Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa
File:                     3137372e3132342e37342e302f32332d3233203d3e203532363031.roa (raw, json)
Hash identifier:          McnT2khAtcWyp89mXgrvUlNB2bBGOxfaC4wFxYmJHNs=
Subject key identifier:   1A:9A:B3:16:5D:B9:B7:70:6E:6E:B4:6B:09:9A:B2:23:21:95:22:C1
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       1D685DC45AB0A332F80534235BC2632F960A5275
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa
Signing time:             Thu 16 Nov 2023 15:26:18 +0000
ROA not before:           Thu 16 Nov 2023 15:21:18 +0000
ROA not after:            Thu 14 Nov 2024 15:26:18 +0000
asID:                     52601
IP address blocks:        177.124.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:68:5d:c4:5a:b0:a3:32:f8:05:34:23:5b:c2:63:2f:96:0a:52:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Nov 16 15:21:18 2023 GMT
            Not After : Nov 14 15:26:18 2024 GMT
        Subject: CN=1A9AB3165DB9B7706E6EB46B099AB223219522C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:c0:20:7b:e3:8e:2f:b4:d3:af:7a:02:4f:
                    3c:04:ff:65:e8:66:8c:c7:bc:81:f9:bc:d6:68:b6:
                    70:f8:66:6d:f9:00:5d:65:58:a1:3f:e0:fe:22:29:
                    72:b5:8a:ec:9d:9a:02:00:0e:41:9a:e1:d6:d8:91:
                    b4:a1:67:93:30:9b:b1:02:9c:86:0c:27:fc:45:da:
                    dd:f3:e6:c2:a8:ea:c7:d5:41:59:53:29:31:d7:a9:
                    2e:7e:11:bb:3e:f6:b4:3f:ac:26:e7:ab:58:b9:30:
                    39:86:26:e7:b0:ba:75:9d:c6:97:96:86:ce:ed:54:
                    e4:24:75:38:09:d5:53:99:1b:00:5b:b6:c5:64:6e:
                    c5:74:86:8e:87:b6:17:65:64:46:ec:b6:e3:c1:26:
                    c3:29:81:e8:e3:cb:d5:a0:4c:b2:90:ea:b6:35:da:
                    b1:dd:ed:c3:00:94:66:ef:32:87:54:6b:26:dc:d3:
                    d7:1d:bc:d4:11:a4:0e:fb:36:00:ed:60:18:f5:77:
                    dd:7a:3e:5f:06:5d:b9:db:7e:98:41:f1:6e:63:18:
                    b3:9d:48:fe:8d:47:52:53:d0:dc:73:2a:95:d6:6a:
                    51:a2:37:9b:f7:ce:34:c1:f1:9f:37:59:e2:c4:58:
                    fe:61:28:e6:02:f8:30:f6:3e:b7:81:49:74:a8:5a:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:B3:16:5D:B9:B7:70:6E:6E:B4:6B:09:9A:B2:23:21:95:22:C1
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:eb:58:5f:d7:c0:37:21:2e:43:c7:12:14:90:b1:87:b7:
         29:7e:85:9d:fa:9b:c3:ed:3f:63:62:51:ed:3e:86:75:4e:6e:
         99:52:91:86:8f:5e:73:65:51:26:4b:34:a9:48:e3:18:ab:08:
         25:1c:16:bc:06:ee:c4:6e:f2:db:b8:5e:bf:e9:61:7b:1c:f2:
         99:7c:59:fd:29:d3:44:9e:78:58:70:08:d1:4e:c2:7d:c3:dd:
         60:bc:c1:ab:b6:11:d9:d2:36:f3:f1:56:48:da:fb:c0:cc:de:
         cd:cc:af:e4:4e:26:8d:57:f7:58:62:91:18:e3:f3:8e:12:1d:
         bd:4c:82:a1:b6:d9:05:07:c4:24:ef:cd:5e:e1:4f:82:92:a2:
         f3:bf:4d:80:80:df:92:89:4e:9e:4e:53:cd:3e:27:06:14:e3:
         19:69:1b:4a:e6:8f:be:55:00:a9:48:2a:75:53:fe:fd:16:49:
         18:81:46:99:ef:38:fa:83:ea:e2:c4:93:48:ad:9e:6e:d8:6f:
         5d:4e:88:62:0d:12:b7:e4:8c:31:84:8d:0a:55:ed:93:da:6a:
         3d:48:ee:e3:be:e5:00:ec:21:94:54:54:7d:1a:4d:69:9d:16:
         d4:40:b0:0d:97:a8:67:27:8d:4d:01:76:6e:92:b1:6a:e8:d7:
         59:df:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org