Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32382e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          a/NAj2grX3jGST4ONtDidRfFRHUCFMuiogOjI79BjWs=
Subject key identifier:   68:BF:B8:05:E4:AB:35:C9:32:00:85:88:4F:52:E6:CB:0F:F4:00:83
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       39E1395297CEEA80A9B7BA873A60B84DA09BF444
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 17 May 2023 16:43:20 +0000
ROA not before:           Wed 17 May 2023 16:38:20 +0000
ROA not after:            Wed 15 May 2024 16:43:20 +0000
asID:                     52685
IP address blocks:        177.73.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:39:52:97:ce:ea:80:a9:b7:ba:87:3a:60:b8:4d:a0:9b:f4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: May 17 16:38:20 2023 GMT
            Not After : May 15 16:43:20 2024 GMT
        Subject: CN=68BFB805E4AB35C9320085884F52E6CB0FF40083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:5e:69:54:e4:a4:83:26:df:9b:d0:2c:3c:
                    eb:87:e0:0b:50:37:30:ea:23:32:5b:07:fb:d1:98:
                    ba:91:1a:b8:db:48:66:07:5d:2e:46:f3:f9:0f:69:
                    77:6f:08:e7:dd:d7:61:bd:19:47:e9:19:46:5a:eb:
                    ac:3c:c1:14:a1:b4:5c:d5:e5:97:22:13:2d:6e:bb:
                    df:8d:81:bc:3a:95:4f:99:40:35:ea:d4:f7:88:c2:
                    cc:60:8f:4e:58:ff:45:ad:0c:21:b6:cb:30:86:cb:
                    4c:cd:6f:eb:9f:59:fa:63:4b:fc:e2:a5:08:16:a2:
                    ed:82:91:80:2e:b6:42:35:8c:05:63:fc:a4:c2:b7:
                    89:d0:b7:b8:cd:68:7b:c8:9a:e2:54:ec:6c:5c:7e:
                    56:c7:57:c5:f8:32:c3:45:1d:33:22:88:c2:77:f7:
                    be:31:52:4d:9d:61:53:54:80:98:cd:77:4f:29:df:
                    fa:a1:d1:29:56:fe:02:d1:33:49:cc:e2:29:4f:3e:
                    08:dc:1b:bd:16:50:c4:02:40:19:da:90:ff:3c:7f:
                    bb:79:b3:e1:c5:89:89:75:61:2d:91:fa:c0:6b:c8:
                    00:55:48:38:7c:ea:44:98:91:75:0d:49:a7:a3:f9:
                    56:ba:69:5e:3b:de:ca:97:5b:3f:4a:e4:0d:c4:a2:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:B8:05:E4:AB:35:C9:32:00:85:88:4F:52:E6:CB:0F:F4:00:83
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:b5:a0:65:ad:03:c3:81:6e:93:18:c1:87:1b:c1:60:ce:
         e1:7c:3b:64:2b:1b:66:d9:56:fe:76:91:3b:46:4d:9e:b0:12:
         a7:03:b9:cf:79:db:d9:cd:3c:df:c3:84:cc:28:fc:e7:f3:29:
         58:b4:df:4d:a4:6b:12:fa:b5:9e:d7:91:2b:b7:41:b2:b6:dd:
         ae:e4:77:aa:4d:cc:ba:95:02:6c:90:f4:aa:f8:d0:92:15:28:
         f5:23:6d:ba:b6:39:5b:ec:ea:58:42:34:e6:a8:67:9a:25:2e:
         2a:38:49:f8:52:af:8b:73:9e:b7:30:f9:c2:cc:45:c8:60:eb:
         58:0c:9d:34:61:03:c4:03:80:5d:d4:cd:13:f6:37:39:0e:79:
         14:bd:9a:0f:74:e5:72:1c:48:62:3b:64:3b:58:d1:94:9c:02:
         cb:cf:d9:fe:ea:c0:cc:c8:87:0b:c4:9d:77:c0:c4:52:39:5d:
         c9:ad:80:72:c4:1c:53:f5:4c:1c:ed:b7:3e:fb:fa:e8:a9:db:
         dd:f1:92:cc:7e:51:d5:6e:7a:91:8d:90:bb:be:c5:9d:3f:38:
         4b:c2:d2:33:26:e7:25:e1:4a:5f:cb:be:2e:30:a7:9d:c3:d2:
         ff:d8:ef:fa:9e:76:70:33:98:c3:30:75:29:47:4e:17:90:33:
         65:a9:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org