Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232362e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3232362e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          E0PODPsrfU9l9pmuotDlPn0G7906Uj1eNUBQEFW24E0=
Subject key identifier:   DE:B9:F9:58:3C:9C:5D:28:57:28:92:B9:D5:9D:5F:D2:39:DF:5A:CC
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       0EE77885C5126635DD9799A9A1FE1A35D565933D
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232362e302f32332d3233203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:57 +0000
ROA not before:           Thu 16 Nov 2023 15:23:57 +0000
ROA not after:            Thu 14 Nov 2024 15:28:57 +0000
asID:                     263652
IP address blocks:        177.74.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e7:78:85:c5:12:66:35:dd:97:99:a9:a1:fe:1a:35:d5:65:93:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:57 2023 GMT
            Not After : Nov 14 15:28:57 2024 GMT
        Subject: CN=DEB9F9583C9C5D28572892B9D59D5FD239DF5ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:ea:5a:0b:97:69:63:78:da:f0:07:e7:b0:
                    07:b6:8d:7c:9b:69:67:91:2b:73:a0:9c:50:33:d4:
                    02:e3:b7:de:e7:70:ce:63:14:14:59:34:fc:6a:8f:
                    74:93:b8:e0:fa:f6:b2:fb:b1:04:52:d5:c9:81:22:
                    58:78:e8:19:53:3b:f0:9a:9a:a5:64:99:0d:3f:96:
                    3f:bc:66:b2:7d:30:25:2c:e8:37:b3:85:3a:0c:d9:
                    6e:ff:95:1d:15:0a:0b:dc:3d:cc:4f:a8:a9:ac:5c:
                    3e:28:a3:76:3b:d6:78:ec:de:1a:97:ff:d6:0b:6d:
                    ca:e2:cd:9c:28:d2:24:6c:9e:30:e7:72:52:fe:48:
                    19:79:bd:e2:d8:bf:45:a8:d8:53:73:79:05:6f:34:
                    72:a4:ef:b8:60:e5:dc:c0:1e:7a:77:07:5f:9b:79:
                    d4:fd:82:4b:f6:95:00:bc:aa:64:32:a4:85:28:c2:
                    c8:da:aa:36:66:0f:b8:6e:a4:1c:45:25:ea:b9:48:
                    5f:80:06:e9:b1:cf:44:71:04:8b:d8:d1:e0:cb:83:
                    45:5d:13:09:e9:dd:66:60:57:59:53:59:88:2e:c2:
                    6a:19:06:45:58:34:e6:25:ea:69:65:78:f4:b4:19:
                    dc:72:b4:1e:3a:fa:37:2b:e1:92:0b:fe:8d:2f:d9:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:F9:58:3C:9C:5D:28:57:28:92:B9:D5:9D:5F:D2:39:DF:5A:CC
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232362e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:8f:f3:3e:55:25:20:f8:f2:27:93:1f:ba:f8:d5:b2:07:b3:
         ce:e2:78:3e:02:31:c8:d4:1f:eb:f8:25:20:c7:1f:2d:5b:fc:
         2f:b1:55:3a:c3:24:86:fa:c8:3b:f9:18:d5:99:af:a2:c8:d5:
         38:4b:7f:ec:f0:52:fb:ec:70:5f:a2:46:61:74:10:3b:6a:15:
         11:14:42:cf:87:8d:01:a1:5c:d8:66:c7:42:bd:a2:60:aa:5a:
         fa:ae:62:b2:2e:74:82:66:5a:5d:49:e4:54:cd:94:44:29:48:
         f9:2f:fc:d6:9d:ed:ef:e6:78:f5:d7:f6:d3:73:51:5a:cd:e6:
         c3:9b:3a:ca:55:1c:b4:f6:fa:55:5c:10:b1:6e:32:3b:c3:0e:
         6e:1b:53:9c:c8:36:81:56:6b:ea:02:47:51:d8:ce:0d:1a:41:
         35:ce:b8:82:98:60:6c:c5:48:52:a2:1e:23:04:57:fa:72:81:
         41:ee:38:4c:91:0a:4b:bf:d0:36:fd:78:55:76:3c:db:45:09:
         dc:2e:6e:52:02:26:2d:2d:0d:eb:56:ff:ae:ea:0d:69:54:d1:
         e4:08:76:13:fc:a5:26:57:cc:07:32:13:12:bd:78:b8:ce:19:
         64:fa:b9:ef:8c:c9:f1:1b:c3:d2:18:c5:a4:ca:7d:d0:20:a1:
         87:ab:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org