Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3232382e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          vSlHVoBSGy4T/ayT8wsl58diSW/s9eK1qsOd7i79gUk=
Subject key identifier:   DD:5F:0E:2F:32:98:67:21:2C:75:97:F6:5D:70:E0:FB:59:D9:DA:96
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       26D329B38B865EBF6B11125981CE1D6E271D14FB
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32332d3233203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:57 +0000
ROA not before:           Thu 16 Nov 2023 15:23:57 +0000
ROA not after:            Thu 14 Nov 2024 15:28:57 +0000
asID:                     263652
IP address blocks:        177.74.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:29:b3:8b:86:5e:bf:6b:11:12:59:81:ce:1d:6e:27:1d:14:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:57 2023 GMT
            Not After : Nov 14 15:28:57 2024 GMT
        Subject: CN=DD5F0E2F329867212C7597F65D70E0FB59D9DA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:6a:84:db:8b:73:64:2d:36:2d:e4:22:04:
                    44:3d:3d:11:56:d9:0a:9e:32:39:9c:10:b4:18:29:
                    ef:56:aa:f1:9d:74:b9:ce:59:06:a1:a2:c2:a9:6c:
                    d2:12:5f:4b:31:64:76:fd:f2:48:d7:bd:36:3e:b5:
                    6b:af:b9:11:75:c9:37:d0:bc:c3:8b:9f:85:b4:cb:
                    49:66:da:4c:b2:ce:db:ca:94:b1:9d:38:14:a6:20:
                    0a:f3:c4:cc:ab:33:93:f4:cb:e1:a0:ca:e5:6d:7f:
                    25:cb:9e:bc:01:bc:09:c0:fe:fb:be:69:51:3b:34:
                    01:f4:21:71:78:d1:6a:8a:47:6d:43:cf:b4:c1:ca:
                    02:ad:de:d8:c0:60:9d:51:09:52:f4:d6:47:42:f1:
                    66:f6:74:dc:3c:3a:7a:35:ff:86:8d:d1:b2:e2:05:
                    88:1f:56:36:8b:20:0a:31:8c:7d:18:3c:63:93:7a:
                    01:2a:ad:84:f0:dc:7f:6c:3f:7b:29:d3:c0:e6:e5:
                    e1:c7:92:45:8d:b3:00:dc:ed:86:0d:6a:a0:bd:75:
                    97:04:c0:34:e2:e4:36:0d:4d:4b:66:97:d3:3c:53:
                    4d:ac:c1:8a:45:ec:d9:01:9a:97:92:ac:ab:30:8b:
                    46:77:0c:01:11:bc:d8:2c:07:67:93:b6:d0:b6:9f:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:0E:2F:32:98:67:21:2C:75:97:F6:5D:70:E0:FB:59:D9:DA:96
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:bb:f0:2b:e4:8e:f1:d5:ac:f5:ba:a4:17:d4:1c:42:90:d7:
         25:92:2f:06:4c:8c:47:11:09:81:54:68:ab:81:95:68:ab:a7:
         5d:ab:18:1b:44:1d:63:60:be:6d:09:bf:38:13:b4:44:b9:91:
         25:ca:27:3b:63:41:80:aa:37:68:ed:f6:d3:8f:f1:31:96:0d:
         8d:3a:82:90:35:01:07:a5:3a:c7:cb:af:c7:bb:36:c4:af:44:
         00:39:d6:d5:a1:7a:a8:f4:d7:a1:ee:c5:3b:f1:45:c3:93:f2:
         05:e8:44:a0:1d:7d:02:7a:0a:b5:61:48:5f:6d:1e:74:69:14:
         2f:91:7a:d0:b7:db:46:df:0a:aa:ad:88:b0:1c:85:4b:4a:60:
         c7:4a:cd:a5:8f:f6:3a:73:6f:10:fd:f8:3c:11:e9:df:7e:b6:
         ab:35:c2:18:da:fd:d6:85:63:a7:f4:78:37:46:46:d9:f5:61:
         f3:bf:6b:55:59:80:ee:02:59:cb:2c:aa:07:fe:39:47:d9:1c:
         2b:39:d2:01:13:60:d2:13:54:a9:e2:43:76:1b:5c:e6:06:41:
         3b:d5:42:09:79:85:75:c8:de:1e:f6:e8:c3:2a:e6:25:69:47:
         df:cf:e3:30:b1:2e:30:f1:de:e6:5b:72:ab:73:29:e1:1c:dc:
         32:f9:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org