Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa
File:                     3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=
Subject key identifier:   3F:46:A6:B3:78:7B:9E:5D:43:78:08:7F:D0:1E:A3:C8:5F:8F:3B:E6
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       6799DC335451F117B624DCBC944A992510A199F1
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa
Signing time:             Thu 06 Mar 2025 20:55:47 +0000
ROA not before:           Thu 06 Mar 2025 20:50:47 +0000
ROA not after:            Thu 05 Mar 2026 20:55:47 +0000
asID:                     262299
IP address blocks:        177.54.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:99:dc:33:54:51:f1:17:b6:24:dc:bc:94:4a:99:25:10:a1:99:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Mar  6 20:50:47 2025 GMT
            Not After : Mar  5 20:55:47 2026 GMT
        Subject: CN=3F46A6B3787B9E5D4378087FD01EA3C85F8F3BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:24:12:cd:03:4f:85:a2:58:bd:5e:8f:48:
                    b2:8f:3c:2c:9c:23:27:79:e5:04:f1:a1:a9:09:58:
                    72:7a:1b:93:ac:9e:1a:9d:a4:22:df:51:e5:15:1f:
                    6a:90:72:10:79:06:10:a1:0a:e2:f0:b1:10:65:68:
                    6a:31:3e:c1:ce:77:e8:47:82:a0:d8:68:25:4d:5c:
                    a5:45:73:e3:9a:c9:9a:01:c0:d4:00:e0:ee:56:f6:
                    37:f1:46:c8:14:5c:35:82:1f:ab:eb:fe:3d:f4:cf:
                    48:09:70:91:50:72:fd:fd:73:60:c7:46:de:f4:e3:
                    d0:23:ac:1a:b8:ae:b8:34:37:6f:8d:33:a7:20:13:
                    6b:19:f2:d3:1e:90:0b:96:25:29:c1:59:a1:b7:df:
                    d0:f4:ef:8b:26:7e:3e:14:2c:6f:85:12:2b:38:43:
                    13:d2:35:80:a1:78:74:d7:40:30:45:28:27:b4:db:
                    85:6f:4e:17:7f:90:60:0a:be:2d:a9:65:dc:97:b1:
                    b4:38:55:08:95:b6:7e:72:30:e8:1e:4d:a3:43:d4:
                    6e:4c:6b:e0:be:a1:2a:46:98:24:f7:c7:ac:5c:d6:
                    ae:97:39:93:4d:63:10:75:e2:0f:85:96:fc:0e:e0:
                    16:20:77:75:2a:04:cf:e9:ff:cd:cf:cf:42:f3:9f:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:A6:B3:78:7B:9E:5D:43:78:08:7F:D0:1E:A3:C8:5F:8F:3B:E6
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:15:b1:6e:79:dd:5e:fb:a1:2f:4a:f1:8d:fb:5f:69:f6:ce:
         29:6d:e7:c1:39:a5:21:d5:4c:08:c2:50:39:9d:a3:0c:dd:64:
         d5:95:48:9d:d0:3f:91:d3:df:19:47:84:fc:47:34:3c:b0:3c:
         b4:74:b8:b1:b4:07:6b:3d:5a:11:03:e5:03:07:12:b6:c1:02:
         45:1d:b9:be:f1:27:3e:dd:0e:58:4c:10:d6:e5:94:7d:0a:4d:
         db:19:58:70:de:52:a3:6a:5d:0b:e1:ee:8a:06:bc:46:a9:8e:
         62:ba:93:ec:7e:89:9b:29:f6:e2:45:83:c0:a4:7a:37:a7:42:
         90:eb:db:76:68:99:68:41:f7:a7:5d:fa:d1:be:c1:5f:06:f0:
         da:ac:cf:a0:1a:2e:2f:87:7d:0d:32:8f:75:f0:63:79:2b:32:
         d8:04:65:fd:3a:87:3d:3a:bc:f5:f8:c2:93:5d:85:3f:4c:bf:
         a9:4f:fe:36:ab:29:b7:17:98:e5:05:30:fc:6a:02:49:f9:6a:
         65:17:6a:b4:05:b6:75:ba:ae:f4:fe:97:05:69:3c:2b:64:10:
         7e:49:3b:89:4d:1b:ad:43:1b:09:6e:fe:15:df:03:16:ea:da:
         64:15:04:75:83:f3:3a:3c:d6:77:d2:ac:2e:1f:8d:83:00:fe:
         28:6e:6b:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ5ncM1RR8Re2JNy8lEqZJRChmfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB
N0QzOURGNzAeFw0yNTAzMDYyMDUwNDdaFw0yNjAzMDUyMDU1NDdaMDMxMTAvBgNV
BAMTKDNGNDZBNkIzNzg3QjlFNUQ0Mzc4MDg3RkQwMUVBM0M4NUY4RjNCRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JyQSzQNPhaJYvV6PSLKPPCyc
Iyd55QTxoakJWHJ6G5OsnhqdpCLfUeUVH2qQchB5BhChCuLwsRBlaGoxPsHOd+hH
gqDYaCVNXKVFc+OayZoBwNQA4O5W9jfxRsgUXDWCH6vr/j30z0gJcJFQcv39c2DH
Rt7049AjrBq4rrg0N2+NM6cgE2sZ8tMekAuWJSnBWaG339D074smfj4ULG+FEis4
QxPSNYCheHTXQDBFKCe024VvThd/kGAKvi2pZdyXsbQ4VQiVtn5yMOgeTaND1G5M
a+C+oSpGmCT3x6xc1q6XOZNNYxB14g+FlvwO4BYgd3UqBM/p/83Pz0Lzn/pBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP0ams3h7nl1DeAh/0B6jyF+PO+YwHwYDVR0j
BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH
U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE
QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCeHVMcENmM3lhZTlNR2VCMmM2VEM5YXhCWkdaRFY1d2NRNXZmRm9wR1NFLzEv
MzEzNzM3MmUzNTM0MmUzMjM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxNvAwDQYJKoZIhvcNAQELBQADggEBACMVsW55
3V77oS9K8Y37X2n2zilt58E5pSHVTAjCUDmdowzdZNWVSJ3QP5HT3xlHhPxHNDyw
PLR0uLG0B2s9WhED5QMHErbBAkUdub7xJz7dDlhMENbllH0KTdsZWHDeUqNqXQvh
7ooGvEapjmK6k+x+iZsp9uJFg8CkejenQpDr23ZomWhB96dd+tG+wV8G8Nqsz6Aa
Li+HfQ0yj3XwY3krMtgEZf06hz06vPX4wpNdhT9Mv6lP/jarKbcXmOUFMPxqAkn5
amUXarQFtnW6rvT+lwVpPCtkEH5JO4lNG61DGwlu/hXfAxbq2mQVBHWD8zo81nfS
rC4fjYMA/ihuayc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:01:38 2025 by rpki-client