Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          sAzI4Y7jxURLFNmuTWAYlVl/JXZDbSKLThiIs6f/Uzc=
Subject key identifier:   5D:89:2A:8A:65:F1:76:76:9A:EF:23:A7:01:31:4A:09:44:89:0F:52
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       3405E6D45ECAC101AFCD04F5A7592AAB8FA537EA
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:09 +0000
ROA not before:           Sat 31 Aug 2024 14:08:09 +0000
ROA not after:            Sat 30 Aug 2025 14:13:09 +0000
asID:                     52772
IP address blocks:        177.39.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:05:e6:d4:5e:ca:c1:01:af:cd:04:f5:a7:59:2a:ab:8f:a5:37:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:09 2024 GMT
            Not After : Aug 30 14:13:09 2025 GMT
        Subject: CN=5D892A8A65F176769AEF23A701314A0944890F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:e0:0a:98:53:53:5a:d3:c3:a0:94:78:01:
                    a0:41:26:af:15:6c:0f:79:3a:0d:e6:ea:c2:17:fc:
                    bc:0e:36:63:65:7f:5b:86:dc:9d:bb:a5:4a:fd:7a:
                    ce:31:86:3c:4b:9d:b5:4b:58:49:50:d4:c9:88:0b:
                    56:b0:fc:1f:87:ff:4c:54:f3:4b:bb:a8:de:ec:0b:
                    d7:d0:be:4c:4f:b3:d5:fb:6c:89:bd:bd:95:6c:3f:
                    15:8c:9e:74:18:44:dd:16:00:97:9d:c4:63:b1:03:
                    f4:48:96:90:59:e6:28:9a:52:0a:04:f9:0b:8d:73:
                    9c:cc:3c:f6:d4:df:d6:96:ff:97:93:91:85:54:43:
                    0c:38:c7:90:45:7e:8a:7b:d8:8e:60:8b:95:9a:4d:
                    9c:7a:56:c7:e3:22:4f:ad:88:64:04:93:2d:7e:55:
                    4c:72:35:da:df:aa:f1:07:5f:c7:db:2c:47:93:66:
                    cd:23:01:0d:e7:01:61:fa:a5:d5:9c:55:49:fc:7e:
                    48:d3:af:fc:bd:14:b7:76:dd:5e:e2:10:8f:ea:2f:
                    d5:06:9d:ca:c8:84:e0:4c:76:ad:b3:23:e6:a0:80:
                    d2:5e:09:a6:c2:c6:63:37:87:75:ec:47:8e:45:8b:
                    11:76:0c:65:a2:e9:8a:f0:6e:95:52:db:57:04:66:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:2A:8A:65:F1:76:76:9A:EF:23:A7:01:31:4A:09:44:89:0F:52
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:f7:f1:b6:f7:74:19:92:63:4f:7c:9c:76:0e:e1:6d:a9:
         fe:8a:69:15:9d:15:21:56:bf:ac:bb:20:95:1b:8d:af:b7:7a:
         a9:bf:10:3c:2b:4e:1a:d8:03:95:2e:a8:30:f0:ac:42:54:b6:
         85:36:62:08:0d:b4:13:45:c1:ad:44:70:6a:b7:15:43:ea:d6:
         de:7e:63:08:df:74:c0:02:e7:60:10:38:e3:cf:be:47:02:2e:
         0d:42:1f:af:02:72:2f:3e:e4:57:89:30:13:19:27:fc:ca:2d:
         72:fc:be:89:c2:4e:c7:c5:ad:5d:75:bb:3e:e3:e1:f8:eb:c6:
         25:f2:b0:48:8f:20:e4:ea:a2:17:f5:f8:fe:d8:22:0d:cb:e9:
         6d:de:b2:72:3b:32:bb:f0:13:87:31:7d:cb:2f:3e:41:4e:1e:
         25:21:a3:38:2b:b8:fd:4c:42:c7:c1:83:b6:7b:d1:04:0c:97:
         91:7d:88:35:c9:57:1f:54:aa:51:20:16:c8:6d:23:8d:7a:ba:
         07:a7:ea:e5:73:9f:09:f3:12:a7:fb:a4:d1:94:1a:4e:8c:89:
         db:fb:88:cb:36:5e:e9:3c:05:16:a4:70:5d:43:21:7e:f6:a9:
         27:aa:aa:c4:4f:08:48:a9:37:49:67:17:cd:1d:53:0d:39:91:
         24:fc:ed:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNAXm1F7KwQGvzQT1p1kqq4+lN+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5OTJERDFCMjUyNUMxRjkwMDhCNjMzOUI5REIzRURB
NkU2MkU2NDAeFw0yNDA4MzExNDA4MDlaFw0yNTA4MzAxNDEzMDlaMDMxMTAvBgNV
BAMTKDVEODkyQThBNjVGMTc2NzY5QUVGMjNBNzAxMzE0QTA5NDQ4OTBGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTOAKmFNTWtPDoJR4AaBBJq8V
bA95Og3m6sIX/LwONmNlf1uG3J27pUr9es4xhjxLnbVLWElQ1MmIC1aw/B+H/0xU
80u7qN7sC9fQvkxPs9X7bIm9vZVsPxWMnnQYRN0WAJedxGOxA/RIlpBZ5iiaUgoE
+QuNc5zMPPbU39aW/5eTkYVUQww4x5BFfop72I5gi5WaTZx6VsfjIk+tiGQEky1+
VUxyNdrfqvEHX8fbLEeTZs0jAQ3nAWH6pdWcVUn8fkjTr/y9FLd23V7iEI/qL9UG
ncrIhOBMdq2zI+aggNJeCabCxmM3h3XsR45FixF2DGWi6YrwbpVS21cEZkRbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXYkqimXxdnaa7yOnATFKCUSJD1IwHwYDVR0j
BBgwFoAU55kt0bJSXB+QCLYzm52z7abmLmQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC9FNzk5MkREMUIyNTI1QzFGOTAwOEI2MzM5QjlEQjNFREE2RTYyRTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OTkyREQxQjI1MjVDMUY5
MDA4QjYzMzlCOURCM0VEQTZFNjJFNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzEzNzM3MmUzMzM5MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSefMA0GCSqGSIb3DQEBCwUAA4IBAQApK/fxtvd0
GZJjT3ycdg7hban+imkVnRUhVr+suyCVG42vt3qpvxA8K04a2AOVLqgw8KxCVLaF
NmIIDbQTRcGtRHBqtxVD6tbefmMI33TAAudgEDjjz75HAi4NQh+vAnIvPuRXiTAT
GSf8yi1y/L6Jwk7Hxa1ddbs+4+H468Yl8rBIjyDk6qIX9fj+2CINy+lt3rJyOzK7
8BOHMX3LLz5BTh4lIaM4K7j9TELHwYO2e9EEDJeRfYg1yVcfVKpRIBbIbSONeroH
p+rlc58J8xKn+6TRlBpOjInb+4jLNl7pPAUWpHBdQyF+9qknqqrETwhIqTdJZxfN
HVMNOZEk/O13
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:06:19 2025 by rpki-client