Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          VSQaeDqDmTMLTRGOh8oqrUlfHd0sSMyyopIFP09qHYk=
Subject key identifier:   F5:F5:53:D6:33:96:2F:A8:F7:A3:BB:07:74:BB:BF:64:14:77:8F:81
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       39364338D0B5386EC2362DCE81E5FE449DFFD8B6
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:58 +0000
ROA not before:           Thu 16 Nov 2023 15:23:58 +0000
ROA not after:            Thu 14 Nov 2024 15:28:58 +0000
asID:                     263652
IP address blocks:        177.74.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:43:38:d0:b5:38:6e:c2:36:2d:ce:81:e5:fe:44:9d:ff:d8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:58 2023 GMT
            Not After : Nov 14 15:28:58 2024 GMT
        Subject: CN=F5F553D633962FA8F7A3BB0774BBBF6414778F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:45:f2:d1:a2:2b:41:a1:66:67:e3:f5:15:
                    a0:a4:31:c6:88:30:dd:b3:55:7d:3b:ff:ca:09:42:
                    1c:b9:de:db:88:d9:a9:ff:28:08:2c:f8:65:c7:83:
                    85:1d:92:eb:f7:17:8e:71:bf:fa:dc:e9:44:33:09:
                    87:64:9f:4d:14:ad:0e:75:ad:6d:9f:a2:7e:5a:ab:
                    f3:7a:d8:54:e8:a1:83:9a:b0:fa:cc:ba:56:75:a5:
                    6b:6c:e2:85:a7:6b:d4:65:80:eb:21:93:cd:b6:72:
                    02:c0:d5:b8:a5:06:2c:e6:53:34:14:d1:d4:3b:c1:
                    d3:e1:27:bd:6c:14:61:c3:30:13:5d:17:4c:bc:b2:
                    56:2b:b5:6f:68:50:a9:78:b5:ef:47:eb:f9:95:29:
                    29:30:8d:55:41:97:dd:50:86:0f:6f:bf:a3:27:b0:
                    2a:44:36:f1:38:75:a1:14:f8:4a:2e:7e:d1:69:0e:
                    d8:70:0d:3c:63:8a:f4:fe:42:99:aa:84:0d:1a:b2:
                    2a:e5:e6:54:2b:ee:12:97:5b:d9:5d:87:62:a8:11:
                    de:25:ca:96:45:48:a3:78:08:98:0b:20:ed:71:22:
                    bc:24:63:06:d0:da:95:f3:d4:b1:95:c5:8c:1c:88:
                    a6:72:47:0e:2a:36:ef:4e:f6:a9:f4:fc:da:56:0a:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F5:53:D6:33:96:2F:A8:F7:A3:BB:07:74:BB:BF:64:14:77:8F:81
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:3c:46:4a:17:e3:30:2e:84:d4:54:82:09:86:d2:f0:79:
         e8:06:fe:75:88:47:7f:e0:8a:8a:cb:ea:67:e1:08:a7:99:6e:
         1e:a3:66:ab:d9:63:2f:18:b8:17:5c:7e:a4:c7:45:12:20:bd:
         6d:4e:01:2d:1c:73:86:9a:ee:47:23:2f:db:60:3a:5a:42:99:
         32:3b:83:47:d9:00:eb:9c:98:ba:bd:6f:b8:54:aa:be:f4:8b:
         f3:0c:8e:89:78:24:f3:f7:22:6a:c5:cf:7c:9b:02:c0:8b:d7:
         25:cc:b8:5a:9a:93:86:e0:2c:06:4f:96:d9:9d:31:f2:46:68:
         0f:22:b9:f5:18:0b:98:bb:17:d7:9d:dd:ae:de:3f:15:2d:15:
         af:00:1d:3d:01:0b:96:d3:00:11:44:0f:64:e8:9c:fe:8a:aa:
         13:dd:39:a9:a0:43:3e:f6:b9:94:52:ad:61:87:d5:59:fd:3e:
         56:3c:76:70:37:0b:9a:7d:c4:34:67:41:27:e6:34:8a:96:69:
         08:53:40:cb:53:86:93:59:66:92:7c:37:29:2e:13:bd:46:d0:
         d9:27:b6:66:11:d2:2a:85:89:e9:e7:ec:d2:1c:d8:99:96:c8:
         9d:cd:d6:33:66:dd:70:8d:3f:a6:4f:3f:9b:06:11:fb:46:11:
         8e:a7:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org