Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          OITtZ/BmeNd+c/pcp7RRfSR9O3C7GCLHlqQy4DVTif8=
Subject key identifier:   F6:21:F2:ED:2D:7F:7B:43:61:9A:F7:D3:08:F4:45:17:94:D3:58:BE
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       312FC1DD10854EFAD3810136469BBBA75DC3B612
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:56 +0000
ROA not before:           Thu 16 Nov 2023 15:23:56 +0000
ROA not after:            Thu 14 Nov 2024 15:28:56 +0000
asID:                     263652
IP address blocks:        177.74.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2f:c1:dd:10:85:4e:fa:d3:81:01:36:46:9b:bb:a7:5d:c3:b6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:56 2023 GMT
            Not After : Nov 14 15:28:56 2024 GMT
        Subject: CN=F621F2ED2D7F7B43619AF7D308F4451794D358BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:e1:7b:3f:26:cd:7d:b9:44:99:cc:bb:89:
                    4f:62:32:21:55:00:de:d7:79:6d:b8:d7:d6:7d:f8:
                    e5:16:ec:3c:22:d2:7f:78:b4:d8:9e:23:9a:4b:1e:
                    8f:79:44:f8:b6:07:7a:8c:5e:8a:ff:3f:0e:0a:8e:
                    26:31:f8:11:8d:56:44:4b:61:cc:6d:39:b9:c2:93:
                    1f:21:83:e1:f1:36:1d:6e:d1:48:1f:b0:34:4b:da:
                    f7:89:78:72:25:28:0d:35:03:92:7f:fb:8d:4e:54:
                    10:7f:63:03:d3:81:f4:81:0d:85:d9:da:c0:5b:3d:
                    99:42:cb:9f:04:aa:5d:7f:ed:57:2a:b3:2d:32:bc:
                    f1:b7:fb:e8:02:65:ca:93:cc:c4:f3:c8:22:b5:29:
                    28:50:36:f0:67:55:38:85:8a:64:8a:ff:d2:35:c2:
                    9d:a7:ba:f4:53:56:a8:c9:5b:c8:a9:62:8d:d1:f0:
                    14:17:bb:81:9f:35:6f:ca:69:5d:84:64:0f:73:9c:
                    3d:01:55:69:4d:40:1a:60:b6:fa:40:bd:66:ad:8e:
                    2f:32:ad:33:c2:34:ab:a7:ff:f9:81:f4:87:10:b5:
                    5d:0a:21:00:49:2a:1a:b6:5c:dc:30:97:b3:5a:66:
                    f8:c3:fe:9e:0b:5b:01:e7:d7:c1:40:a8:52:67:3b:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:21:F2:ED:2D:7F:7B:43:61:9A:F7:D3:08:F4:45:17:94:D3:58:BE
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:a2:0f:17:ea:38:79:d5:b8:5e:ab:bc:d1:66:dc:25:ca:
         8c:ed:e4:f3:19:0d:0e:1d:95:ed:54:75:60:9d:6b:9a:49:0f:
         c8:8e:c9:f6:06:06:1d:89:a4:4e:2c:42:5f:62:28:d1:c1:65:
         f7:66:1a:b2:a9:ea:e5:f3:bf:f2:ba:3f:67:39:fe:bd:64:a5:
         fc:b7:6e:2b:af:61:0a:34:50:36:7a:c9:a7:c1:e6:6f:a5:4b:
         1a:74:a9:13:74:6b:3e:14:84:c5:7d:56:00:55:ec:7b:e2:23:
         f2:3e:66:fd:ed:83:28:72:30:ff:cd:b9:89:86:70:bf:48:0e:
         ca:7e:23:08:ae:bc:5b:99:68:1f:1f:70:28:74:79:38:e6:5b:
         8c:25:1c:51:7f:79:08:7a:ae:9c:a1:a1:bc:ad:87:3f:73:f2:
         cc:ab:29:ef:76:64:6b:00:20:59:82:47:2f:88:37:b3:55:93:
         f6:b4:e4:de:dd:fe:c2:5c:e2:19:7b:4e:29:65:54:19:77:bb:
         c4:b9:5c:55:1d:97:56:6b:eb:08:32:d6:39:04:e4:9a:94:9a:
         f6:38:b0:ac:0e:69:65:39:6c:57:60:b8:ae:67:0a:72:d3:59:
         c8:94:27:d7:84:3d:fa:95:93:76:de:58:e7:be:10:9b:a0:45:
         97:25:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org