Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32382e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          n+lPqG0NFb9TYEsA8uAijThRPC+Nt9ca6+pgY4M9wbA=
Subject key identifier:   E2:A0:17:57:BE:84:F8:C5:C8:04:8E:6C:15:A3:23:3F:D0:78:42:F2
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       7380417FFCA6331456D79E4F4C59DC8AD4D6FE28
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3233203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:38 +0000
ROA not before:           Mon 08 Apr 2024 19:38:38 +0000
ROA not after:            Mon 07 Apr 2025 19:43:38 +0000
asID:                     52685
IP address blocks:        177.73.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:80:41:7f:fc:a6:33:14:56:d7:9e:4f:4c:59:dc:8a:d4:d6:fe:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:38 2024 GMT
            Not After : Apr  7 19:43:38 2025 GMT
        Subject: CN=E2A01757BE84F8C5C8048E6C15A3233FD07842F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:58:82:d9:c7:c1:ed:16:b2:22:3f:ea:50:
                    a9:70:5d:f4:d4:ad:22:62:43:83:29:78:56:40:db:
                    10:6c:e2:a3:e9:75:4f:71:e2:62:00:49:49:68:a9:
                    7f:e0:25:33:77:43:d0:d7:4c:5b:a2:38:c3:b6:a9:
                    e8:4a:91:f8:fd:cd:ba:01:00:61:c6:b2:dd:b2:43:
                    4e:f1:e4:68:d8:fb:64:2f:4a:de:4d:31:8c:49:67:
                    03:15:ed:09:ea:18:3e:0b:53:b5:ce:ec:f1:eb:ae:
                    d3:6c:e5:1d:e6:89:11:e0:c8:07:6c:d7:26:8b:e9:
                    d7:35:2f:3f:12:59:45:b8:92:fa:d3:78:5d:f8:52:
                    ab:7f:00:ce:da:58:a3:18:cf:7c:4b:30:d8:3c:2e:
                    38:1e:bd:41:f8:34:01:f5:20:5d:09:14:80:e6:7f:
                    dd:71:a4:ea:0c:c8:f7:27:b0:6a:af:e3:85:fd:7a:
                    ea:18:53:8c:74:21:5d:9e:d0:48:9b:26:b1:cb:a0:
                    19:7e:e1:96:58:14:a1:f9:58:a2:c0:48:76:a7:62:
                    96:ea:14:6a:5e:d5:cf:4c:1e:7d:c8:27:ca:83:89:
                    62:1d:bc:3b:ad:53:6d:d7:74:b9:a1:aa:8a:53:e3:
                    e8:1b:4a:d9:29:c8:cc:67:38:24:85:2c:7f:99:39:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:17:57:BE:84:F8:C5:C8:04:8E:6C:15:A3:23:3F:D0:78:42:F2
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:a8:e9:82:78:81:5e:b9:57:24:7e:bb:0d:eb:90:3d:3f:
         7c:49:10:4d:59:ef:6e:77:68:ac:c5:ba:fe:49:4e:5a:fe:00:
         61:cb:40:17:f9:e6:90:4d:55:5d:fd:f4:56:d9:e5:b1:54:23:
         83:51:61:16:e3:36:12:f9:a0:a2:94:65:54:f1:19:71:ea:0e:
         7e:cf:56:b7:1b:42:c9:85:e2:6f:f5:2d:14:6b:b4:dc:29:48:
         cd:52:2b:d0:72:cb:1e:5c:e9:7b:9f:05:d2:52:64:a7:d4:65:
         69:c1:f5:6e:9a:6c:7d:73:a3:22:e5:cc:74:17:1e:a2:66:20:
         8b:0c:5e:ce:4a:53:58:29:a2:77:21:18:23:9b:eb:3b:ce:f7:
         b6:10:4b:25:a8:82:58:e2:f1:e1:53:2f:95:1b:ee:39:41:0f:
         d5:d0:f4:92:9e:db:22:d4:b0:6c:e7:ac:de:81:1a:05:9c:84:
         0a:87:48:28:8e:90:43:49:74:e8:3f:97:e8:29:99:20:72:74:
         28:34:fe:00:bf:f2:bb:70:72:6c:dc:88:fa:ca:78:58:7a:f6:
         80:72:9f:12:29:0a:d2:7a:2f:11:d8:01:af:2e:0c:78:d5:bf:
         3a:9f:bf:db:b4:bb:23:73:fb:88:06:39:f6:ac:e5:b3:8d:de:
         a0:f5:21:e4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUc4BBf/ymMxRW155PTFncitTW/igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4NjlCRTMzRUFCQTI4QjlENjNFRUQ0NTkyNzQwODMz
RUE5ODI2QjAeFw0yNDA0MDgxOTM4MzhaFw0yNTA0MDcxOTQzMzhaMDMxMTAvBgNV
BAMTKEUyQTAxNzU3QkU4NEY4QzVDODA0OEU2QzE1QTMyMzNGRDA3ODQyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSViC2cfB7RayIj/qUKlwXfTU
rSJiQ4MpeFZA2xBs4qPpdU9x4mIASUloqX/gJTN3Q9DXTFuiOMO2qehKkfj9zboB
AGHGst2yQ07x5GjY+2QvSt5NMYxJZwMV7QnqGD4LU7XO7PHrrtNs5R3miRHgyAds
1yaL6dc1Lz8SWUW4kvrTeF34Uqt/AM7aWKMYz3xLMNg8LjgevUH4NAH1IF0JFIDm
f91xpOoMyPcnsGqv44X9euoYU4x0IV2e0EibJrHLoBl+4ZZYFKH5WKLASHanYpbq
FGpe1c9MHn3IJ8qDiWIdvDutU23XdLmhqopT4+gbStkpyMxnOCSFLH+ZOSD9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4qAXV76E+MXIBI5sFaMjP9B4QvIwHwYDVR0j
BBgwFoAUdIab4z6rooudY+7UWSdAgz6pgmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMC83NDg2OUJFMzNFQUJBMjhCOUQ2M0VFRDQ1OTI3NDA4MzNFQTk4MjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0ODY5QkUzM0VBQkEyOEI5
RDYzRUVENDU5Mjc0MDgzM0VBOTgyNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzAv
MzEzNzM3MmUzNzMzMmUzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFJHDANBgkqhkiG9w0BAQsFAAOCAQEANRyo6YJ4gV65
VyR+uw3rkD0/fEkQTVnvbndorMW6/klOWv4AYctAF/nmkE1VXf30VtnlsVQjg1Fh
FuM2EvmgopRlVPEZceoOfs9WtxtCyYXib/UtFGu03ClIzVIr0HLLHlzpe58F0lJk
p9RlacH1bppsfXOjIuXMdBceomYgiwxezkpTWCmidyEYI5vrO873thBLJaiCWOLx
4VMvlRvuOUEP1dD0kp7bItSwbOes3oEaBZyECodIKI6QQ0l06D+X6CmZIHJ0KDT+
AL/yu3BybNyI+sp4WHr2gHKfEikK0novEdgBry4MeNW/Op+/27S7I3P7iAY59qzl
s43eoPUh5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org