Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          VzhbJ/tZLO2+8iSZQ+01hnN3KVfsg+XiamGnuRdQ8D4=
Subject key identifier:   10:80:1F:C0:51:EB:21:E4:4A:AC:40:B8:8E:F4:BF:20:A1:D0:B0:83
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       6AC70F3F9F6EEF5E148611A0CC03EF83D1949CC7
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 17 May 2023 16:46:42 +0000
ROA not before:           Wed 17 May 2023 16:41:42 +0000
ROA not after:            Wed 15 May 2024 16:46:42 +0000
asID:                     52685
IP address blocks:        177.136.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c7:0f:3f:9f:6e:ef:5e:14:86:11:a0:cc:03:ef:83:d1:94:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: May 17 16:41:42 2023 GMT
            Not After : May 15 16:46:42 2024 GMT
        Subject: CN=10801FC051EB21E44AAC40B88EF4BF20A1D0B083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:d2:76:d4:07:21:51:ab:d4:f2:07:e0:06:
                    86:03:ae:2c:11:a0:4f:f3:7e:1f:af:9b:5a:a6:c9:
                    5e:ac:27:12:71:e2:80:41:65:3c:2a:87:ce:81:bb:
                    81:db:2c:10:e4:29:4b:26:ed:4d:e7:ce:34:8c:e6:
                    36:60:fb:43:35:70:4b:51:ca:11:b4:8a:58:5d:b3:
                    52:26:83:cc:c2:4d:81:26:33:83:5c:e6:66:19:49:
                    ba:f2:4e:33:f1:97:fb:70:7e:a7:d6:20:37:9e:dd:
                    a6:44:9a:33:6f:5c:fa:74:e0:a3:65:62:2d:d0:3c:
                    93:44:59:a3:ca:71:b6:88:88:a1:ad:c3:e9:16:68:
                    cf:aa:f5:b7:e2:9d:8f:e0:ff:c4:85:49:91:44:29:
                    e7:bc:58:4f:b9:6d:cb:08:ff:65:e0:f8:ec:95:15:
                    2f:aa:1f:90:b2:48:85:bc:13:c4:fc:88:4d:da:92:
                    84:05:f1:be:64:bb:d5:0a:54:3f:fa:06:b7:e0:d8:
                    41:5d:73:3b:82:3f:a1:fa:aa:df:82:73:db:bc:73:
                    dd:7b:13:7d:3b:5e:37:98:27:ad:f4:fd:67:d3:53:
                    35:a1:87:a1:fb:a4:1d:b6:61:23:dc:c0:93:f5:f4:
                    85:3a:b6:7f:2e:83:d6:d5:6e:34:8d:e2:75:88:cc:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:1F:C0:51:EB:21:E4:4A:AC:40:B8:8E:F4:BF:20:A1:D0:B0:83
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:7d:16:d2:cf:39:87:a4:e0:0f:82:b4:8b:db:22:91:50:
         b1:d9:ca:94:72:50:6d:40:b0:c9:55:8d:35:97:f2:53:c5:67:
         de:f1:22:26:fb:dc:bd:6b:e7:00:06:25:cf:fd:90:54:23:9e:
         ba:4a:c5:12:c4:ea:48:b7:73:5a:f6:5c:74:ba:0d:96:cd:a1:
         91:bd:61:61:e3:22:2d:6c:6b:c3:73:61:c1:8c:6a:c4:ea:1f:
         f8:fe:66:ce:73:ae:50:95:46:14:3c:5e:0a:92:c4:a0:1a:7d:
         ef:48:68:d4:b6:14:f8:5c:1e:40:a9:bf:d0:ed:c0:04:eb:1e:
         b9:38:26:61:7c:f8:91:9a:fe:dc:a8:ed:04:a7:af:aa:57:ea:
         25:e0:6d:fd:91:ee:1f:6f:bd:3b:0e:38:4e:ce:42:9e:45:90:
         73:01:5b:05:90:c8:89:e7:0f:48:9d:3e:0d:b2:aa:8d:fe:f8:
         76:d4:9f:1b:46:43:84:0d:58:35:c4:dd:4f:19:b1:19:c4:06:
         3b:1e:bf:7b:f6:64:b4:de:81:f6:b1:f4:c9:8e:07:d1:3b:c8:
         e0:b8:e5:1a:f3:48:e1:8d:72:f9:59:9c:ae:6f:a3:d0:53:e2:
         10:49:3c:dc:a9:cc:49:a9:71:b6:e3:14:46:31:ab:fb:b8:c0:
         53:95:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org