Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3231203d3e20323633333830.roa
File:                     3137372e37342e3131322e302f32312d3231203d3e20323633333830.roa (raw, json)
Hash identifier:          OIX18Nfyjxvxl5qvTlI5yokSNm55jTGGGhm2PiQUJQ0=
Subject key identifier:   DD:BC:6E:0E:9E:D4:40:06:5E:4A:77:7D:89:AD:8F:B7:AB:AD:EE:C7
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       1CC000DDC663CAB59B1A23D129B978AD4A8BB14E
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3231203d3e20323633333830.roa
Signing time:             Thu 02 Dec 2021 18:26:01 +0000
ROA not before:           Thu 02 Dec 2021 18:21:01 +0000
ROA not after:            Thu 01 Dec 2022 18:26:01 +0000
asID:                     263380
IP address blocks:        177.74.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:00:dd:c6:63:ca:b5:9b:1a:23:d1:29:b9:78:ad:4a:8b:b1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Dec  2 18:21:01 2021 GMT
            Not After : Dec  1 18:26:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:17:89:75:76:b9:4e:bf:22:8f:01:50:22:
                    ef:2c:5a:75:8d:34:b5:30:ad:db:1c:ee:47:27:df:
                    7b:fe:89:31:b0:1c:77:42:96:56:ba:f4:4a:86:28:
                    c8:f4:96:ab:52:11:be:9c:0a:39:77:d1:b5:32:1d:
                    d6:db:cb:40:c0:60:1c:05:05:73:d1:04:ab:f1:39:
                    06:9d:f2:14:eb:35:10:e9:3b:94:77:13:3a:f2:68:
                    cc:d1:10:d8:bc:0f:d4:4e:66:0b:12:f5:d4:b1:7b:
                    7a:a7:3f:f7:75:da:e3:66:16:e4:7b:5a:8e:da:dd:
                    ab:fb:bd:b3:ad:7a:2f:df:ab:e9:cb:be:97:cd:35:
                    5f:73:4a:ad:9e:d2:f4:3a:ef:26:e6:5e:9f:3b:4c:
                    68:d0:af:63:be:05:30:f7:6e:ff:18:2d:6c:65:32:
                    44:c3:ef:76:4d:f5:5d:12:db:b9:df:94:6a:fd:9e:
                    50:a5:41:04:88:7d:59:cf:90:3f:24:bc:79:30:82:
                    25:7a:96:c0:29:df:ee:1c:3f:2a:c6:de:fa:a1:82:
                    dc:72:c3:04:79:6a:dd:fe:ee:4e:c7:44:bc:1a:b8:
                    01:57:d8:84:27:2e:b8:08:71:44:eb:d0:31:9d:84:
                    8c:7a:7a:26:1f:63:a8:62:7f:cd:e7:09:67:17:24:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BC:6E:0E:9E:D4:40:06:5E:4A:77:7D:89:AD:8F:B7:AB:AD:EE:C7
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3231203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:45:28:18:0b:1d:54:0f:65:10:9e:fa:16:d9:0c:34:84:
         09:16:00:f2:09:34:e8:74:19:aa:64:a2:5f:41:67:92:22:02:
         42:1d:d3:16:f0:65:62:d6:a3:56:79:67:37:5d:4e:b2:b5:dd:
         be:7d:a0:02:f1:ce:9a:fc:51:57:88:18:f1:ad:00:4a:9b:e8:
         8f:fb:45:16:06:dc:e1:cf:21:bf:5c:1d:bf:70:17:2b:b5:35:
         52:fb:2d:50:da:23:8a:a7:17:7c:3d:77:35:6d:0f:f9:5f:5d:
         91:1c:4b:d8:62:55:11:ae:99:31:7e:9e:3d:2d:a8:ff:ed:a6:
         7d:3d:67:6c:6e:1b:5c:0d:90:ec:19:9a:be:25:c6:50:28:b8:
         42:e0:6d:34:a0:44:00:f8:88:ec:13:ee:08:1b:7f:f9:9c:65:
         6d:ec:ed:4b:af:0d:b3:2f:98:34:33:ea:91:73:43:b8:dd:34:
         4a:3f:fb:ab:d8:1c:20:6c:e1:9e:2c:db:40:c9:7f:08:58:7d:
         fe:e5:eb:59:b7:03:8b:c3:e9:04:98:84:ea:1d:3e:d7:f1:46:
         72:a4:a1:ba:6d:ac:3c:30:de:bc:cf:0a:b4:fb:00:43:af:82:
         f6:7a:f3:c2:be:50:bc:4e:2b:c7:60:b3:6b:ef:be:7b:4b:40:
         dd:03:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org