Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          6yC5V8yne03Bn6/c/2BMbpX67Qk/Iw43Ayt088ikX0Y=
Subject key identifier:   1B:F9:96:CE:ED:40:71:57:1C:61:10:20:D4:52:47:DE:F3:B5:F3:17
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       0C8E65A0D58CEEFA71803AB54FE9848696959C9C
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:55 +0000
ROA not before:           Thu 16 Nov 2023 15:23:55 +0000
ROA not after:            Thu 14 Nov 2024 15:28:55 +0000
asID:                     263652
IP address blocks:        177.74.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8e:65:a0:d5:8c:ee:fa:71:80:3a:b5:4f:e9:84:86:96:95:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:55 2023 GMT
            Not After : Nov 14 15:28:55 2024 GMT
        Subject: CN=1BF996CEED4071571C611020D45247DEF3B5F317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:64:69:c8:03:aa:fe:da:05:4f:c6:7d:34:
                    e8:37:d5:43:b4:0a:5f:32:8e:e9:c7:90:22:4e:03:
                    b4:a2:a9:0f:56:b6:27:af:ba:9f:49:68:b3:f1:2a:
                    ff:a5:c0:60:27:08:df:a4:5c:23:86:c9:60:0c:7e:
                    29:68:a5:97:7a:3c:70:88:e7:c8:67:f9:36:9b:1d:
                    00:8b:c4:8e:cc:f5:df:ba:d0:11:8e:91:e4:a3:99:
                    41:e4:72:c3:8b:e2:31:0f:72:99:c2:d9:3a:68:31:
                    c4:c9:35:a2:80:10:55:01:b5:da:01:a2:c9:11:55:
                    ad:e7:58:21:e5:9d:b9:96:00:1e:4a:8d:ac:be:4d:
                    fa:aa:84:a5:e3:a8:6e:3a:11:58:10:38:50:07:49:
                    c0:c9:2b:24:1f:21:29:f5:4c:2b:6f:6b:db:b2:f0:
                    b0:80:27:ff:1b:51:9c:c5:07:1e:39:83:e6:b5:01:
                    f5:90:35:e0:e7:bf:49:08:cb:1f:cc:7f:b6:39:4b:
                    38:ee:6d:59:a5:2f:fe:c4:86:9a:4b:19:21:f8:2f:
                    41:8f:aa:75:45:b4:52:c4:09:91:2e:99:0e:d9:a9:
                    02:03:26:b9:d3:a3:6a:18:a5:86:67:72:d9:0d:55:
                    cf:3f:03:09:59:3d:5f:41:1a:59:37:34:f4:2e:b7:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:96:CE:ED:40:71:57:1C:61:10:20:D4:52:47:DE:F3:B5:F3:17
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:0a:f6:0c:f2:72:d2:90:42:56:4e:c1:27:7d:0a:37:74:
         09:02:45:88:b9:99:27:98:00:32:a2:b9:77:86:10:23:07:bf:
         7a:92:e0:58:fa:93:96:0a:f3:46:ee:6e:f3:88:78:70:41:0f:
         c5:18:34:ff:42:9e:3b:2d:06:9b:74:8a:79:41:06:4e:5a:45:
         eb:97:c9:28:c6:48:0e:09:fc:93:66:b7:d0:48:1f:d1:25:72:
         b3:c1:f7:3d:d8:74:26:a3:d8:56:0c:6d:b3:44:4b:57:44:2a:
         80:45:7f:14:5b:40:5b:ab:d1:9a:19:2c:5f:b2:9d:e5:ed:4d:
         f6:9f:fb:27:23:2c:29:83:cf:1c:06:a2:a7:f9:c2:77:b9:d4:
         18:16:b7:dd:7e:f7:ba:22:d1:05:fc:36:97:00:b2:ad:e0:f5:
         8a:71:da:b8:d5:d1:48:a3:4f:95:1a:e0:92:f7:d9:e4:e6:de:
         c8:96:b3:c0:ec:19:5d:6b:bc:5b:1d:cd:15:28:d1:b2:85:9d:
         c7:8a:2a:cc:8b:ac:82:61:6d:a1:ec:9b:78:d6:71:43:19:03:
         e2:87:d3:2b:14:a5:3a:bf:25:85:86:54:cd:96:2a:67:51:5f:
         e4:04:42:03:ed:c3:e6:77:6e:55:63:75:0b:08:6a:8a:fa:14:
         fd:5c:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org