Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/0/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa
File:                     3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa (raw, json)
Hash identifier:          ejQSbAaHsB1qdOLRhMOHdrFbeep1mw9tMIuk8HZYrFI=
Subject key identifier:   AC:D4:2E:71:3D:F7:E5:41:83:B3:BD:02:07:BE:6A:46:9B:21:11:98
Certificate issuer:       /CN=550791524AA30FAF9CC2A33C6373E13AF431765E
Certificate serial:       58E5A987F20F88763C2A1815DCFDD930606AAC6E
Authority key identifier: 55:07:91:52:4A:A3:0F:AF:9C:C2:A3:3C:63:73:E1:3A:F4:31:76:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/550791524AA30FAF9CC2A33C6373E13AF431765E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/0/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa
Signing time:             Sun 31 Mar 2024 22:16:25 +0000
ROA not before:           Sun 31 Mar 2024 22:11:25 +0000
ROA not after:            Sun 30 Mar 2025 22:16:25 +0000
asID:                     270750
IP address blocks:        177.12.214.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:a9:87:f2:0f:88:76:3c:2a:18:15:dc:fd:d9:30:60:6a:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550791524AA30FAF9CC2A33C6373E13AF431765E
        Validity
            Not Before: Mar 31 22:11:25 2024 GMT
            Not After : Mar 30 22:16:25 2025 GMT
        Subject: CN=ACD42E713DF7E54183B3BD0207BE6A469B211198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:d2:7f:57:f7:b4:1b:da:ac:99:15:e5:62:
                    c2:9f:4b:5a:b2:d1:4f:c8:11:bf:f6:bd:9b:c1:dd:
                    d0:b6:8f:ce:83:94:62:20:7e:75:e8:5c:00:f8:52:
                    9f:01:4e:c5:e6:18:56:91:11:ce:33:96:e4:8b:9f:
                    df:d4:b3:27:63:87:34:72:61:44:3d:8c:9f:21:1b:
                    b3:2a:41:7b:78:19:ce:89:7d:ab:32:26:0a:cc:bb:
                    1a:04:2b:1c:eb:29:c8:6c:22:45:45:81:0c:e4:87:
                    00:0a:e9:de:98:04:5d:98:9d:52:60:ab:bf:6d:24:
                    11:aa:53:68:d2:fc:c5:a3:67:f3:11:08:30:14:3d:
                    d0:50:21:24:f6:1b:94:75:10:8f:ca:81:e6:5e:96:
                    9f:48:29:87:d0:19:42:5f:81:f4:0f:d9:75:0f:02:
                    af:ab:2d:71:39:86:1e:91:d8:a1:65:3a:ad:f2:1a:
                    cd:78:17:1b:ef:5b:ec:f5:e6:ed:ef:ef:18:37:d8:
                    ca:e6:22:fe:f4:cb:f9:77:5a:85:67:5e:b8:18:a7:
                    eb:94:fd:f5:f2:7b:ea:0d:c1:00:2a:52:e3:2c:c4:
                    7f:cf:36:fe:d2:75:50:d6:6e:24:69:2b:19:e8:29:
                    2a:4a:19:59:3d:63:03:7a:33:6b:77:e4:d5:13:c3:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:2E:71:3D:F7:E5:41:83:B3:BD:02:07:BE:6A:46:9B:21:11:98
            X509v3 Authority Key Identifier:
                keyid:55:07:91:52:4A:A3:0F:AF:9C:C2:A3:3C:63:73:E1:3A:F4:31:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/0/550791524AA30FAF9CC2A33C6373E13AF431765E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/550791524AA30FAF9CC2A33C6373E13AF431765E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/0/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:45:57:2e:f6:0e:a3:da:2a:e8:59:6b:52:e8:19:28:72:
         05:c8:01:a7:e1:41:eb:d6:55:be:a9:bb:ff:1e:5b:11:c1:3b:
         70:ac:cb:c0:5a:a2:4d:03:b7:fc:15:ca:25:aa:d3:5f:cf:d4:
         92:b3:1d:81:92:fe:10:12:51:d7:34:d4:d4:df:60:15:14:75:
         c4:1e:1c:78:bf:cd:23:2f:65:30:63:54:5c:88:18:b2:6d:fa:
         6d:9a:2c:cd:f6:84:22:e3:d6:5e:1f:09:74:1d:5d:5d:72:ba:
         87:68:64:a6:bf:bf:f2:83:be:e9:3a:74:37:22:fa:54:cc:8c:
         04:12:d4:e2:89:e4:a1:e4:8d:f0:85:40:10:e6:fb:1a:7f:55:
         01:d4:a3:2e:c4:c9:ff:48:3d:7a:d8:1b:a8:64:8e:9b:4f:04:
         bd:2f:cd:57:99:9a:50:1b:39:f9:d3:21:f0:ce:37:e9:3a:81:
         b9:39:d1:c8:c1:1e:f4:22:ba:96:3e:c2:be:c2:c9:5c:8e:7b:
         ca:1e:3d:ea:ce:d4:db:34:60:4b:12:6b:84:e1:94:d1:8a:fc:
         a9:8e:45:75:cd:f3:c7:e2:94:bc:76:fe:be:a2:e2:67:19:02:
         c4:a1:14:e9:b2:5d:12:23:4f:20:67:53:9a:98:a9:a3:dd:30:
         8f:7d:fe:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWOWph/IPiHY8KhgV3P3ZMGBqrG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwNzkxNTI0QUEzMEZBRjlDQzJBMzNDNjM3M0UxM0FG
NDMxNzY1RTAeFw0yNDAzMzEyMjExMjVaFw0yNTAzMzAyMjE2MjVaMDMxMTAvBgNV
BAMTKEFDRDQyRTcxM0RGN0U1NDE4M0IzQkQwMjA3QkU2QTQ2OUIyMTExOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflNJ/V/e0G9qsmRXlYsKfS1qy
0U/IEb/2vZvB3dC2j86DlGIgfnXoXAD4Up8BTsXmGFaREc4zluSLn9/UsydjhzRy
YUQ9jJ8hG7MqQXt4Gc6JfasyJgrMuxoEKxzrKchsIkVFgQzkhwAK6d6YBF2YnVJg
q79tJBGqU2jS/MWjZ/MRCDAUPdBQIST2G5R1EI/KgeZelp9IKYfQGUJfgfQP2XUP
Aq+rLXE5hh6R2KFlOq3yGs14FxvvW+z15u3v7xg32MrmIv70y/l3WoVnXrgYp+uU
/fXye+oNwQAqUuMsxH/PNv7SdVDWbiRpKxnoKSpKGVk9YwN6M2t35NUTw8urAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrNQucT335UGDs70CB75qRpshEZgwHwYDVR0j
BBgwFoAUVQeRUkqjD6+cwqM8Y3PhOvQxdl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpickhCaHQ3TEU2RFJncjlGcXYxWXVVUlJraUE3dGRGZjkyVHdxejRL
TkQvMC81NTA3OTE1MjRBQTMwRkFGOUNDMkEzM0M2MzczRTEzQUY0MzE3NjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1MDc5MTUyNEFBMzBGQUY5
Q0MyQTMzQzYzNzNFMTNBRjQzMTc2NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6YnJIQmh0N0xFNkRSZ3I5RnF2MVl1VVJSa2lBN3RkRmY5MlR3cXo0S05ELzAv
MzEzNzM3MmUzMTMyMmUzMjMxMzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzAzNzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDNYwDQYJKoZIhvcNAQELBQADggEBAArERVcu
9g6j2iroWWtS6BkocgXIAafhQevWVb6pu/8eWxHBO3Csy8Baok0Dt/wVyiWq01/P
1JKzHYGS/hASUdc01NTfYBUUdcQeHHi/zSMvZTBjVFyIGLJt+m2aLM32hCLj1l4f
CXQdXV1yuodoZKa/v/KDvuk6dDci+lTMjAQS1OKJ5KHkjfCFQBDm+xp/VQHUoy7E
yf9IPXrYG6hkjptPBL0vzVeZmlAbOfnTIfDON+k6gbk50cjBHvQiupY+wr7CyVyO
e8oePerO1Ns0YEsSa4ThlNGK/KmORXXN88filLx2/r6i4mcZAsShFOmyXRIjTyBn
U5qYqaPdMI99/vI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:18:23 2025 by rpki-client