Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
File:                     3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          sihaguZF9qXOXBYmWAQ2FXBEJyK6UP1+PoIj705cu7o=
Subject key identifier:   B9:7B:91:5D:8F:16:F5:03:7F:D9:06:B6:D4:19:94:AB:21:51:01:69
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       632B2D8BD93DC5CF9D9BF54336A8C55044CD8752
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 05 Mar 2025 21:00:00 +0000
ROA not before:           Wed 05 Mar 2025 20:55:00 +0000
ROA not after:            Wed 04 Mar 2026 21:00:00 +0000
asID:                     53055
IP address blocks:        177.234.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2b:2d:8b:d9:3d:c5:cf:9d:9b:f5:43:36:a8:c5:50:44:cd:87:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Mar  5 20:55:00 2025 GMT
            Not After : Mar  4 21:00:00 2026 GMT
        Subject: CN=B97B915D8F16F5037FD906B6D41994AB21510169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:f9:5f:02:06:d8:1b:9c:4d:1d:f4:55:b1:
                    46:ca:9f:cd:99:67:21:81:5a:5b:24:3c:59:a8:dc:
                    70:bb:ac:18:2f:b9:26:c3:8c:24:d4:a7:83:37:24:
                    fb:82:c9:d4:8d:03:6b:d1:47:5b:64:d2:ad:71:ba:
                    9d:71:8d:a3:6e:16:bb:f4:ce:4c:b3:70:49:e9:8a:
                    0c:cc:cd:7e:23:56:ac:06:31:47:c7:1e:6e:4d:ae:
                    d3:35:bd:70:b5:7d:d2:58:59:b7:65:68:c2:ab:bc:
                    81:34:71:8a:24:e7:47:f0:a0:51:74:1b:b1:02:83:
                    a6:d3:d0:9f:ec:12:29:5c:98:37:a0:8f:e2:2b:f2:
                    c6:78:d2:d6:d9:03:a9:6b:22:3c:d2:2c:fe:f6:22:
                    8c:8a:2e:d8:fd:ab:80:c6:16:67:fc:6b:a3:ec:d7:
                    cf:31:9b:ad:dc:f6:d5:16:65:eb:1e:7c:b1:2f:40:
                    17:69:2d:af:8d:fb:24:7e:3b:d7:c9:15:ad:c1:43:
                    13:b5:3f:50:91:93:35:25:cf:68:f8:67:9e:25:02:
                    c6:51:ad:b9:9e:b6:9b:f8:e8:a9:3e:b4:66:d2:eb:
                    ff:bb:f5:67:5a:1d:8b:18:10:a9:6e:78:20:f3:7f:
                    5d:69:be:a0:da:4f:0e:3e:77:fe:b2:7d:88:4f:bd:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:91:5D:8F:16:F5:03:7F:D9:06:B6:D4:19:94:AB:21:51:01:69
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:e3:47:ba:1a:c7:32:b3:73:4e:47:90:41:5d:d9:94:c6:
         4d:1e:f0:54:21:d2:cc:d9:48:fb:2a:ee:4e:82:87:43:57:ae:
         5c:21:26:ed:4f:f5:d9:2a:f9:0d:73:ff:f8:18:2f:bb:49:6a:
         c2:61:86:a9:26:0e:65:54:51:e3:40:37:1f:37:14:91:35:76:
         93:1c:42:fa:42:35:1d:cd:29:f1:76:d9:a4:62:b5:05:c4:ec:
         ac:9e:bb:2a:66:e4:b4:73:91:c6:7a:46:4c:8f:ba:d2:0e:cf:
         b7:57:d2:f4:af:bc:69:1d:92:70:4b:8e:0d:5a:e1:1b:da:7d:
         8e:c8:85:df:d4:57:7f:09:77:6a:8e:3b:15:4a:a6:e3:84:80:
         70:cb:ab:3c:1c:06:95:5c:b6:97:cb:0a:c1:fd:8b:aa:f1:ee:
         19:22:8b:19:a8:c2:c2:40:7b:13:e5:2a:e1:97:25:26:9e:9e:
         3c:f2:6b:5e:bb:c6:de:33:ec:82:80:6c:9e:34:57:61:8d:d5:
         cd:d2:d8:90:ec:74:34:1e:3f:a6:9f:4f:d4:9f:8a:89:f8:20:
         64:67:88:1e:aa:cc:7f:ea:32:3d:47:89:51:30:55:75:ff:92:
         0d:9e:3b:0d:c9:06:e5:0b:51:d4:c9:54:10:9c:30:89:6f:a6:
         17:47:2a:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYysti9k9xc+dm/VDNqjFUETNh1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdBQ0ZCNDUxNzYyM0IwRUEyOUNGRTIxQUVEOTlFMDIw
RUM0MzIzOTAeFw0yNTAzMDUyMDU1MDBaFw0yNjAzMDQyMTAwMDBaMDMxMTAvBgNV
BAMTKEI5N0I5MTVEOEYxNkY1MDM3RkQ5MDZCNkQ0MTk5NEFCMjE1MTAxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasPlfAgbYG5xNHfRVsUbKn82Z
ZyGBWlskPFmo3HC7rBgvuSbDjCTUp4M3JPuCydSNA2vRR1tk0q1xup1xjaNuFrv0
zkyzcEnpigzMzX4jVqwGMUfHHm5NrtM1vXC1fdJYWbdlaMKrvIE0cYok50fwoFF0
G7ECg6bT0J/sEilcmDegj+Ir8sZ40tbZA6lrIjzSLP72IoyKLtj9q4DGFmf8a6Ps
188xm63c9tUWZesefLEvQBdpLa+N+yR+O9fJFa3BQxO1P1CRkzUlz2j4Z54lAsZR
rbmetpv46Kk+tGbS6/+79WdaHYsYEKlueCDzf11pvqDaTw4+d/6yfYhPvSh5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuXuRXY8W9QN/2Qa21BmUqyFRAWkwHwYDVR0j
BBgwFoAUp6z7RRdiOw6inP4hrtmeAg7EMjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21WOGNDcWt6NDllQWhHaEVnUEJhYXZ4Q1cyWkRnRWlFWnpmWm11SlBD
V0wvMi9BN0FDRkI0NTE3NjIzQjBFQTI5Q0ZFMjFBRUQ5OUUwMjBFQzQzMjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QUNGQjQ1MTc2MjNCMEVB
MjlDRkUyMUFFRDk5RTAyMEVDNDMyMzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtVjhjQ3FrejQ5ZUFoR2hFZ1BCYWF2eENXMlpEZ0VpRVp6ZlptdUpQQ1dMLzIv
MzEzNzM3MmUzMjMzMzQyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASx6pAwDQYJKoZIhvcNAQELBQADggEBAADL40e6
Gscys3NOR5BBXdmUxk0e8FQh0szZSPsq7k6Ch0NXrlwhJu1P9dkq+Q1z//gYL7tJ
asJhhqkmDmVUUeNANx83FJE1dpMcQvpCNR3NKfF22aRitQXE7Kyeuypm5LRzkcZ6
RkyPutIOz7dX0vSvvGkdknBLjg1a4RvafY7Ihd/UV38Jd2qOOxVKpuOEgHDLqzwc
BpVctpfLCsH9i6rx7hkiixmowsJAexPlKuGXJSaenjzya167xt4z7IKAbJ40V2GN
1c3S2JDsdDQeP6afT9Sfion4IGRniB6qzH/qMj1HiVEwVXX/kg2eOw3JBuULUdTJ
VBCcMIlvphdHKi4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:46:21 2025 by rpki-client