Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          fPzHrGSrvFsyQNncZ2O0EdpjsLifJIvG0CmwVAv/5WU=
Subject key identifier:   97:E3:3B:EF:E9:BA:F1:4B:E2:19:37:8E:59:2C:3F:D9:77:9E:36:A5
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       7CF198A90C5ED21021C20AFAE0862DC3CFFA8AE2
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 17 May 2023 16:46:18 +0000
ROA not before:           Wed 17 May 2023 16:41:18 +0000
ROA not after:            Wed 15 May 2024 16:46:18 +0000
asID:                     52685
IP address blocks:        177.136.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:98:a9:0c:5e:d2:10:21:c2:0a:fa:e0:86:2d:c3:cf:fa:8a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: May 17 16:41:18 2023 GMT
            Not After : May 15 16:46:18 2024 GMT
        Subject: CN=97E33BEFE9BAF14BE219378E592C3FD9779E36A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:3b:46:66:97:45:c1:66:61:f0:c4:32:46:
                    8d:13:cc:91:c0:e0:a6:6a:c8:11:8c:aa:ac:12:d8:
                    fb:c3:2c:37:78:2b:0f:f8:26:b8:ba:90:93:ac:98:
                    dc:68:4a:93:b9:2d:a5:ec:c0:4e:bc:63:9f:72:fd:
                    a5:0c:69:84:dc:9d:fd:32:2f:29:2f:a4:fe:3f:11:
                    b2:6c:ca:cb:af:f5:c4:c9:5d:d4:2d:3b:ac:4e:eb:
                    10:89:e8:d8:5e:02:78:a8:03:1c:4f:b4:f8:37:38:
                    05:81:c3:db:b0:ab:28:f7:39:31:e9:1e:9b:73:f2:
                    39:c4:b3:d2:3a:12:8c:f6:11:09:55:41:95:55:c1:
                    c1:a1:53:b2:6b:6b:ae:52:9e:f6:a4:c3:08:89:91:
                    b2:8f:3b:c0:af:83:a6:4c:71:8f:11:f9:71:50:98:
                    68:7f:63:5a:97:a4:8d:15:bd:f8:04:ad:3b:62:f2:
                    90:2c:f7:1e:70:92:2b:2e:e8:04:87:66:0d:38:3a:
                    37:b8:fc:c0:a0:09:44:bd:83:b7:ce:b5:ef:23:0a:
                    eb:11:e7:33:e0:45:f2:eb:7a:94:ba:5d:eb:ab:c7:
                    2a:91:71:10:0c:13:8b:73:08:09:81:b8:69:a0:e4:
                    54:d9:19:4d:3b:21:9a:e5:cc:0a:70:05:12:32:48:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:3B:EF:E9:BA:F1:4B:E2:19:37:8E:59:2C:3F:D9:77:9E:36:A5
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:90:2e:9e:70:ff:ac:7b:64:fd:34:7b:b3:1f:62:bb:16:
         ef:39:db:52:d0:b8:f2:2e:39:bf:00:19:d1:fe:7e:f1:61:b4:
         b4:f6:d5:0f:7d:1c:e6:e1:1a:47:75:31:67:29:ae:6f:33:81:
         1d:de:e4:dc:d5:e8:76:f4:2a:3c:66:00:6e:db:02:00:93:3a:
         8b:cb:fc:9e:2b:fe:31:4d:31:3a:88:d4:80:a4:97:2e:fe:5d:
         77:71:cc:96:12:6f:e4:e7:78:b1:81:68:11:65:db:61:af:fd:
         8f:ad:d1:1f:03:bf:c4:eb:af:a8:5d:6a:b2:89:06:ea:81:38:
         29:ab:19:6b:c8:f8:b8:83:76:1f:73:60:ec:db:53:8b:48:a1:
         80:3f:63:22:50:13:9f:b5:59:a4:84:2e:33:5b:b3:f0:7c:20:
         13:64:8f:9c:03:19:09:20:8a:3f:4e:84:92:a9:a5:d8:d3:6c:
         62:42:77:2b:9a:95:c9:bc:3b:9d:15:05:91:b3:d6:4e:c0:32:
         f4:f0:bc:5d:fe:de:70:c4:ad:fa:ad:13:6c:30:50:81:e4:b4:
         82:a0:32:ca:ec:0d:21:c1:28:8e:57:8a:1d:67:21:0d:e5:f1:
         42:28:fe:48:f0:cc:67:f7:9f:94:14:d2:af:34:52:68:07:11:
         77:23:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org