Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37372e302f32342d3234203d3e20323731313136.roa
File:                     3137392e34382e37372e302f32342d3234203d3e20323731313136.roa (raw, json)
Hash identifier:          UAhuNKEqY4n9V27SRF1TASUksnTzHm2nIrIjfEy0tMM=
Subject key identifier:   D0:99:C7:34:5A:2B:00:BA:DA:AA:C8:95:23:9C:AD:6F:D0:F5:28:F2
Certificate issuer:       /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial:       2A9F3CD7E7842F576EDB237B785B8EC3530771AC
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37372e302f32342d3234203d3e20323731313136.roa
Signing time:             Tue 21 May 2024 17:12:53 +0000
ROA not before:           Tue 21 May 2024 17:07:53 +0000
ROA not after:            Tue 20 May 2025 17:12:53 +0000
asID:                     271116
IP address blocks:        179.48.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9f:3c:d7:e7:84:2f:57:6e:db:23:7b:78:5b:8e:c3:53:07:71:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
        Validity
            Not Before: May 21 17:07:53 2024 GMT
            Not After : May 20 17:12:53 2025 GMT
        Subject: CN=D099C7345A2B00BADAAAC895239CAD6FD0F528F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:33:b5:a1:0b:c8:27:4f:38:1c:e3:f6:7a:
                    f4:cf:3c:50:ea:fd:19:10:44:ae:35:5b:54:23:10:
                    cc:77:82:fa:29:2f:d1:72:24:38:92:20:a7:ba:a9:
                    10:0b:cc:7c:23:df:05:68:ce:8d:f8:d7:4a:05:8f:
                    c3:ff:6a:31:f9:92:e7:ea:65:85:61:9d:c0:63:ea:
                    30:fe:ad:64:ae:88:e9:3f:b8:e8:c6:e4:7a:91:20:
                    38:6b:c4:47:bd:fe:79:58:ce:57:4b:53:f5:65:67:
                    3e:fa:cc:6f:27:42:a6:ef:4b:2a:7a:ab:61:94:d7:
                    89:73:7b:69:6e:ec:fc:0e:8a:09:0a:f5:a8:70:56:
                    71:d0:dd:36:3e:56:08:d3:a5:39:01:e8:61:98:14:
                    99:05:bc:03:da:70:3a:49:54:84:9e:44:ad:4a:d7:
                    81:fb:cb:5f:47:c2:46:9c:e0:ec:20:e7:f3:d2:9f:
                    b0:03:28:26:4d:14:79:ed:c1:56:9a:a1:44:46:e2:
                    c3:d9:ec:3c:a7:60:d6:cb:ab:88:a2:c7:7b:ba:08:
                    63:63:e4:fe:e1:72:70:36:9d:11:cc:cc:b6:d2:ba:
                    f5:21:2a:de:e7:87:44:f7:46:25:10:f2:37:e0:9b:
                    af:e8:13:17:8d:49:1e:a9:23:2d:93:4e:f5:5e:df:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:C7:34:5A:2B:00:BA:DA:AA:C8:95:23:9C:AD:6F:D0:F5:28:F2
            X509v3 Authority Key Identifier:
                keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37372e302f32342d3234203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:75:33:80:d0:9b:ae:fc:e4:79:51:fe:03:c0:a7:1a:f8:05:
         cd:80:43:d8:09:85:ba:82:85:3b:f2:04:61:c9:e6:6b:b5:aa:
         b6:59:36:c3:67:b9:b5:61:81:42:cb:9c:8d:66:97:3e:f3:70:
         72:92:90:b5:4c:fb:04:5a:fa:40:0c:10:58:09:f7:28:9d:89:
         f8:78:41:07:c9:a7:58:76:17:67:d5:4e:6e:a3:eb:63:aa:72:
         f3:a8:71:8b:0f:76:c7:6e:7e:96:91:a3:eb:d9:bc:25:56:da:
         58:32:25:99:b1:5c:49:0e:8f:a0:96:f6:b7:a2:b4:42:f4:c6:
         63:82:ac:4f:60:69:98:a2:c0:86:bc:23:63:db:2f:c8:9f:ed:
         48:f0:cb:6f:13:3a:ec:87:60:49:a2:c5:5a:f3:f4:95:06:b4:
         38:be:13:06:d4:1c:1c:43:77:d7:bd:84:90:47:6c:29:ed:c6:
         07:07:71:27:1f:05:3e:54:f5:ce:b0:00:d8:20:df:bf:da:ef:
         4d:14:3b:90:25:b5:a7:ab:d0:a9:7e:08:c7:af:d1:12:84:8e:
         6b:c6:b3:07:cb:8d:d3:73:d8:b4:bc:c1:b3:da:e7:8c:36:88:
         80:d7:db:5c:34:d9:8c:74:df:50:d0:94:13:19:85:25:9d:cd:
         bc:35:15:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKp881+eEL1du2yN7eFuOw1MHcawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZBMjQxNTdBODI3Qzk3OTg0QzdDQUZCRUEyMDc2RjZF
NzI4MjUyRDAeFw0yNDA1MjExNzA3NTNaFw0yNTA1MjAxNzEyNTNaMDMxMTAvBgNV
BAMTKEQwOTlDNzM0NUEyQjAwQkFEQUFBQzg5NTIzOUNBRDZGRDBGNTI4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNjO1oQvIJ084HOP2evTPPFDq
/RkQRK41W1QjEMx3gvopL9FyJDiSIKe6qRALzHwj3wVozo3410oFj8P/ajH5kufq
ZYVhncBj6jD+rWSuiOk/uOjG5HqRIDhrxEe9/nlYzldLU/VlZz76zG8nQqbvSyp6
q2GU14lze2lu7PwOigkK9ahwVnHQ3TY+VgjTpTkB6GGYFJkFvAPacDpJVISeRK1K
14H7y19Hwkac4Owg5/PSn7ADKCZNFHntwVaaoURG4sPZ7DynYNbLq4iix3u6CGNj
5P7hcnA2nRHMzLbSuvUhKt7nh0T3RiUQ8jfgm6/oExeNSR6pIy2TTvVe3431AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0JnHNForALraqsiVI5ytb9D1KPIwHwYDVR0j
BBgwFoAUv6JBV6gnyXmEx8r76iB29ucoJS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNERnhvdVI3RUtHVFJ6M1piZlNCdWh5MjRQUHF1Yll3clhlUVQ2R1VS
RzUvMC9CRkEyNDE1N0E4MjdDOTc5ODRDN0NBRkJFQTIwNzZGNkU3MjgyNTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQTI0MTU3QTgyN0M5Nzk4
NEM3Q0FGQkVBMjA3NkY2RTcyODI1MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzREZ4b3VSN0VLR1RSejNaYmZTQnVoeTI0UFBxdWJZd3JYZVFUNkdVUkc1LzAv
MzEzNzM5MmUzNDM4MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzEzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAszBNMA0GCSqGSIb3DQEBCwUAA4IBAQBfdTOA0Juu
/OR5Uf4DwKca+AXNgEPYCYW6goU78gRhyeZrtaq2WTbDZ7m1YYFCy5yNZpc+83By
kpC1TPsEWvpADBBYCfconYn4eEEHyadYdhdn1U5uo+tjqnLzqHGLD3bHbn6WkaPr
2bwlVtpYMiWZsVxJDo+glva3orRC9MZjgqxPYGmYosCGvCNj2y/In+1I8MtvEzrs
h2BJosVa8/SVBrQ4vhMG1BwcQ3fXvYSQR2wp7cYHB3EnHwU+VPXOsADYIN+/2u9N
FDuQJbWnq9CpfgjHr9EShI5rxrMHy43Tc9i0vMGz2ueMNoiA19tcNNmMdN9Q0JQT
GYUlnc28NRVV
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:17:55 2025 by rpki-client