Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
File:                     3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa (raw, json)
Hash identifier:          t26Vyg25tcbgouX+aMPL4ld1Rek0wWStmsKP07QTItE=
Subject key identifier:   43:1B:11:05:CA:F5:BA:18:A7:2E:A6:58:74:A0:4F:8F:A5:A3:4C:55
Certificate issuer:       /CN=9C10661843B8940941B0942E92BE662CB14B2D68
Certificate serial:       61F83041057CAFDA6E3EB831DE1CD597DABB472D
Authority key identifier: 9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C10661843B8940941B0942E92BE662CB14B2D68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
Signing time:             Tue 22 Aug 2023 15:25:44 +0000
ROA not before:           Tue 22 Aug 2023 15:20:44 +0000
ROA not after:            Tue 20 Aug 2024 15:25:44 +0000
asID:                     271038
IP address blocks:        177.129.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f8:30:41:05:7c:af:da:6e:3e:b8:31:de:1c:d5:97:da:bb:47:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C10661843B8940941B0942E92BE662CB14B2D68
        Validity
            Not Before: Aug 22 15:20:44 2023 GMT
            Not After : Aug 20 15:25:44 2024 GMT
        Subject: CN=431B1105CAF5BA18A72EA65874A04F8FA5A34C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:4e:24:5d:57:ca:23:49:8f:32:91:ae:dc:
                    c1:e1:bf:cb:76:31:a1:eb:f4:5f:ce:5b:cb:d5:a0:
                    02:b5:c4:14:8b:10:d3:95:d7:54:fa:4e:f0:83:f6:
                    f6:4a:95:1f:d9:06:14:25:a1:b6:7a:a3:22:ec:85:
                    db:8e:67:d8:b3:13:2d:04:01:6f:34:54:db:2f:b4:
                    f0:2f:d6:cb:a5:23:64:f4:52:7c:43:ff:93:fb:23:
                    83:f1:fc:d8:eb:84:b1:08:18:2a:bb:60:fe:3d:f1:
                    d3:a5:e4:25:51:9b:2d:8d:25:45:a5:76:38:a2:76:
                    65:a4:c5:34:64:9d:70:e2:2e:b8:7f:d9:42:8d:73:
                    87:e7:ec:9a:1d:d0:76:96:c1:9d:be:2b:4a:4e:df:
                    2b:04:6f:35:84:a6:22:95:e7:2a:70:77:5c:00:31:
                    15:2c:49:7b:b6:d4:b5:e7:74:a5:25:89:82:6a:ed:
                    34:63:c1:4f:97:f2:29:50:16:61:d6:04:81:20:fc:
                    7d:73:d7:d9:45:8b:f5:00:c1:68:d0:d4:ff:c0:7f:
                    b3:b6:2e:d3:10:ba:92:65:b5:2f:ca:86:1a:e3:ad:
                    c6:ef:39:c9:a6:32:a5:93:11:73:1e:da:ab:2d:ae:
                    46:ca:a7:5b:d9:4b:8a:11:ba:f8:48:80:ba:5e:9e:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1B:11:05:CA:F5:BA:18:A7:2E:A6:58:74:A0:4F:8F:A5:A3:4C:55
            X509v3 Authority Key Identifier:
                keyid:9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C10661843B8940941B0942E92BE662CB14B2D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:33:44:a0:8e:1c:53:f4:ab:4c:2c:f0:86:2d:d2:99:fb:
         2f:f8:fc:37:dd:38:58:b8:30:3f:48:f2:9e:50:e0:a7:29:61:
         0a:aa:c3:7a:a0:ca:31:34:0e:4c:e5:7d:f4:80:a6:fa:eb:8a:
         44:e5:ac:9c:9e:6b:de:2a:51:88:fe:c0:fb:53:02:65:77:67:
         e5:2f:15:52:44:e7:50:53:38:d7:00:80:47:33:70:c5:98:27:
         ad:d9:42:21:9f:fe:9b:ea:c2:e5:80:7b:75:df:e6:03:6b:be:
         72:a9:1d:d0:7a:c3:71:1b:c9:f8:29:a1:83:19:01:4f:6f:82:
         97:36:69:72:11:aa:4f:df:a8:4a:6d:21:2b:57:b7:9b:47:28:
         4e:88:69:c9:c1:53:f5:13:d2:6f:62:6e:e8:3c:cd:1e:cf:00:
         75:dd:37:10:87:29:d4:41:2b:36:46:80:fb:5c:0f:c8:82:15:
         d5:24:b4:48:27:fb:9a:78:8a:41:6b:d9:b1:84:43:57:b4:d1:
         fd:b5:ae:e6:7f:39:c3:fd:6b:5d:19:5a:5a:9a:ee:b4:d3:08:
         f5:c1:7e:0d:b2:63:06:30:8f:71:5c:f4:e0:ea:11:4d:fd:99:
         92:8c:b0:57:1f:ed:60:95:85:6c:45:17:64:c3:c6:1e:87:69:
         76:f6:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org