Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3234203d3e203631353838.roa
File:                     3137372e37342e3132382e302f32312d3234203d3e203631353838.roa (raw, json)
Hash identifier:          NFcnLQ3jtnZ/XOIg5zpjC4UCBj/rH3YIZOSQMbZS9aU=
Subject key identifier:   84:67:0A:43:71:D4:C8:DA:CF:12:87:D1:94:1F:B1:BE:75:01:09:8A
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       1D33B0B45C571F4992C61B695A9054EBB074B493
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:56 +0000
ROA not before:           Fri 18 Nov 2022 17:45:56 +0000
ROA not after:            Fri 17 Nov 2023 17:50:56 +0000
asID:                     61588
IP address blocks:        177.74.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:33:b0:b4:5c:57:1f:49:92:c6:1b:69:5a:90:54:eb:b0:74:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:56 2022 GMT
            Not After : Nov 17 17:50:56 2023 GMT
        Subject: CN=84670A4371D4C8DACF1287D1941FB1BE7501098A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:ad:8d:1a:04:4f:d3:64:68:34:8e:10:55:
                    5b:0e:b9:62:31:7c:7d:70:d7:4f:af:4b:ac:73:c8:
                    a1:e3:bc:28:71:2e:37:50:3a:da:54:27:aa:9f:8d:
                    20:d6:57:97:87:04:90:f7:57:1b:c9:7c:0e:ed:a7:
                    5d:14:9a:d3:e7:25:69:2e:b4:d3:66:a2:37:4a:ed:
                    59:d1:3e:04:83:3f:99:89:96:c3:a9:1a:da:34:a7:
                    f7:56:62:61:7f:8a:73:53:f6:9c:0e:e3:c7:aa:c1:
                    01:40:0e:c5:1f:50:3e:38:65:ea:c1:d2:d6:e5:60:
                    f6:be:e2:07:10:1e:85:af:5e:38:e6:b6:07:14:1a:
                    d0:d7:5a:6c:45:76:35:73:6d:6b:e3:96:73:82:10:
                    a0:24:36:b7:b8:91:12:b4:42:d5:43:b6:27:9f:87:
                    ee:55:66:e5:e6:82:f8:64:dd:dd:c0:02:85:1f:85:
                    38:d1:4c:e7:45:a4:7c:69:cb:19:48:66:fb:a9:ad:
                    cb:2d:48:51:3c:29:79:96:8d:ec:64:b8:1c:3a:57:
                    e3:b5:31:db:98:e9:9c:00:5b:4d:5d:36:89:18:af:
                    de:30:d9:69:0a:46:ba:6b:4c:be:06:b8:1d:62:c0:
                    40:82:f8:b3:17:5a:17:0b:20:ae:f3:b0:14:0b:56:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:0A:43:71:D4:C8:DA:CF:12:87:D1:94:1F:B1:BE:75:01:09:8A
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137372e37342e3132382e302f32312d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:78:49:c4:12:1d:b1:2d:7b:e4:03:46:55:e3:ab:4f:7c:26:
         d1:21:d5:70:60:06:34:c6:c4:6e:dd:57:f0:d1:42:ef:87:77:
         ff:38:a0:db:1f:2f:a0:52:e2:26:4b:24:a7:4b:6c:f3:5d:a7:
         4b:0c:92:09:92:c7:9a:86:fa:ed:4e:f3:a6:0d:8d:74:a6:fd:
         73:ed:7d:21:38:0f:96:b9:c4:81:6a:d4:08:18:38:e2:2a:c6:
         c9:d4:9f:b8:ce:0b:3b:ef:de:a7:eb:c1:86:d0:b0:ca:98:f3:
         58:bb:78:a8:23:a6:39:b5:1e:51:ca:cd:68:44:b7:4e:d1:a9:
         57:cd:b4:94:dc:da:6b:67:22:51:54:27:bf:6d:f3:b9:35:66:
         d3:8f:e4:d8:0e:79:0b:85:fa:5a:42:bd:9d:44:18:ab:bc:36:
         83:89:b1:7c:e4:47:8a:3d:8f:2c:c0:53:8f:d8:f0:31:b4:28:
         fd:a6:1e:80:bf:ec:2b:1d:e3:24:a2:a7:d9:1e:94:11:81:fe:
         2b:e6:0c:b1:0b:40:ba:21:89:bc:ec:47:04:cd:f7:46:95:ff:
         b5:38:54:81:19:ef:4f:99:51:62:2c:3c:ff:26:ed:c8:6d:3c:
         e2:13:df:1c:1f:55:23:0f:eb:d8:01:cf:37:9c:8a:55:e9:a1:
         51:88:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org