Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3234203d3e203532363835.roa
File:                     3137372e37332e33302e302f32332d3234203d3e203532363835.roa (raw, json)
Hash identifier:          6ZZyl/1vPayf4DWi+xYxPjUsNhSLYqc2oA/1vx7RZGo=
Subject key identifier:   4D:81:1C:93:1D:C4:77:A1:20:53:A7:95:03:DA:C3:D4:B1:06:20:0C
Certificate issuer:       /CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
Certificate serial:       674F1D5271B4DBC8FBD8AB312E13C2F789094160
Authority key identifier: 4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3234203d3e203532363835.roa
Signing time:             Wed 29 Mar 2023 20:14:25 +0000
ROA not before:           Wed 29 Mar 2023 20:09:25 +0000
ROA not after:            Wed 27 Mar 2024 20:14:25 +0000
asID:                     52685
IP address blocks:        177.73.30.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4f:1d:52:71:b4:db:c8:fb:d8:ab:31:2e:13:c2:f7:89:09:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
        Validity
            Not Before: Mar 29 20:09:25 2023 GMT
            Not After : Mar 27 20:14:25 2024 GMT
        Subject: CN=4D811C931DC477A12053A79503DAC3D4B106200C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:45:89:fc:d9:42:bd:f6:76:fc:5b:50:f7:
                    5d:2e:23:3c:ad:4f:ab:fa:0a:5d:ea:87:60:92:92:
                    3e:69:0c:ab:b5:0c:85:54:80:a9:e9:e3:0f:2c:ce:
                    d9:7e:cf:b7:08:14:88:fc:50:ee:a8:3d:81:33:eb:
                    b1:98:a3:05:c1:cb:99:95:e6:9c:b3:fb:4a:ee:2a:
                    6b:98:bd:c3:a1:af:fc:c6:6f:1d:3b:26:a6:7c:c9:
                    cf:f3:19:07:4d:90:68:3d:53:02:0e:94:64:eb:ae:
                    0a:b9:d7:14:a4:ee:c1:b4:f6:53:9b:60:23:85:ea:
                    a1:a9:b5:8b:97:f3:80:4d:31:bc:94:fb:8d:43:5e:
                    77:2c:70:e3:87:05:bc:b2:8f:12:0d:e0:93:4a:8e:
                    a2:62:46:42:1a:3f:4f:69:e1:67:26:0f:ca:ef:90:
                    d7:27:cc:ae:86:40:5e:9f:52:ff:8f:9f:9a:0b:67:
                    57:2c:37:14:37:8d:c4:03:8d:21:c5:38:75:c6:e1:
                    6f:6b:a3:e7:01:e2:0d:a7:b5:3b:04:46:26:03:22:
                    24:0a:fc:bc:c6:2c:71:8d:5b:2e:3e:35:c0:26:79:
                    59:47:c2:87:a8:40:42:39:c3:4a:e7:b8:ca:6f:b1:
                    91:8b:b6:12:76:35:12:1a:7b:e6:c2:ce:92:48:f6:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:1C:93:1D:C4:77:A1:20:53:A7:95:03:DA:C3:D4:B1:06:20:0C
            X509v3 Authority Key Identifier:
                keyid:4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33302e302f32332d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:27:4b:2b:f5:e8:59:61:0c:25:85:ba:39:66:ba:44:f0:80:
         4d:f7:08:d2:57:3c:d0:c5:e3:4c:8d:ce:78:43:79:84:41:07:
         36:99:f1:e2:91:09:ef:27:ba:67:71:c7:9f:95:c8:a9:7f:32:
         53:74:7e:36:93:72:9d:9f:0f:e5:7f:08:46:3a:0d:e5:32:c4:
         e5:de:79:dd:bd:53:4b:60:bf:27:d5:86:1a:47:06:d8:b1:7b:
         33:25:c6:fb:29:f6:fb:dd:6f:91:e2:cb:94:11:76:62:83:38:
         0f:0d:ad:8a:58:76:a7:cd:8f:33:15:bc:54:70:49:fc:da:63:
         d2:85:2f:3d:e9:d5:d0:93:92:8d:fb:53:5e:9a:2f:b2:52:4f:
         c9:fa:b2:96:e7:7d:41:7e:e9:4a:80:b3:fe:b3:d3:60:9c:24:
         ad:a1:c8:00:c5:b5:ea:bd:12:5e:12:60:66:8f:8b:99:cd:0d:
         24:4b:9b:92:1c:de:5b:d6:1b:33:62:07:ae:6f:f5:57:b3:3c:
         70:4f:65:eb:1f:d6:98:e4:dc:c9:a4:b9:cb:11:7d:8f:c5:84:
         8f:4e:19:80:95:4d:b9:13:8e:c5:0b:03:50:50:5e:91:5d:b8:
         22:e2:4b:e0:96:e1:89:3d:3f:b0:58:b7:c7:76:f3:9f:6c:a9:
         a5:69:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org