Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa
File:                     3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (raw, json)
Hash identifier:          2PNhElcg7Mx6AzGTJNJzEeoiimZImJMyssS8EtLNr8M=
Subject key identifier:   AE:79:1C:8E:D2:34:61:9B:02:02:0D:61:0E:33:E7:75:7B:19:B9:C7
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       6DB0D8BDC96582C1132EC923BE1A8229E2DA2674
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa
Signing time:             Thu 06 Mar 2025 04:00:15 +0000
ROA not before:           Thu 06 Mar 2025 03:55:15 +0000
ROA not after:            Thu 05 Mar 2026 04:00:15 +0000
asID:                     270899
IP address blocks:        177.91.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b0:d8:bd:c9:65:82:c1:13:2e:c9:23:be:1a:82:29:e2:da:26:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Mar  6 03:55:15 2025 GMT
            Not After : Mar  5 04:00:15 2026 GMT
        Subject: CN=AE791C8ED234619B02020D610E33E7757B19B9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:bb:3e:42:4e:1a:28:82:5c:a3:90:60:45:
                    48:6a:e6:79:47:67:6b:91:02:2a:fc:45:06:76:69:
                    d0:e9:6d:bc:bc:c6:28:5d:e0:00:b0:6c:35:81:50:
                    7d:89:ff:d0:57:ae:9c:a3:14:eb:88:1d:b0:72:6e:
                    3d:95:59:42:1d:17:8d:a9:67:e6:d8:ba:61:02:e5:
                    6a:88:3c:a5:a7:d2:6c:97:a6:e3:99:64:59:47:fb:
                    f7:e8:e8:0c:3c:8a:6c:0a:43:56:43:bf:39:6e:d3:
                    ea:d2:b5:4a:18:26:dc:57:3d:7b:5a:32:08:c6:26:
                    45:18:9a:6c:19:a6:76:ac:ac:a5:6e:16:10:b8:72:
                    92:1a:3c:3e:48:0a:d9:0f:14:46:ef:86:60:5a:0e:
                    9c:bf:9b:4c:98:42:2b:dd:b2:e2:c5:12:0b:26:e9:
                    23:57:84:59:91:e3:6d:4a:02:26:96:47:41:45:b5:
                    24:30:0a:38:95:ce:ec:1e:3a:fa:0e:99:8d:92:2c:
                    12:d1:38:4c:13:30:e9:23:5c:00:02:cb:58:7e:22:
                    d3:15:54:75:a0:d1:98:2f:96:fa:50:21:13:a8:b2:
                    de:75:fa:de:4b:53:26:d6:dc:c1:1d:52:5c:9f:d3:
                    26:35:91:83:67:c9:dc:b9:68:fc:3f:6e:e1:8a:ba:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:79:1C:8E:D2:34:61:9B:02:02:0D:61:0E:33:E7:75:7B:19:B9:C7
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:50:e7:c9:60:c6:ca:92:36:5d:d5:59:c7:d8:8e:1f:d7:
         a7:c6:0a:53:9d:4b:8c:c8:33:04:47:45:e6:7f:a9:9b:73:91:
         7a:87:9f:3a:68:2c:e7:d8:35:11:59:bc:2d:e3:a5:88:7d:99:
         ce:6d:fe:7e:b4:ac:24:c1:4d:1c:f6:85:b7:d9:90:0f:70:76:
         6b:50:eb:ce:6e:fa:e7:33:9c:cc:ec:c4:a6:dc:0f:a8:a5:05:
         e3:55:8a:3d:b3:53:cc:0a:66:37:60:43:7e:a6:34:70:37:aa:
         bd:7d:b7:d9:9b:14:e1:6d:f8:e2:9b:55:52:d3:ae:49:7d:16:
         f0:93:c7:c0:81:62:56:6a:a2:dc:7e:79:f1:60:e7:3a:e7:55:
         0a:1d:04:90:cb:53:ff:96:ad:a1:53:08:38:a3:81:35:6b:bb:
         71:f2:f5:48:a5:4a:1b:4e:46:d6:34:9c:52:03:1c:c6:e0:48:
         2e:eb:c2:d8:94:f9:4a:51:36:bc:9d:16:d3:5a:b0:6d:9a:4d:
         10:b1:95:c5:c8:0a:e0:41:11:94:ff:32:f0:c1:42:26:5c:76:
         be:e2:63:c2:ec:16:8a:5e:45:7b:a4:5f:bb:3e:f5:3e:48:af:
         24:85:02:e6:b6:5d:12:3a:54:c9:d4:c3:a3:b8:2d:64:a4:f8:
         cc:5b:68:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbbDYvcllgsETLskjvhqCKeLaJnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCOTlCNEExQ0Q1NkIxQzdDMTA0RkEyNUVGREU1MTg1
OTZGRDIyMTAeFw0yNTAzMDYwMzU1MTVaFw0yNjAzMDUwNDAwMTVaMDMxMTAvBgNV
BAMTKEFFNzkxQzhFRDIzNDYxOUIwMjAyMEQ2MTBFMzNFNzc1N0IxOUI5QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Mbs+Qk4aKIJco5BgRUhq5nlH
Z2uRAir8RQZ2adDpbby8xihd4ACwbDWBUH2J/9BXrpyjFOuIHbBybj2VWUIdF42p
Z+bYumEC5WqIPKWn0myXpuOZZFlH+/fo6Aw8imwKQ1ZDvzlu0+rStUoYJtxXPXta
MgjGJkUYmmwZpnasrKVuFhC4cpIaPD5ICtkPFEbvhmBaDpy/m0yYQivdsuLFEgsm
6SNXhFmR421KAiaWR0FFtSQwCjiVzuweOvoOmY2SLBLROEwTMOkjXAACy1h+ItMV
VHWg0ZgvlvpQIROost51+t5LUybW3MEdUlyf0yY1kYNnydy5aPw/buGKumU7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrnkcjtI0YZsCAg1hDjPndXsZuccwHwYDVR0j
BBgwFoAUnbmbShzVaxx8EE+iXv3lGFlv0iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pq
N3MvMS85REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQjk5QjRBMUNENTZCMUM3
QzEwNEZBMjVFRkRFNTE4NTk2RkQyMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWd01FcDVFbkpTSzdUYUNqYnU1RHFIWVNUWldhOFJ3cWFyOUFjQUNKajdzLzEv
MzEzNzM3MmUzOTMxMmUzMjMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxW+QwDQYJKoZIhvcNAQELBQADggEBADkcUOfJ
YMbKkjZd1VnH2I4f16fGClOdS4zIMwRHReZ/qZtzkXqHnzpoLOfYNRFZvC3jpYh9
mc5t/n60rCTBTRz2hbfZkA9wdmtQ685u+ucznMzsxKbcD6ilBeNVij2zU8wKZjdg
Q36mNHA3qr19t9mbFOFt+OKbVVLTrkl9FvCTx8CBYlZqotx+efFg5zrnVQodBJDL
U/+WraFTCDijgTVru3Hy9UilShtORtY0nFIDHMbgSC7rwtiU+UpRNrydFtNasG2a
TRCxlcXICuBBEZT/MvDBQiZcdr7iY8LsFopeRXukX7s+9T5IrySFAua2XRI6VMnU
w6O4LWSk+MxbaKw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:37 2025 by rpki-client