHuGvM/M
2m1BQidcUk04ZY+44gqw9SdKB4kzvj2V6fTtp7MXdJXcDdU5GM/0GxtKa+6VVCAr
QX9LHrKxu4gmpkMGiTYVK2svpfOtVO3Q1OvtpMrl39fQnsKIxfUgV/z3qPXKixxM
/IrwNBWLa5MNlYAT59DvGFaA2lPDNaxoqWXk3WKdKu2mxfvULtw7GB8G6qlalHEu
vWJD57BGz9c5GlS9PZJqSJ4NYQJMsk/D6tj9pdJH+5kvm+Sl/GUPRr2s/bfYxe2f
4W4TjgQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:34:31 2025 by rpki-client