Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3332203d3e203533313831.roa
File:                     3137372e37342e3131322e302f32312d3332203d3e203533313831.roa (raw, json)
Hash identifier:          3FII30VonrUNnW2pPM0udU5knFU2YSkqXHfYts64auo=
Subject key identifier:   21:52:49:EB:54:6A:2D:29:9C:2F:B9:B0:AC:DD:59:E5:CA:11:7B:F6
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       31DC401C6C5BABD1AF9EF59F1EE299281CE08456
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3332203d3e203533313831.roa
Signing time:             Sat 10 Feb 2024 00:00:00 +0000
ROA not before:           Fri 09 Feb 2024 23:55:00 +0000
ROA not after:            Sat 08 Feb 2025 00:00:00 +0000
asID:                     53181
IP address blocks:        177.74.112.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dc:40:1c:6c:5b:ab:d1:af:9e:f5:9f:1e:e2:99:28:1c:e0:84:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Feb  9 23:55:00 2024 GMT
            Not After : Feb  8 00:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:69:01:0f:a5:a7:d7:a8:29:dd:7b:96:07:
                    39:b7:c8:72:36:f6:4a:3e:4a:27:23:d3:aa:da:ca:
                    f8:fd:ea:49:b1:77:be:d3:d5:5b:6b:63:46:3f:92:
                    ce:34:30:aa:55:82:a4:22:7e:5a:e5:3c:ad:58:1b:
                    5c:53:eb:a9:99:5e:7d:69:69:cd:36:60:ad:53:02:
                    5d:52:9b:13:b9:e2:0b:31:2d:07:e9:c2:ac:66:da:
                    97:9a:bb:6b:88:bc:32:fe:80:db:31:e7:6f:6f:97:
                    6d:32:80:fc:7b:29:89:39:72:dd:fc:e1:3a:ec:e2:
                    84:94:17:86:e3:df:be:95:58:8f:f0:df:d7:25:a5:
                    64:eb:45:8d:74:0e:07:63:73:88:73:b5:ce:80:72:
                    0a:2d:19:25:80:85:fc:8b:23:e0:fe:5d:38:65:51:
                    cf:ca:af:2a:c2:9a:81:3f:f2:71:42:0c:dd:eb:00:
                    d2:dc:ee:1c:bc:7f:bf:d1:c5:72:79:7d:44:cb:a5:
                    de:6c:d5:46:50:54:8a:dd:8c:4e:d4:1c:65:cb:de:
                    17:cf:4a:b9:22:52:4e:56:5a:08:42:96:3a:8e:66:
                    a1:b2:08:36:e2:c7:2f:d4:8e:b1:6c:0f:73:76:f0:
                    58:bd:29:38:4e:03:63:a1:11:3b:ee:8e:3f:f5:fb:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:52:49:EB:54:6A:2D:29:9C:2F:B9:B0:AC:DD:59:E5:CA:11:7B:F6
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32312d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:0e:cd:36:bd:03:28:86:f8:89:a7:79:36:c8:42:2b:ca:
         ae:55:9d:36:e2:f0:c8:e4:21:f4:ec:74:b5:43:74:8d:a3:51:
         8a:c7:43:63:ba:b6:6f:03:e4:e9:78:54:02:2c:ba:57:8c:56:
         3d:7e:66:eb:1c:7c:89:f0:4e:86:48:d2:c7:85:6e:f9:e7:2a:
         57:2a:4e:e6:7d:e2:77:e7:0c:9b:3d:be:84:ba:e2:a5:6c:38:
         58:5b:d4:2b:d7:37:f2:aa:93:73:f2:4c:6a:4a:8a:2f:ab:62:
         a2:75:07:9c:9e:f7:2e:47:f9:a0:01:9f:52:37:ad:27:b8:47:
         74:de:90:cc:41:f7:fc:40:76:bf:f0:4d:b3:ce:38:59:5f:a6:
         77:8c:fc:b9:7f:72:23:75:22:38:67:48:75:bf:b1:2a:ef:86:
         e3:31:54:75:f6:16:74:41:d9:d1:bd:e5:06:a7:0f:42:c1:a9:
         1d:6f:64:49:01:5a:04:60:09:11:57:07:ea:7b:c4:ac:be:db:
         bd:d4:21:b0:b8:26:a9:1f:ab:38:ec:c6:54:54:19:12:91:8f:
         7b:1a:87:7d:bd:4f:2b:76:45:02:a1:55:03:c6:0d:95:10:82:
         c7:1e:e3:fb:c5:71:76:16:04:40:c6:11:4b:1b:cf:f6:5b:3c:
         ef:ba:04:bb
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUMdxAHGxbq9GvnvWfHuKZKBzghFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzMEFGRjRGMEUzODAzNUZFOUZGRDNFQjk3RTE3NjY3
Mzk0RkU0OTAeFw0yNDAyMDkyMzU1MDBaFw0yNTAyMDgwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI0ODY5MDEwRkE1QTdEN0E4
MjlERDdCOTYwNzM5QjdDODcyMzZGNjRBM0U0QTI3MjNEM0FBREFDQUY4RkRFQTQ5
QjE3N0JFRDNENTVCNkI2MzQ2M0Y5MkNFMzQzMEFBNTU4MkE0MjI3RTVBRTUzQ0FE
NTgxQjVDNTNFQkE5OTk1RTdENjk2OUNEMzY2MEFENTMwMjVENTI5QjEzQjlFMjBC
MzEyRDA3RTlDMkFDNjZEQTk3OUFCQjZCODhCQzMyRkU4MERCMzFFNzZGNkY5NzZE
MzI4MEZDN0IyOTg5Mzk3MkRERkNFMTNBRUNFMjg0OTQxNzg2RTNERkJFOTU1ODhG
RjBERkQ3MjVBNTY0RUI0NThENzQwRTA3NjM3Mzg4NzNCNUNFODA3MjBBMkQxOTI1
ODA4NUZDOEIyM0UwRkU1RDM4NjU1MUNGQ0FBRjJBQzI5QTgxM0ZGMjcxNDIwQ0RE
RUIwMEQyRENFRTFDQkM3RkJGRDFDNTcyNzk3RDQ0Q0JBNURFNkNENTQ2NTA1NDhB
REQ4QzRFRDQxQzY1Q0JERTE3Q0Y0QUI5MjI1MjRFNTY1QTA4NDI5NjNBOEU2NkEx
QjIwODM2RTJDNzJGRDQ4RUIxNkMwRjczNzZGMDU4QkQyOTM4NEUwMzYzQTExMTNC
RUU4RTNGRjVGQjA4OTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4khpAQ+lp9eoKd17lgc5t8hyNvZKPkonI9Oq2sr4/epJsXe+09Vb
a2NGP5LONDCqVYKkIn5a5TytWBtcU+upmV59aWnNNmCtUwJdUpsTueILMS0H6cKs
ZtqXmrtriLwy/oDbMedvb5dtMoD8eymJOXLd/OE67OKElBeG49++lViP8N/XJaVk
60WNdA4HY3OIc7XOgHIKLRklgIX8iyPg/l04ZVHPyq8qwpqBP/JxQgzd6wDS3O4c
vH+/0cVyeX1Ey6XebNVGUFSK3YxO1Bxly94Xz0q5IlJOVloIQpY6jmahsgg24scv
1I6xbA9zdvBYvSk4TgNjoRE77o4/9fsImQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCFSSetUai0pnC+5sKzdWeXKEXv2MB8GA1UdIwQYMBaAFD4wr/Tw44A1/p/9Prl+
F2ZzlP5JMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFSzRIRUR0Q2hvcGZQ
ek1FV2JGZlQ4NHZ3OVRaQnZBaUZnenlLaVE4UEZyLzAvM0UzMEFGRjRGMEUzODAz
NUZFOUZGRDNFQjk3RTE3NjY3Mzk0RkU0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zRTMwQUZGNEYwRTM4MDM1RkU5RkZEM0VCOTdFMTc2NjczOTRG
RTQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERUs0SEVEdENob3BmUHpNRVdi
RmZUODR2dzlUWkJ2QWlGZ3p5S2lROFBGci8wLzMxMzczNzJlMzczNDJlMzEzMTMy
MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzUzMzMxMzgzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7FK
cDANBgkqhkiG9w0BAQsFAAOCAQEAMccOzTa9AyiG+ImneTbIQivKrlWdNuLwyOQh
9Ox0tUN0jaNRisdDY7q2bwPk6XhUAiy6V4xWPX5m6xx8ifBOhkjSx4Vu+ecqVypO
5n3id+cMmz2+hLripWw4WFvUK9c38qqTc/JMakqKL6tionUHnJ73Lkf5oAGfUjet
J7hHdN6QzEH3/EB2v/BNs844WV+md4z8uX9yI3UiOGdIdb+xKu+G4zFUdfYWdEHZ
0b3lBqcPQsGpHW9kSQFaBGAJEVcH6nvErL7bvdQhsLgmqR+rOOzGVFQZEpGPexqH
fb1PK3ZFAqFVA8YNlRCCxx7j+8VxdhYEQMYRSxvP9ls877oEuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org