Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          ixP42+6UCg+paMhJABt01sqnUmU+dHDDmqp1Kr5DHmk=
Subject key identifier:   DC:9D:57:64:44:2A:87:2E:58:1A:A9:4A:71:AD:29:20:A4:EF:2B:55
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       4B96C93E85CBC385463D185B94B61BB36FDAFC1A
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:16 +0000
ROA not before:           Tue 11 Feb 2025 17:53:16 +0000
ROA not after:            Tue 10 Feb 2026 17:58:16 +0000
asID:                     271624
IP address blocks:        177.73.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:96:c9:3e:85:cb:c3:85:46:3d:18:5b:94:b6:1b:b3:6f:da:fc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:16 2025 GMT
            Not After : Feb 10 17:58:16 2026 GMT
        Subject: CN=DC9D5764442A872E581AA94A71AD2920A4EF2B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:f2:88:2b:6d:73:d6:28:9b:9c:ec:b0:64:
                    6e:ec:1d:02:b3:62:a4:7f:a0:d9:ab:af:23:83:d4:
                    2d:50:d3:2b:1c:e4:0b:ef:62:6b:62:9c:99:96:81:
                    59:6a:70:49:35:57:41:29:d1:c8:ea:8e:11:ef:a2:
                    ea:40:48:40:c0:1e:e7:55:88:f0:90:74:1b:ec:8d:
                    0d:4a:db:22:7e:4f:a4:03:15:1d:59:c7:2d:5d:4a:
                    96:a6:4c:14:96:e4:3c:3d:f8:83:6e:86:d1:3f:4d:
                    94:08:11:43:4a:86:1d:05:9b:d8:fe:d0:2e:17:d5:
                    fb:04:a4:c6:07:f0:aa:9a:66:f4:12:50:61:41:91:
                    78:d2:9e:b0:05:c9:5c:04:55:1d:1d:a3:82:db:77:
                    1c:ae:0c:6a:c8:59:ed:f8:a2:d1:48:61:a8:b0:78:
                    62:ee:be:3d:cb:61:e5:01:da:33:0c:85:c0:26:0d:
                    79:74:37:fb:4c:95:9a:82:5c:11:48:d4:6c:45:26:
                    ee:93:4c:5c:7d:ae:73:62:49:ae:93:b0:b7:61:78:
                    8f:f5:57:5c:b6:75:67:1f:d6:fd:e5:68:23:c3:32:
                    95:b9:a0:6f:57:c2:92:05:e3:dd:07:d5:3f:18:e7:
                    21:0a:1d:67:47:7a:cd:2e:a5:37:09:47:13:9b:ee:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:57:64:44:2A:87:2E:58:1A:A9:4A:71:AD:29:20:A4:EF:2B:55
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:7d:d4:94:db:07:0d:30:6c:21:a1:ef:b0:92:9b:2f:65:
         c2:6f:bd:3e:10:c7:25:4d:89:b4:dc:eb:18:ea:ff:87:4b:d7:
         7f:f4:a8:e4:60:62:01:c9:47:2f:ac:4c:57:ec:fd:cd:9c:8e:
         aa:8e:12:0e:0e:76:d5:dc:20:88:45:9a:74:80:02:87:18:ce:
         88:b9:aa:30:79:71:d3:dc:5b:fb:08:6d:db:9a:87:39:b5:bf:
         10:81:a6:b2:21:51:7e:1b:fb:0e:30:2f:f9:7b:e2:74:3a:3c:
         15:3b:8f:c9:c6:04:a9:4d:9d:01:37:95:6e:2f:43:10:be:6b:
         55:33:93:01:0b:68:6d:f0:c3:c8:4d:c3:10:38:f4:13:d2:fa:
         29:91:58:be:b4:78:d2:d0:00:8b:62:94:23:4c:07:45:f3:09:
         63:33:68:6a:40:4d:a6:b0:78:02:f2:f8:ae:12:0c:57:7d:43:
         5d:02:be:4f:f3:d0:b1:bc:20:e0:38:c9:63:39:9c:33:30:4a:
         98:99:d0:9c:6a:fd:1c:d5:28:10:4b:17:29:b5:45:fe:5a:12:
         55:fd:17:6e:37:df:1b:77:1f:f2:3d:83:f4:48:a6:0c:9c:c5:
         cf:50:61:90:f4:1a:05:2f:e5:ae:02:27:cf:d2:65:e7:95:e5:
         a3:e2:93:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS5bJPoXLw4VGPRhblLYbs2/a/BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJEMTBCRDczMTFDMzZFNDQyNzI2MkM1ODdCMDUxOTE5
OEM5Mzg0OTAeFw0yNTAyMTExNzUzMTZaFw0yNjAyMTAxNzU4MTZaMDMxMTAvBgNV
BAMTKERDOUQ1NzY0NDQyQTg3MkU1ODFBQTk0QTcxQUQyOTIwQTRFRjJCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8fKIK21z1iibnOywZG7sHQKz
YqR/oNmrryOD1C1Q0ysc5AvvYmtinJmWgVlqcEk1V0Ep0cjqjhHvoupASEDAHudV
iPCQdBvsjQ1K2yJ+T6QDFR1Zxy1dSpamTBSW5Dw9+INuhtE/TZQIEUNKhh0Fm9j+
0C4X1fsEpMYH8KqaZvQSUGFBkXjSnrAFyVwEVR0do4LbdxyuDGrIWe34otFIYaiw
eGLuvj3LYeUB2jMMhcAmDXl0N/tMlZqCXBFI1GxFJu6TTFx9rnNiSa6TsLdheI/1
V1y2dWcf1v3laCPDMpW5oG9XwpIF490H1T8Y5yEKHWdHes0upTcJRxOb7gQPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3J1XZEQqhy5YGqlKca0pIKTvK1UwHwYDVR0j
BBgwFoAUa9EL1zEcNuRCcmLFh7BRkZjJOEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC82QkQxMEJENzMxMUMzNkU0NDI3MjYyQzU4N0IwNTE5MTk4QzkzODQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCRDEwQkQ3MzExQzM2RTQ0
MjcyNjJDNTg3QjA1MTkxOThDOTM4NDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzEzNzM3MmUzNzMzMmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSYMwDQYJKoZIhvcNAQELBQADggEBADl+fdSU
2wcNMGwhoe+wkpsvZcJvvT4QxyVNibTc6xjq/4dL13/0qORgYgHJRy+sTFfs/c2c
jqqOEg4OdtXcIIhFmnSAAocYzoi5qjB5cdPcW/sIbduahzm1vxCBprIhUX4b+w4w
L/l74nQ6PBU7j8nGBKlNnQE3lW4vQxC+a1UzkwELaG3ww8hNwxA49BPS+imRWL60
eNLQAItilCNMB0XzCWMzaGpATaaweALy+K4SDFd9Q10Cvk/z0LG8IOA4yWM5nDMw
SpiZ0Jxq/RzVKBBLFym1Rf5aElX9F2433xt3H/I9g/RIpgycxc9QYZD0GgUv5a4C
J8/SZeeV5aPikxY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:56:48 2025 by rpki-client