Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e312e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e312e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          z8uKdQk9fldC23YG72kiNcl8c8bRkqvFtZvSf0s/FT0=
Subject key identifier:   86:C8:5D:F0:4E:89:1F:0F:A1:A8:81:22:8C:BB:28:42:43:5B:06:9A
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       52FE907A1DB78B5FF5CBF863212CD1191823CFC3
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e312e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:06:31 +0000
ROA not before:           Wed 12 Apr 2023 11:01:31 +0000
ROA not after:            Wed 10 Apr 2024 11:06:31 +0000
asID:                     28135
IP address blocks:        177.46.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fe:90:7a:1d:b7:8b:5f:f5:cb:f8:63:21:2c:d1:19:18:23:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:01:31 2023 GMT
            Not After : Apr 10 11:06:31 2024 GMT
        Subject: CN=86C85DF04E891F0FA1A881228CBB2842435B069A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:c2:e7:28:97:58:99:07:79:56:c9:1d:8c:
                    dd:50:29:5a:f6:08:ae:f4:af:80:23:5c:a1:a9:ad:
                    3c:9f:06:06:20:25:de:21:fd:81:c0:2c:e4:8b:c3:
                    1b:ac:0f:d1:f2:da:67:00:c0:b7:c8:47:52:6a:63:
                    14:d2:8e:61:ad:6b:5b:78:7c:a7:39:21:11:bf:9e:
                    8a:29:54:46:4b:ec:e4:7c:98:7d:29:79:f1:9d:ce:
                    59:1d:41:3d:50:be:55:22:39:6c:69:7a:1e:f7:14:
                    3c:d2:7a:e3:35:22:21:e9:cf:b3:df:63:9a:78:3a:
                    e7:49:d5:ea:b2:ff:da:30:5a:90:fe:0a:e9:e9:65:
                    5a:9a:16:26:53:13:af:7c:9d:a2:4f:6c:cc:83:0f:
                    88:0a:59:c5:ac:88:34:d6:fe:f3:db:ae:e6:5f:33:
                    73:bc:2b:94:d6:ae:d6:53:12:99:e4:ee:55:e9:7e:
                    76:d8:68:a9:51:14:eb:c3:ef:f0:63:fc:68:d2:14:
                    b1:77:22:91:e1:e6:4a:3d:20:67:28:18:23:31:f4:
                    c1:33:24:e6:49:3f:0f:47:c0:12:17:b1:18:ef:b5:
                    b9:dc:fd:34:6f:2f:c9:f2:e2:dd:f8:67:bf:59:c2:
                    e9:0d:88:ef:fc:d1:21:0b:f8:9e:b1:c9:0f:fe:01:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C8:5D:F0:4E:89:1F:0F:A1:A8:81:22:8C:BB:28:42:43:5B:06:9A
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e312e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:52:4a:78:6e:bf:80:fd:ba:ac:48:60:3e:7b:98:57:83:ff:
         b1:cb:40:01:ad:e4:0f:08:aa:63:a3:6d:fe:e3:68:0b:db:8b:
         18:a7:ce:e0:60:c5:6e:4f:89:dc:6a:20:c7:c1:08:c6:86:20:
         0e:5b:27:b7:98:65:c3:84:03:a2:33:2e:7f:61:4f:dd:77:8d:
         e5:e9:1c:33:3f:b1:77:e5:98:33:a7:53:f2:ac:8d:fe:52:68:
         f5:7d:2c:16:2d:2f:d5:c4:24:e8:68:58:30:6a:80:cb:c2:fa:
         60:ce:25:1c:b7:f4:f4:20:26:25:61:55:8c:0a:de:3f:c0:ec:
         8d:f8:4f:08:f5:e5:f0:ed:0d:12:70:0a:fd:a9:7c:6f:0c:1f:
         57:84:34:25:8f:70:b0:f2:8d:02:ce:9d:6c:46:51:d5:43:43:
         3f:b6:3c:e7:3d:2f:c4:e5:bb:73:45:f2:70:aa:47:6d:63:b5:
         d9:90:d4:30:29:ec:27:b9:b9:52:60:56:97:c4:4c:b8:74:87:
         b1:0b:9e:88:ee:88:8c:e7:a2:9f:5e:8d:fc:74:98:b6:52:69:
         c5:55:53:46:b6:c6:7f:72:9c:03:c1:d6:e4:e6:b3:9e:42:58:
         b7:90:b4:35:46:a9:a3:b8:80:17:42:e4:b5:42:cf:e6:cd:6c:
         59:a7:6e:db
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUv6Qeh23i1/1y/hjISzRGRgjz8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yMzA0MTIxMTAxMzFaFw0yNDA0MTAxMTA2MzFaMDMxMTAvBgNV
BAMTKDg2Qzg1REYwNEU4OTFGMEZBMUE4ODEyMjhDQkIyODQyNDM1QjA2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZ8LnKJdYmQd5VskdjN1QKVr2
CK70r4AjXKGprTyfBgYgJd4h/YHALOSLwxusD9Hy2mcAwLfIR1JqYxTSjmGta1t4
fKc5IRG/noopVEZL7OR8mH0pefGdzlkdQT1QvlUiOWxpeh73FDzSeuM1IiHpz7Pf
Y5p4OudJ1eqy/9owWpD+CunpZVqaFiZTE698naJPbMyDD4gKWcWsiDTW/vPbruZf
M3O8K5TWrtZTEpnk7lXpfnbYaKlRFOvD7/Bj/GjSFLF3IpHh5ko9IGcoGCMx9MEz
JOZJPw9HwBIXsRjvtbnc/TRvL8ny4t34Z79ZwukNiO/80SEL+J6xyQ/+Aep9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUhshd8E6JHw+hqIEijLsoQkNbBpowHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzNzM3MmUzNDM2MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxLgEwDQYJKoZIhvcNAQELBQADggEBACNSSnhuv4D9uqxI
YD57mFeD/7HLQAGt5A8IqmOjbf7jaAvbixinzuBgxW5PidxqIMfBCMaGIA5bJ7eY
ZcOEA6IzLn9hT913jeXpHDM/sXflmDOnU/Ksjf5SaPV9LBYtL9XEJOhoWDBqgMvC
+mDOJRy39PQgJiVhVYwK3j/A7I34Twj15fDtDRJwCv2pfG8MH1eENCWPcLDyjQLO
nWxGUdVDQz+2POc9L8Tlu3NF8nCqR21jtdmQ1DAp7Ce5uVJgVpfETLh0h7ELnoju
iIznop9ejfx0mLZSacVVU0a2xn9ynAPB1uTms55CWLeQtDVGqaO4gBdC5LVCz+bN
bFmnbts=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:52 2025 by rpki-client