Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa
File:                     3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa (raw, json)
Hash identifier:          okgr57WagEbXbI57Bqyvpy84aiJYImjpIFHCbike7Rw=
Subject key identifier:   AF:08:06:B6:19:72:2F:92:66:11:C3:E7:2B:09:82:D7:84:7B:A6:D0
Certificate issuer:       /CN=E80901F1AE1AC03AEAAC22762D036F1E4C00904D
Certificate serial:       35D9F372E73EB330012D0256C543B82C0CAA7FB9
Authority key identifier: E8:09:01:F1:AE:1A:C0:3A:EA:AC:22:76:2D:03:6F:1E:4C:00:90:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa
Signing time:             Fri 12 Jan 2024 01:53:19 +0000
ROA not before:           Fri 12 Jan 2024 01:48:19 +0000
ROA not after:            Fri 10 Jan 2025 01:53:19 +0000
asID:                     263283
IP address blocks:        179.127.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d9:f3:72:e7:3e:b3:30:01:2d:02:56:c5:43:b8:2c:0c:aa:7f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80901F1AE1AC03AEAAC22762D036F1E4C00904D
        Validity
            Not Before: Jan 12 01:48:19 2024 GMT
            Not After : Jan 10 01:53:19 2025 GMT
        Subject: CN=AF0806B619722F926611C3E72B0982D7847BA6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:2c:8f:d4:08:47:0a:a9:60:17:48:c4:9d:
                    a7:6c:bd:d2:96:75:01:92:d8:f3:0e:1a:fa:54:7a:
                    df:26:53:24:b9:bd:ff:a4:00:1b:b7:74:79:18:63:
                    2d:71:96:0b:4e:7b:71:9e:aa:58:87:bf:35:74:85:
                    01:3f:9e:47:86:5e:e0:18:86:1a:be:11:f2:b4:61:
                    86:ef:fb:1a:8c:4d:bd:94:ed:41:6a:5e:eb:1d:ca:
                    77:81:78:ed:e3:de:ac:a5:90:03:21:09:f3:91:fb:
                    45:1a:84:b3:77:e8:80:a3:26:77:a1:f1:ff:2f:3b:
                    41:94:76:bc:8d:52:6b:de:4a:5d:40:83:a0:9d:98:
                    11:5e:a5:79:31:ba:05:d5:77:f2:f0:9e:a2:ed:91:
                    51:e3:14:57:d2:b1:b5:c1:d6:00:bc:cb:2c:98:a8:
                    cf:ff:52:98:55:0a:5e:80:23:0f:7e:75:e6:cb:76:
                    ed:d8:70:8d:55:b9:8a:bd:bf:26:1b:a5:42:f8:d9:
                    88:c2:79:3d:0a:ba:15:d5:d2:2d:c9:5f:a8:8d:14:
                    b2:68:4a:b4:bb:91:eb:bc:ae:18:0c:aa:c6:25:af:
                    ba:15:3e:ef:e8:0b:30:28:c2:d5:7c:6e:16:58:11:
                    cf:ed:92:b9:c5:ba:6f:b2:92:5c:dc:98:1b:64:18:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:06:B6:19:72:2F:92:66:11:C3:E7:2B:09:82:D7:84:7B:A6:D0
            X509v3 Authority Key Identifier:
                keyid:E8:09:01:F1:AE:1A:C0:3A:EA:AC:22:76:2D:03:6F:1E:4C:00:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:ad:a9:f3:08:f5:0a:35:d1:e7:01:5d:3a:c3:83:a7:03:
         f6:79:52:0e:f5:e1:64:96:8c:c6:ec:79:de:6a:15:55:72:41:
         cb:e1:57:5f:1d:1e:de:db:fa:5a:0e:df:9a:1a:4e:59:15:b8:
         3f:2d:0c:13:63:bf:e1:3b:c9:d3:9b:53:a7:0a:53:39:e2:01:
         09:f6:59:18:2f:c7:19:8c:df:6b:e1:62:1d:c2:f6:6a:b3:44:
         c0:00:36:c3:a4:3f:b7:72:6f:1b:ab:a8:8d:8a:8d:cf:54:02:
         ff:04:73:18:13:e9:ae:19:92:7d:5a:7c:c1:ba:0d:18:f1:56:
         f5:5d:20:8d:ec:10:6f:0f:0b:7a:db:56:49:9f:36:eb:1a:72:
         d5:6e:d8:c0:ff:99:c4:6d:a9:a2:97:21:49:10:c2:91:5e:12:
         54:34:1b:b6:3c:b6:31:b5:4e:1d:a9:49:fe:c3:ac:92:9b:24:
         c0:a4:46:bc:75:53:cb:81:96:1c:ae:d0:8a:01:07:4e:56:f9:
         85:af:b1:ce:2e:5a:9d:56:e9:bf:5c:37:2e:9b:02:10:56:37:
         98:9b:36:7b:b4:69:29:e5:d3:9c:8f:f4:6d:07:06:ef:af:09:
         02:17:73:4e:ec:ea:c2:e9:4f:1f:9a:da:bb:ab:77:f5:68:3d:
         dc:af:09:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNdnzcuc+szABLQJWxUO4LAyqf7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwOTAxRjFBRTFBQzAzQUVBQUMyMjc2MkQwMzZGMUU0
QzAwOTA0RDAeFw0yNDAxMTIwMTQ4MTlaFw0yNTAxMTAwMTUzMTlaMDMxMTAvBgNV
BAMTKEFGMDgwNkI2MTk3MjJGOTI2NjExQzNFNzJCMDk4MkQ3ODQ3QkE2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwCyP1AhHCqlgF0jEnadsvdKW
dQGS2PMOGvpUet8mUyS5vf+kABu3dHkYYy1xlgtOe3GeqliHvzV0hQE/nkeGXuAY
hhq+EfK0YYbv+xqMTb2U7UFqXusdyneBeO3j3qylkAMhCfOR+0UahLN36ICjJneh
8f8vO0GUdryNUmveSl1Ag6CdmBFepXkxugXVd/LwnqLtkVHjFFfSsbXB1gC8yyyY
qM//UphVCl6AIw9+debLdu3YcI1VuYq9vyYbpUL42YjCeT0KuhXV0i3JX6iNFLJo
SrS7keu8rhgMqsYlr7oVPu/oCzAowtV8bhZYEc/tkrnFum+yklzcmBtkGLytAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrwgGthlyL5JmEcPnKwmC14R7ptAwHwYDVR0j
BBgwFoAU6AkB8a4awDrqrCJ2LQNvHkwAkE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29MQXVDZUI4cVBBUHpUMkNIZ3VXeWJVNFRaQXhqZGdRQWlYNXJVajRI
aGEvMC9FODA5MDFGMUFFMUFDMDNBRUFBQzIyNzYyRDAzNkYxRTRDMDA5MDRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4MDkwMUYxQUUxQUMwM0FF
QUFDMjI3NjJEMDM2RjFFNEMwMDkwNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvTEF1Q2VCOHFQQVB6VDJDSGd1V3liVTRUWkF4amRnUUFpWDVyVWo0SGhhLzAv
MzEzNzM5MmUzMTMyMzcyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzf0gwDQYJKoZIhvcNAQELBQADggEBAJm/ranz
CPUKNdHnAV06w4OnA/Z5Ug714WSWjMbsed5qFVVyQcvhV18dHt7b+loO35oaTlkV
uD8tDBNjv+E7ydObU6cKUzniAQn2WRgvxxmM32vhYh3C9mqzRMAANsOkP7dybxur
qI2Kjc9UAv8EcxgT6a4Zkn1afMG6DRjxVvVdII3sEG8PC3rbVkmfNusactVu2MD/
mcRtqaKXIUkQwpFeElQ0G7Y8tjG1Th2pSf7DrJKbJMCkRrx1U8uBlhyu0IoBB05W
+YWvsc4uWp1W6b9cNy6bAhBWN5ibNnu0aSnl05yP9G0HBu+vCQIXc07s6sLpTx+a
2rurd/VoPdyvCWk=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:47 2025 by rpki-client