Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32322d3234203d3e20323632333736.roa
File:                     3137372e37342e3134382e302f32322d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          pKdAwpp1oc8y4ev7f148XOVJiPMFMZmHbzqhXuObC3M=
Subject key identifier:   99:0F:5E:13:31:44:AC:B7:58:DE:1F:7C:B8:85:48:C5:44:04:8D:6B
Certificate issuer:       /CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
Certificate serial:       51C8ED2EF70A5A166CD60BA6433EE35C18DA00BC
Authority key identifier: 3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32322d3234203d3e20323632333736.roa
Signing time:             Thu 10 Aug 2023 17:46:00 +0000
ROA not before:           Thu 10 Aug 2023 17:41:00 +0000
ROA not after:            Thu 08 Aug 2024 17:46:00 +0000
asID:                     262376
IP address blocks:        177.74.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:ed:2e:f7:0a:5a:16:6c:d6:0b:a6:43:3e:e3:5c:18:da:00:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
        Validity
            Not Before: Aug 10 17:41:00 2023 GMT
            Not After : Aug  8 17:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:aa:70:42:bf:04:36:9e:bd:21:5c:7a:d3:
                    c4:9d:59:4c:f9:d6:17:0e:e3:d3:5f:56:de:19:92:
                    ab:8a:fd:ef:ac:95:25:1d:79:dd:df:c3:64:f2:3f:
                    10:49:c6:99:27:62:18:42:a6:20:e7:62:c1:c9:81:
                    d2:47:13:e1:33:92:3f:28:7b:49:a6:6b:91:51:8f:
                    d1:c5:8a:25:90:23:52:8e:20:e0:d5:fb:5e:83:64:
                    47:bb:de:09:ca:0c:fa:33:52:7a:69:1d:c2:4f:90:
                    68:47:0e:c0:41:c3:0f:ab:ae:31:ac:6b:09:59:74:
                    4f:c2:83:4a:ea:9b:06:1c:43:d4:b7:10:3b:ff:97:
                    63:eb:b8:1b:e8:23:ee:46:fb:78:87:0c:68:67:1c:
                    26:fe:84:04:11:47:6f:f3:41:e1:b6:9f:eb:6b:f3:
                    20:b4:8a:ce:1d:7f:25:60:79:c8:3b:ce:13:da:39:
                    71:0e:9b:e0:79:11:83:bb:32:27:75:0b:03:e7:5c:
                    e0:ed:97:e8:5d:f0:50:f5:24:2c:75:5b:79:13:3a:
                    48:30:f6:79:f1:d3:b6:5d:13:e6:f8:16:df:c5:74:
                    02:c4:03:3c:3f:94:eb:53:ac:3c:be:d3:f0:9b:3c:
                    a3:de:76:cb:19:57:dc:d3:ba:72:ce:e5:a3:9e:35:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:5E:13:31:44:AC:B7:58:DE:1F:7C:B8:85:48:C5:44:04:8D:6B
            X509v3 Authority Key Identifier:
                keyid:3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32322d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:2c:9d:19:de:f6:ec:d7:81:58:1d:e5:e7:b2:5e:6b:cb:
         e7:ea:be:22:72:4b:52:91:2a:53:c1:0b:51:3b:3e:a0:5e:96:
         ff:44:cc:7a:9b:6d:8c:c9:bf:ae:6d:36:f2:b2:4a:6d:0a:e0:
         8c:ef:f8:c2:32:85:b0:e5:cc:28:07:77:b5:3f:1b:6b:eb:08:
         a0:a6:9c:03:3a:83:dd:cb:13:d9:08:3e:c3:56:89:56:d8:15:
         20:d9:8e:95:51:40:a4:71:01:64:9f:a7:bd:30:97:9b:6d:6d:
         cc:82:7a:b9:33:8b:59:2c:11:d8:22:a0:6b:c1:2e:f6:f6:12:
         2e:e0:14:e2:58:1c:12:d0:e7:85:aa:66:36:42:b0:6e:2b:e1:
         f7:db:34:f3:5a:53:72:e7:d0:39:4e:c4:b5:17:4b:d7:0a:1a:
         6e:8c:8a:ef:c7:6f:04:60:3a:32:ff:15:9f:51:45:f4:71:a0:
         27:5c:c1:68:54:a3:51:22:fc:22:ad:a0:58:a7:67:ac:b4:1b:
         46:69:00:7a:b1:5a:46:31:bf:7c:97:1c:ab:78:6b:61:8b:54:
         37:26:b2:d0:02:c5:73:53:5a:6b:be:92:a2:1d:4e:44:39:d4:
         d1:20:1a:6f:51:a8:d7:33:e6:30:b9:b8:4a:cf:52:61:4b:b7:
         22:07:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org