Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
File:                     3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          qGNYFz31n1cqU4mpNisaoDKgOvytk95LmACJru5BXHo=
Subject key identifier:   AC:9B:9E:1E:E8:7E:EC:D3:C5:A1:D7:D2:2F:E9:5B:1C:18:96:34:E6
Certificate issuer:       /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial:       77673C2C5BB524734DC91D481D90B68E0796C0CD
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:10:09 +0000
ROA not before:           Mon 10 Feb 2025 19:05:09 +0000
ROA not after:            Mon 09 Feb 2026 19:10:09 +0000
asID:                     53062
IP address blocks:        170.150.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:67:3c:2c:5b:b5:24:73:4d:c9:1d:48:1d:90:b6:8e:07:96:c0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
        Validity
            Not Before: Feb 10 19:05:09 2025 GMT
            Not After : Feb  9 19:10:09 2026 GMT
        Subject: CN=AC9B9E1EE87EECD3C5A1D7D22FE95B1C189634E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:85:23:38:f0:0a:25:dd:a8:ab:26:cd:87:
                    cb:93:3f:dd:f0:1c:21:ab:2d:9b:85:cf:02:13:1f:
                    fc:78:5e:64:6e:94:e6:91:66:9d:ba:8e:4c:d2:ad:
                    9d:ca:c0:27:fa:56:80:c2:59:95:fa:52:ff:fd:10:
                    72:0b:f1:d3:93:f5:ae:d2:42:76:ee:fc:12:a5:4a:
                    54:ba:83:66:35:ac:6e:e6:08:cb:5a:65:10:9f:9f:
                    12:38:83:d0:fe:fd:cf:c9:d0:c6:c7:8d:cd:e9:fb:
                    95:66:ef:e3:02:55:1d:e7:45:ff:c4:55:68:80:1a:
                    de:86:8e:a2:f2:4e:f5:9f:19:64:c3:5d:e7:46:af:
                    f7:42:de:0a:13:38:2b:fd:c8:af:28:37:a7:c9:8c:
                    85:c3:f2:ec:b4:c8:d1:a2:60:df:23:2f:00:3c:a2:
                    43:97:67:a0:ea:c1:f2:ed:c9:eb:6d:62:4a:5f:2d:
                    d1:b2:b6:22:64:ef:b4:ab:22:3f:f2:a1:8d:5c:0a:
                    60:2f:06:04:fd:aa:81:40:dc:f2:e7:ec:00:16:fc:
                    13:83:c3:3d:76:6f:a4:6e:9b:7f:8d:0d:4e:31:6b:
                    55:df:e2:38:9f:a1:1c:61:a5:d6:0e:d5:d5:b9:9f:
                    a9:1c:d5:7c:c1:72:ac:7c:4e:9b:90:23:7c:27:68:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:9E:1E:E8:7E:EC:D3:C5:A1:D7:D2:2F:E9:5B:1C:18:96:34:E6
            X509v3 Authority Key Identifier:
                keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:2d:54:59:40:26:a3:90:19:f9:ce:63:17:5c:67:c9:ea:
         78:46:e0:6f:a0:10:d3:9c:05:e4:3e:5f:da:1b:66:1b:43:62:
         38:d4:3e:df:6b:33:f3:f6:24:9c:b1:32:c0:81:e0:38:49:8f:
         28:e8:43:4f:27:05:ec:cc:16:73:ed:62:7f:90:60:9d:66:11:
         06:08:87:08:26:92:fd:91:74:3c:26:de:02:6a:bb:3f:a8:44:
         d4:0c:48:43:7a:39:7e:01:72:c1:6c:63:9b:98:8d:bf:39:c2:
         9e:2c:ad:f2:aa:27:c8:6e:4e:14:bd:c5:5b:b6:63:09:fd:f8:
         c7:e8:8d:41:26:00:4f:6b:71:3c:20:19:42:28:20:d2:0b:08:
         ad:ab:85:a2:bd:9d:23:7b:cb:0f:d4:35:39:96:1a:69:52:99:
         69:d9:50:e5:e2:68:6d:73:cc:10:64:a0:3a:32:9f:bb:c6:6f:
         24:7b:e3:d6:ef:5a:e6:16:38:fa:42:23:05:06:7d:b3:26:db:
         0e:d3:4b:02:38:93:99:fb:0d:a5:ca:2d:c7:cc:ec:2d:57:b3:
         8f:5d:e6:d1:83:a3:43:84:97:1c:ba:56:d8:5e:96:04:26:8a:
         76:0c:b2:97:8d:2b:23:44:ff:6b:43:c8:90:e6:a4:58:8e:2a:
         4f:13:e4:97
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUd2c8LFu1JHNNyR1IHZC2jgeWwM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0RTc4OTcwNjIzOThFOTUwNkYwODYyRkE0NjU5N0RG
OTM3ODI1RDAeFw0yNTAyMTAxOTA1MDlaFw0yNjAyMDkxOTEwMDlaMDMxMTAvBgNV
BAMTKEFDOUI5RTFFRTg3RUVDRDNDNUExRDdEMjJGRTk1QjFDMTg5NjM0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAIUjOPAKJd2oqybNh8uTP93w
HCGrLZuFzwITH/x4XmRulOaRZp26jkzSrZ3KwCf6VoDCWZX6Uv/9EHIL8dOT9a7S
Qnbu/BKlSlS6g2Y1rG7mCMtaZRCfnxI4g9D+/c/J0MbHjc3p+5Vm7+MCVR3nRf/E
VWiAGt6GjqLyTvWfGWTDXedGr/dC3goTOCv9yK8oN6fJjIXD8uy0yNGiYN8jLwA8
okOXZ6DqwfLtyettYkpfLdGytiJk77SrIj/yoY1cCmAvBgT9qoFA3PLn7AAW/BOD
wz12b6Rum3+NDU4xa1Xf4jifoRxhpdYO1dW5n6kc1XzBcqx8TpuQI3wnaHwFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUrJueHuh+7NPFodfSL+lbHBiWNOYwHwYDVR0j
BBgwFoAUF054lwYjmOlQbwhi+kZZffk3gl0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzEvMTc0RTc4OTcwNjIzOThFOTUwNkYwODYyRkE0NjU5N0RGOTM3ODI1RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xNzRFNzg5NzA2MjM5OEU5NTA2
RjA4NjJGQTQ2NTk3REY5Mzc4MjVELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzEvMzEz
NzMwMmUzMTM1MzAyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMz
MDM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqluwwDQYJKoZIhvcNAQELBQADggEBAEd9LVRZQCaj
kBn5zmMXXGfJ6nhG4G+gENOcBeQ+X9obZhtDYjjUPt9rM/P2JJyxMsCB4DhJjyjo
Q08nBezMFnPtYn+QYJ1mEQYIhwgmkv2RdDwm3gJquz+oRNQMSEN6OX4BcsFsY5uY
jb85wp4srfKqJ8huThS9xVu2Ywn9+MfojUEmAE9rcTwgGUIoINILCK2rhaK9nSN7
yw/UNTmWGmlSmWnZUOXiaG1zzBBkoDoyn7vGbyR749bvWuYWOPpCIwUGfbMm2w7T
SwI4k5n7DaXKLcfM7C1Xs49d5tGDo0OElxy6VthelgQminYMspeNKyNE/2tDyJDm
pFiOKk8T5Jc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:27:51 2025 by rpki-client