Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3137372e37342e3138302e302f32322d3234203d3e20323634303237.roa
File:                     3137372e37342e3138302e302f32322d3234203d3e20323634303237.roa (raw, json)
Hash identifier:          dMkNQ793ZTgdJ9cJkQzf1iNxcATlCk4SCejLYM2x3Xs=
Subject key identifier:   9D:44:A0:1D:99:3F:57:07:C8:E7:B0:8D:DB:C6:44:BC:82:6B:EC:8D
Certificate issuer:       /CN=923141629C33831528ED5BCD343A22B26852B46E
Certificate serial:       1E3598953E2C93DF0F1CA7DDD2C68064006126CB
Authority key identifier: 92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/923141629C33831528ED5BCD343A22B26852B46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3137372e37342e3138302e302f32322d3234203d3e20323634303237.roa
Signing time:             Wed 18 Oct 2023 18:00:01 +0000
ROA not before:           Wed 18 Oct 2023 17:55:01 +0000
ROA not after:            Wed 16 Oct 2024 18:00:01 +0000
asID:                     264027
IP address blocks:        177.74.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:98:95:3e:2c:93:df:0f:1c:a7:dd:d2:c6:80:64:00:61:26:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923141629C33831528ED5BCD343A22B26852B46E
        Validity
            Not Before: Oct 18 17:55:01 2023 GMT
            Not After : Oct 16 18:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:bb:c0:07:a2:b4:16:0e:d6:e6:2f:80:94:
                    8c:9b:25:c4:5b:9c:5a:79:b9:e5:61:d9:a0:0e:1c:
                    57:01:d4:55:a8:80:45:5a:14:4d:d5:75:1e:fb:b1:
                    5d:cd:07:5f:57:fa:bf:23:27:a1:3a:4f:fa:49:be:
                    1c:2b:1c:62:8f:4f:a9:da:78:ec:09:6c:ce:eb:34:
                    c1:0a:68:75:67:6f:8d:d7:8d:7f:01:7f:c9:07:fe:
                    ca:54:71:6c:a4:e2:98:49:a5:a1:7b:88:5b:44:59:
                    71:50:52:11:a5:c3:30:83:90:32:ee:0f:52:b8:81:
                    9b:4d:6e:b0:9f:a1:1d:64:bf:5f:29:49:18:bd:ab:
                    74:49:68:ff:06:6b:2c:19:35:66:d5:0d:14:17:99:
                    08:94:94:54:2f:e8:c2:d0:16:bf:79:8a:81:9f:02:
                    76:ba:4f:b0:f1:4c:c5:d7:b0:0a:2a:95:94:26:dd:
                    bd:5f:0c:0a:b0:7c:7a:c7:fb:90:6f:86:33:d6:74:
                    96:97:d5:4d:63:50:07:43:ff:3c:6a:73:d4:27:b2:
                    75:36:05:f3:dc:32:00:41:ce:6c:20:d7:ef:30:89:
                    76:67:83:af:7f:d0:ff:7a:b8:26:85:5f:c0:e5:72:
                    e1:a6:0b:bb:b0:26:b0:a1:93:09:e8:02:45:3e:e4:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:44:A0:1D:99:3F:57:07:C8:E7:B0:8D:DB:C6:44:BC:82:6B:EC:8D
            X509v3 Authority Key Identifier:
                keyid:92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/923141629C33831528ED5BCD343A22B26852B46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/923141629C33831528ED5BCD343A22B26852B46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3137372e37342e3138302e302f32322d3234203d3e20323634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:68:e3:a5:c2:2e:69:d1:2e:18:b9:43:c8:cf:98:23:fc:
         98:f2:bf:c6:22:7e:f5:8f:5a:7f:33:12:ec:a4:00:61:6c:24:
         fe:f1:17:80:b2:3f:d6:2d:ec:6e:b4:f8:de:69:8a:8e:1c:96:
         96:58:66:77:f4:6b:4d:d7:8e:08:23:26:e4:09:5a:65:ee:6e:
         3c:41:73:23:de:47:04:bc:b1:5c:59:99:46:95:2e:8b:75:bf:
         2d:06:1e:d9:4d:70:08:18:24:b1:18:a8:33:7a:16:ca:6a:99:
         d8:a6:5a:a9:33:ab:6c:d8:5a:f6:f5:8a:07:ba:32:af:33:8d:
         93:cd:55:2b:d7:42:79:ce:a2:45:3e:6b:49:9b:a2:b8:a3:72:
         fb:1e:97:30:42:57:de:b4:c3:ab:8f:b6:a4:92:bb:bf:3f:42:
         e9:40:63:72:84:0d:b6:c8:5c:d5:f0:f0:4b:b8:cc:32:db:5e:
         a7:37:6a:aa:5e:c7:cc:62:60:86:2f:bd:5f:e8:14:f8:5b:62:
         be:7d:8e:2e:7b:7a:37:83:b3:88:e8:e6:2d:fd:83:c5:10:68:
         fe:b9:41:f1:7a:4b:92:f7:b0:2f:de:2b:25:3a:97:b2:aa:85:
         2a:2e:48:ce:3b:53:8b:69:c8:e5:43:8c:d6:75:94:4e:7b:89:
         b9:ae:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org