Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37392e302f32342d3234203d3e20323632343630.roa
File:                     3137372e35332e37392e302f32342d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          En5vggIwDK5umgxz8SIM6q2v/aVIKExah6WZTag14kk=
Subject key identifier:   F4:B8:67:4F:D5:A4:15:14:65:10:9D:69:87:79:73:10:F4:D2:F7:9E
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       34814FAA44E46EB90EF8715DDCF8150A0E6ADACF
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37392e302f32342d3234203d3e20323632343630.roa
Signing time:             Fri 19 Apr 2024 12:36:59 +0000
ROA not before:           Fri 19 Apr 2024 12:31:59 +0000
ROA not after:            Fri 18 Apr 2025 12:36:59 +0000
asID:                     262460
IP address blocks:        177.53.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:4f:aa:44:e4:6e:b9:0e:f8:71:5d:dc:f8:15:0a:0e:6a:da:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Apr 19 12:31:59 2024 GMT
            Not After : Apr 18 12:36:59 2025 GMT
        Subject: CN=F4B8674FD5A4151465109D6987797310F4D2F79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:bd:d4:4f:3b:6b:11:4a:62:b3:6b:3b:bd:
                    b3:05:bc:ab:27:cc:4f:16:31:0d:c1:72:41:56:43:
                    49:a2:02:32:df:a6:53:74:cc:9f:98:a3:b5:fd:dc:
                    c4:54:8f:ed:8a:24:5f:85:79:d7:ea:b8:5c:a4:1b:
                    17:f6:5e:4f:a4:e1:58:07:cd:ec:99:1c:6c:8a:9d:
                    f2:74:36:6f:e6:9e:0b:d2:f3:15:ef:e7:91:07:a2:
                    96:a7:ef:1f:0a:05:f9:c9:3a:71:64:28:bb:9b:5f:
                    cb:6b:51:d9:9b:be:b3:6a:5e:f9:90:d6:1d:46:dc:
                    46:ff:ff:0d:b4:a0:29:b6:a9:6c:4b:dc:97:21:ca:
                    79:cc:43:b6:eb:30:bf:40:d4:75:ff:e4:d2:52:f2:
                    a9:93:29:8e:bd:b5:30:57:58:4a:52:a5:96:3f:68:
                    bf:54:bf:f7:13:65:25:16:a6:97:c7:40:34:77:18:
                    a8:02:8a:be:7b:bb:0a:45:9b:b3:d6:e1:81:ca:89:
                    2b:8c:52:99:3b:e2:fc:b8:d4:9c:a1:8d:1c:16:ca:
                    14:6e:97:39:5a:bb:75:04:0f:8c:9c:7c:98:6f:1b:
                    ec:de:ee:0b:01:e1:5a:2d:ea:58:8a:53:ee:1f:ca:
                    19:01:36:2d:88:d4:1c:93:bc:55:88:1a:b0:45:c7:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:67:4F:D5:A4:15:14:65:10:9D:69:87:79:73:10:F4:D2:F7:9E
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37392e302f32342d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:b7:3d:e7:27:40:4c:a3:6f:44:85:37:d6:4d:03:02:29:
         3f:df:31:79:df:fb:cf:2e:1d:4f:08:7c:69:c0:f2:5e:f1:80:
         98:ba:35:2a:90:8f:47:40:42:e8:17:84:03:17:b4:70:02:57:
         05:05:b9:65:a3:0e:ae:b9:05:19:14:a5:ad:be:95:9a:05:6b:
         73:30:ee:fc:5d:b9:39:b9:b2:2a:1d:3e:d7:af:0c:60:ac:0f:
         88:48:77:72:2b:f3:86:0c:29:13:d5:2b:7b:8b:7a:67:af:40:
         96:2d:4e:16:91:f0:78:eb:68:6a:e4:ba:ef:d0:ed:c0:15:7c:
         9a:d8:1f:03:17:2c:32:05:47:c5:27:60:6d:40:e4:68:23:2a:
         fd:ff:44:18:de:b3:c0:90:67:02:af:65:e9:7f:55:07:3e:d3:
         78:e7:e8:0c:a5:ce:70:11:8c:e3:bb:cf:eb:12:71:0e:28:99:
         dc:42:5b:19:e5:ed:b8:b7:c2:9f:57:30:8a:08:1d:0f:de:76:
         28:1c:da:0d:74:fc:5c:83:2f:85:97:c5:83:55:4d:ef:5a:4b:
         a7:c3:f0:df:d9:4c:99:59:b1:c5:4c:25:23:ea:17:85:16:cb:
         47:ef:0b:a5:c8:e3:7d:ab:92:ec:bb:ea:3f:ec:b0:60:67:a2:
         30:c6:44:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNIFPqkTkbrkO+HFd3PgVCg5q2s8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzREY1MjUxNTgyMDZFMEI2NkM4RkQyM0Q4NkIxNzgw
RjY0MjAwMjAeFw0yNDA0MTkxMjMxNTlaFw0yNTA0MTgxMjM2NTlaMDMxMTAvBgNV
BAMTKEY0Qjg2NzRGRDVBNDE1MTQ2NTEwOUQ2OTg3Nzk3MzEwRjREMkY3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fL3UTztrEUpis2s7vbMFvKsn
zE8WMQ3BckFWQ0miAjLfplN0zJ+Yo7X93MRUj+2KJF+FedfquFykGxf2Xk+k4VgH
zeyZHGyKnfJ0Nm/mngvS8xXv55EHopan7x8KBfnJOnFkKLubX8trUdmbvrNqXvmQ
1h1G3Eb//w20oCm2qWxL3JchynnMQ7brML9A1HX/5NJS8qmTKY69tTBXWEpSpZY/
aL9Uv/cTZSUWppfHQDR3GKgCir57uwpFm7PW4YHKiSuMUpk74vy41JyhjRwWyhRu
lzlau3UED4ycfJhvG+ze7gsB4Vot6liKU+4fyhkBNi2I1ByTvFWIGrBFx6SzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9LhnT9WkFRRlEJ1ph3lzEPTS954wHwYDVR0j
BBgwFoAUOj31JRWCBuC2bI/SPYaxeA9kIAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC8zQTNERjUyNTE1ODIwNkUwQjY2QzhGRDIzRDg2QjE3ODBGNjQyMDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0RGNTI1MTU4MjA2RTBC
NjZDOEZEMjNEODZCMTc4MEY2NDIwMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNzM3MmUzNTMzMmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTVPMA0GCSqGSIb3DQEBCwUAA4IBAQCCqbc95ydA
TKNvRIU31k0DAik/3zF53/vPLh1PCHxpwPJe8YCYujUqkI9HQELoF4QDF7RwAlcF
Bbllow6uuQUZFKWtvpWaBWtzMO78Xbk5ubIqHT7XrwxgrA+ISHdyK/OGDCkT1St7
i3pnr0CWLU4WkfB462hq5Lrv0O3AFXya2B8DFywyBUfFJ2BtQORoIyr9/0QY3rPA
kGcCr2Xpf1UHPtN45+gMpc5wEYzju8/rEnEOKJncQlsZ5e24t8KfVzCKCB0P3nYo
HNoNdPxcgy+Fl8WDVU3vWkunw/Df2UyZWbHFTCUj6heFFstH7wulyON9q5Lsu+o/
7LBgZ6IwxkQH
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:33 2025 by rpki-client