Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37372e302f32342d3234203d3e20323731333631.roa
File:                     3137392e302e37372e302f32342d3234203d3e20323731333631.roa (raw, json)
Hash identifier:          B+pTW8wfBJvjQTx4lGASOnsDnZFvLdZz6eWvxYZztUQ=
Subject key identifier:   99:38:6D:45:80:DB:FE:69:03:F0:39:93:8B:56:A4:68:48:86:91:02
Certificate issuer:       /CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
Certificate serial:       161D64FD0D77B175D4521E047AE022048B37E584
Authority key identifier: F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37372e302f32342d3234203d3e20323731333631.roa
Signing time:             Thu 13 Feb 2025 18:36:47 +0000
ROA not before:           Thu 13 Feb 2025 18:31:47 +0000
ROA not after:            Thu 12 Feb 2026 18:36:47 +0000
asID:                     271361
IP address blocks:        179.0.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:64:fd:0d:77:b1:75:d4:52:1e:04:7a:e0:22:04:8b:37:e5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
        Validity
            Not Before: Feb 13 18:31:47 2025 GMT
            Not After : Feb 12 18:36:47 2026 GMT
        Subject: CN=99386D4580DBFE6903F039938B56A46848869102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:f7:ac:ea:cf:e7:93:ac:ea:17:35:09:53:
                    ad:48:25:d6:aa:5d:f1:6d:07:05:83:b1:33:d4:e4:
                    bb:6e:3a:c8:8e:b6:0c:5a:17:cb:4f:ef:6f:f0:5b:
                    e3:c5:70:48:86:c5:d7:23:80:51:b5:56:f7:6e:52:
                    2d:7f:b0:db:fb:ec:b9:b7:60:06:7a:5f:a5:e3:f8:
                    08:23:ac:86:25:8d:ef:26:d2:4f:0f:ef:5d:42:c9:
                    20:e4:6b:c9:5b:bd:14:36:05:7b:e9:39:29:18:57:
                    d5:53:ee:f6:d2:bf:bc:52:ba:6c:05:f0:bb:f1:47:
                    9a:3d:d7:d3:b7:3b:70:61:0e:3b:3e:eb:b7:08:5e:
                    ea:b2:02:87:6b:68:d0:88:48:84:aa:08:40:d6:66:
                    0a:05:86:b9:27:ce:4c:ea:2b:ed:f6:78:d0:8d:bf:
                    92:16:1f:52:70:e7:71:9a:63:08:54:44:21:ae:bb:
                    da:b7:1d:43:a0:ad:73:05:8a:f3:34:87:e2:22:55:
                    04:1e:3c:b1:e1:a5:74:a7:8f:e4:50:93:9e:fb:fb:
                    dc:34:3a:59:d0:dd:43:2c:38:d9:c7:66:55:36:99:
                    e0:89:24:ef:5d:cd:26:cc:97:b4:3d:b3:d2:b7:5f:
                    c9:54:3c:19:76:9f:50:6f:2d:12:ce:89:44:c2:dc:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:6D:45:80:DB:FE:69:03:F0:39:93:8B:56:A4:68:48:86:91:02
            X509v3 Authority Key Identifier:
                keyid:F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37372e302f32342d3234203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:92:f5:4c:6b:c5:a9:16:eb:ef:0c:42:a6:db:63:c9:20:91:
         3c:82:bd:ae:05:3f:55:4f:44:36:10:7d:51:e4:eb:3f:12:d4:
         09:d7:76:9d:5b:6d:ca:2f:57:af:22:a4:9d:0f:9a:3d:76:60:
         8c:3b:e1:7a:69:b3:7b:07:7f:ad:35:56:55:a5:2d:b7:2d:a4:
         e2:a6:61:f3:eb:7e:4f:c8:b4:4b:9d:54:ae:3f:07:70:5a:38:
         0c:cd:c9:a4:7f:19:d2:1e:46:cf:3f:aa:ce:c6:e6:00:2b:7a:
         85:a2:bc:aa:38:5f:1b:f7:26:3a:f1:43:4c:9c:ee:96:95:4f:
         b3:35:9f:43:e7:17:dc:49:7c:b3:33:7d:bf:74:7c:6d:6d:cb:
         5c:a1:e1:67:dc:65:03:4d:22:23:c6:28:76:d0:0f:71:d6:4a:
         41:8a:47:32:42:fa:ff:5e:be:8f:18:54:e2:f4:f8:24:b6:80:
         82:52:6f:c2:57:3d:04:cd:ff:c0:02:b7:5c:c9:d3:4e:4a:4d:
         c5:9c:0a:c8:71:ed:82:04:a8:65:cf:c1:03:f0:c2:22:e8:a2:
         1e:fa:04:48:82:ba:b5:0e:38:e6:65:d6:4b:3c:79:bf:38:0c:
         da:31:d5:03:49:ba:41:c5:d2:d2:74:0e:7c:55:aa:9c:d4:3a:
         ce:18:68:a9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFh1k/Q13sXXUUh4EeuAiBIs35YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIyRTUzOTA2RTM2QkExNURCQTBEOEUxNTdEQjRERjlB
ODY5OUFBODAeFw0yNTAyMTMxODMxNDdaFw0yNjAyMTIxODM2NDdaMDMxMTAvBgNV
BAMTKDk5Mzg2RDQ1ODBEQkZFNjkwM0YwMzk5MzhCNTZBNDY4NDg4NjkxMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4/es6s/nk6zqFzUJU61IJdaq
XfFtBwWDsTPU5LtuOsiOtgxaF8tP72/wW+PFcEiGxdcjgFG1VvduUi1/sNv77Lm3
YAZ6X6Xj+AgjrIYlje8m0k8P711CySDka8lbvRQ2BXvpOSkYV9VT7vbSv7xSumwF
8LvxR5o919O3O3BhDjs+67cIXuqyAodraNCISISqCEDWZgoFhrknzkzqK+32eNCN
v5IWH1Jw53GaYwhURCGuu9q3HUOgrXMFivM0h+IiVQQePLHhpXSnj+RQk577+9w0
OlnQ3UMsONnHZlU2meCJJO9dzSbMl7Q9s9K3X8lUPBl2n1BvLRLOiUTC3F61AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmThtRYDb/mkD8DmTi1akaEiGkQIwHwYDVR0j
BBgwFoAU8i5TkG42uhXboNjhV9tN+ahpmqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMC9GMjJFNTM5MDZFMzZCQTE1REJBMEQ4RTE1N0RCNERGOUE4Njk5QUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMkU1MzkwNkUzNkJBMTVE
QkEwRDhFMTU3REI0REY5QTg2OTlBQTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzAv
MzEzNzM5MmUzMDJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMz
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALMATTANBgkqhkiG9w0BAQsFAAOCAQEAmJL1TGvFqRbr
7wxCpttjySCRPIK9rgU/VU9ENhB9UeTrPxLUCdd2nVttyi9XryKknQ+aPXZgjDvh
emmzewd/rTVWVaUtty2k4qZh8+t+T8i0S51Urj8HcFo4DM3JpH8Z0h5Gzz+qzsbm
ACt6haK8qjhfG/cmOvFDTJzulpVPszWfQ+cX3El8szN9v3R8bW3LXKHhZ9xlA00i
I8YodtAPcdZKQYpHMkL6/16+jxhU4vT4JLaAglJvwlc9BM3/wAK3XMnTTkpNxZwK
yHHtggSoZc/BA/DCIuiiHvoESIK6tQ445mXWSzx5vzgM2jHVA0m6QcXS0nQOfFWq
nNQ6zhhoqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:21 2025 by rpki-client on console.sobornost.net