Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e33302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          rDgK/wqY4QWWBGwss6TRtqBhXg1DqcB9dvxlD5ptEg0=
Subject key identifier:   74:15:98:25:9B:C3:FC:D9:71:96:89:27:12:EB:F2:0E:DD:9A:53:E7
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       7A68B0BE0A6D210E5FD97C2CD83DBC786E32D0FA
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:36 +0000
ROA not before:           Mon 08 Apr 2024 19:38:36 +0000
ROA not after:            Mon 07 Apr 2025 19:43:36 +0000
asID:                     52685
IP address blocks:        177.73.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:b0:be:0a:6d:21:0e:5f:d9:7c:2c:d8:3d:bc:78:6e:32:d0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:36 2024 GMT
            Not After : Apr  7 19:43:36 2025 GMT
        Subject: CN=741598259BC3FCD97196892712EBF20EDD9A53E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:10:f7:fb:7f:12:bd:06:a0:61:08:bc:c7:
                    19:22:43:97:0e:04:8e:41:d4:9e:a6:72:64:49:d0:
                    c2:8e:f2:9d:72:d0:27:09:94:18:88:15:47:59:f1:
                    d9:8a:c4:88:18:7f:51:44:30:cf:d9:e2:e2:f1:95:
                    dc:29:44:0c:57:f3:1b:41:d4:d8:cc:70:6a:c5:e0:
                    f0:75:f5:3c:5f:2f:50:75:6d:be:6a:14:da:1b:44:
                    be:42:9f:97:9f:7a:9c:fd:3c:74:3b:e7:c5:c5:b1:
                    7b:e0:37:b1:57:7d:d8:97:87:f3:27:f2:71:d8:40:
                    ff:54:26:3a:c3:cc:81:87:c0:63:4e:e0:dd:7f:a8:
                    1a:8f:9f:5a:a7:3f:67:05:cf:2b:74:fa:31:0a:7c:
                    15:cf:e3:7b:d0:c8:d6:d3:fa:3a:ca:8e:db:e3:fc:
                    c3:90:fe:a3:af:b9:14:5e:2b:de:ab:a4:e8:52:3a:
                    4a:e8:7d:a2:9a:c2:3a:d2:d6:26:74:2c:b0:c0:75:
                    56:b0:37:69:9a:d1:d2:f5:88:b9:9d:77:6e:27:0f:
                    52:01:e0:0b:9e:c3:a1:0c:0c:c5:98:72:e6:f2:8a:
                    ae:0a:4f:10:62:97:a0:19:c2:bb:20:a1:96:98:a6:
                    38:e6:9a:de:43:ea:7c:c1:e3:a2:a7:39:47:c3:a9:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:98:25:9B:C3:FC:D9:71:96:89:27:12:EB:F2:0E:DD:9A:53:E7
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:76:33:92:b4:34:e2:0e:85:60:1f:ef:95:b1:5f:01:f5:
         00:4e:db:78:1c:c3:bd:8b:e2:6b:3a:03:c3:ea:dc:36:7d:04:
         34:1d:1c:3a:76:0f:ac:ae:eb:48:c0:4c:07:fe:0c:15:f9:b3:
         ff:60:75:11:cd:ed:43:a8:89:5e:f1:98:20:00:50:f7:87:f8:
         ee:2d:e5:8e:13:f2:2b:63:96:7d:48:c4:83:a5:48:4c:a9:ae:
         00:eb:9f:f3:14:85:a7:b9:c6:61:0f:c2:36:14:6d:42:64:ae:
         5e:f5:66:db:f1:2c:c8:8d:62:ef:c1:0f:8c:bc:99:bb:a4:56:
         92:83:dd:db:1d:40:72:fc:a2:2e:7e:36:16:e6:bc:dc:02:e5:
         d7:14:e3:49:e3:b7:a6:f3:4b:e5:56:da:24:5d:42:65:48:3a:
         2b:4e:27:94:47:7d:41:b0:b6:e7:13:2a:b4:fa:a4:ad:44:d1:
         c6:e0:c2:d6:a4:ee:d3:39:60:b4:b1:c0:e7:99:5e:2d:78:ec:
         89:0f:d4:94:84:42:5e:b0:15:bf:6b:c7:e2:e0:99:7f:24:c0:
         57:59:06:4b:08:97:fc:aa:1a:a0:17:54:e9:30:b7:f4:fd:4f:
         89:e1:43:08:8a:97:36:42:93:20:b3:ef:a8:be:bb:a0:6a:58:
         ca:10:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org