Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33312e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e33312e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          9z6mDTYVyxd+ACzRBqNpv5dhAZZx5g2anbrwo/yz0I8=
Subject key identifier:   89:1D:71:38:DA:1A:A1:38:6C:B0:55:22:53:63:0B:94:43:2E:92:C5
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       75A7E4C2DC2428E19154521A076C9D89D8F2A2F4
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33312e302f32342d3234203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:36 +0000
ROA not before:           Mon 08 Apr 2024 19:38:36 +0000
ROA not after:            Mon 07 Apr 2025 19:43:36 +0000
asID:                     52685
IP address blocks:        177.73.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a7:e4:c2:dc:24:28:e1:91:54:52:1a:07:6c:9d:89:d8:f2:a2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:36 2024 GMT
            Not After : Apr  7 19:43:36 2025 GMT
        Subject: CN=891D7138DA1AA1386CB0552253630B94432E92C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:f9:81:eb:93:65:76:61:b7:5d:b9:f6:4d:
                    e5:78:a9:5a:99:96:29:8d:dd:52:b8:48:30:ab:59:
                    c5:65:e0:ee:e8:4a:bf:fa:61:cf:d4:28:d1:11:6e:
                    6c:e1:97:b6:65:f7:a1:5e:d6:c2:9a:45:c4:8f:5f:
                    46:74:9c:33:03:7b:cc:1f:6b:93:b8:55:c5:d5:dc:
                    73:5a:05:46:26:1c:bc:70:bc:4c:9e:bf:38:b0:d0:
                    48:31:32:e4:1e:22:4e:3e:fc:c3:87:0a:43:5a:c5:
                    af:78:ac:cd:a9:3c:f6:89:31:67:d6:24:43:f3:a8:
                    ac:14:4e:72:8a:e5:05:b4:b8:3f:0d:90:a5:97:2e:
                    57:1c:3a:32:cc:80:0a:e9:d5:f2:1a:f7:fc:8c:ff:
                    cb:8c:e3:26:6a:c9:c2:c3:c8:82:a2:7f:e9:e3:e9:
                    af:33:85:fd:5c:3c:e6:26:e2:95:d6:24:10:5e:37:
                    80:d9:2b:10:26:d3:90:04:dd:2d:a1:47:40:69:3d:
                    4b:b3:f5:94:b6:87:14:af:91:e6:e0:a4:61:f4:c7:
                    a7:69:27:08:48:ed:62:de:48:fb:62:89:34:e8:4e:
                    e2:65:07:f7:09:a2:73:d5:84:d5:3b:7c:a2:ff:d9:
                    16:28:5f:f6:07:f6:fe:b4:3f:69:08:83:9b:4e:61:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:71:38:DA:1A:A1:38:6C:B0:55:22:53:63:0B:94:43:2E:92:C5
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e33312e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:e6:37:6d:3f:c5:6b:a8:b2:2b:a8:d1:de:77:c5:fe:05:
         f0:8e:81:e4:16:c1:9c:a3:15:12:6f:75:bb:22:1d:f6:8e:ed:
         27:6b:00:17:b5:34:f4:3b:ed:02:dc:8d:3d:82:28:a1:b7:0d:
         2e:b4:d4:7f:57:ab:98:69:5c:52:10:77:20:3d:37:b2:e5:ea:
         9c:d7:2a:ce:ad:f3:e6:62:6e:43:28:c3:30:1f:2c:cc:ac:15:
         24:2f:4c:91:8e:40:59:6a:8b:b7:76:ca:8d:7a:a0:e3:ca:aa:
         59:94:2f:94:96:ce:53:1d:7f:58:f2:d8:e9:7f:21:97:4a:22:
         2a:f3:7c:28:76:de:b9:3d:05:73:93:2f:2c:a7:4a:6a:f0:dc:
         a5:7a:31:d7:24:28:d0:e6:71:89:56:da:86:1e:ec:46:38:ef:
         18:87:0f:16:b1:19:3a:97:92:2b:bb:ba:1c:f8:c2:89:6a:d9:
         5d:7b:26:34:61:0f:f5:33:e7:04:50:97:6e:09:a8:16:87:71:
         09:2f:f1:80:59:64:c8:4b:cc:92:ec:a3:bf:f1:58:0a:fd:dd:
         59:6d:a0:8f:b1:a5:b3:79:2c:ae:08:a4:75:be:3e:1d:ab:78:
         b8:39:6c:7b:ca:a7:30:7d:de:e3:ac:48:13:23:88:53:04:1c:
         80:2e:23:15
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdafkwtwkKOGRVFIaB2ydidjyovQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4NjlCRTMzRUFCQTI4QjlENjNFRUQ0NTkyNzQwODMz
RUE5ODI2QjAeFw0yNDA0MDgxOTM4MzZaFw0yNTA0MDcxOTQzMzZaMDMxMTAvBgNV
BAMTKDg5MUQ3MTM4REExQUExMzg2Q0IwNTUyMjUzNjMwQjk0NDMyRTkyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBPmB65NldmG3Xbn2TeV4qVqZ
limN3VK4SDCrWcVl4O7oSr/6Yc/UKNERbmzhl7Zl96Fe1sKaRcSPX0Z0nDMDe8wf
a5O4VcXV3HNaBUYmHLxwvEyevziw0EgxMuQeIk4+/MOHCkNaxa94rM2pPPaJMWfW
JEPzqKwUTnKK5QW0uD8NkKWXLlccOjLMgArp1fIa9/yM/8uM4yZqycLDyIKif+nj
6a8zhf1cPOYm4pXWJBBeN4DZKxAm05AE3S2hR0BpPUuz9ZS2hxSvkebgpGH0x6dp
JwhI7WLeSPtiiTToTuJlB/cJonPVhNU7fKL/2RYoX/YH9v60P2kIg5tOYeo/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiR1xONoaoThssFUiU2MLlEMuksUwHwYDVR0j
BBgwFoAUdIab4z6rooudY+7UWSdAgz6pgmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMC83NDg2OUJFMzNFQUJBMjhCOUQ2M0VFRDQ1OTI3NDA4MzNFQTk4MjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0ODY5QkUzM0VBQkEyOEI5
RDYzRUVENDU5Mjc0MDgzM0VBOTgyNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzAv
MzEzNzM3MmUzNzMzMmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJHzANBgkqhkiG9w0BAQsFAAOCAQEAn6nmN20/xWuo
siuo0d53xf4F8I6B5BbBnKMVEm91uyId9o7tJ2sAF7U09DvtAtyNPYIoobcNLrTU
f1ermGlcUhB3ID03suXqnNcqzq3z5mJuQyjDMB8szKwVJC9MkY5AWWqLt3bKjXqg
48qqWZQvlJbOUx1/WPLY6X8hl0oiKvN8KHbeuT0Fc5MvLKdKavDcpXox1yQo0OZx
iVbahh7sRjjvGIcPFrEZOpeSK7u6HPjCiWrZXXsmNGEP9TPnBFCXbgmoFodxCS/x
gFlkyEvMkuyjv/FYCv3dWW2gj7Gls3ksrgikdb4+Hat4uDlse8qnMH3e46xIEyOI
UwQcgC4jFQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:24 2025 by rpki-client