Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32322d3232203d3e20323633333830.roa
File:                     3137372e37342e3131322e302f32322d3232203d3e20323633333830.roa (raw, json)
Hash identifier:          5rVSFQJAGhKJNgAbrDRtbvOfLYKdt4zczqCeSFhTPxk=
Subject key identifier:   F9:11:33:E4:31:23:96:E2:E7:07:BD:8A:95:CB:A1:B5:2B:55:F6:87
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       74BB105EB379F29AF46229176154EA145FEB6450
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32322d3232203d3e20323633333830.roa
Signing time:             Thu 02 Dec 2021 18:26:22 +0000
ROA not before:           Thu 02 Dec 2021 18:21:22 +0000
ROA not after:            Thu 01 Dec 2022 18:26:22 +0000
asID:                     263380
IP address blocks:        177.74.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bb:10:5e:b3:79:f2:9a:f4:62:29:17:61:54:ea:14:5f:eb:64:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Dec  2 18:21:22 2021 GMT
            Not After : Dec  1 18:26:22 2022 GMT
        Subject: CN=3082010A0282010100C1421EADDA0C733B71C5B3EA8AC1894DBBB945F057B6DAB411A02442C0B7F708AB6C075E3372D8B3609CE582ACD929DD929F741EE078D99EC697460443565304E9D801B48E1F363FD73AD5B1DA388A8E2A932A19B311C95349DABD10C766B25615930AEC4531BF02B8C9070B5CD6027E95A8FE22B20584DC3C95030DF81FADED2CEAF722E09EA86D88E2AE2593F894DA7FCC967A5EE11938F9882714105492E9BFBD8E9EB2BEC2E9D195C8D421F2B910E9DEECBFD53E38D0990EE33CA2DF6D77C1E65F329D40AFAACA12E318C6B8232DEC9F6019D02590CFDAA7477E4E0105203F542A2DF3F582C82584A62E5D224DBB664E7D0B96D6B704BF9EE510486B37B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:1e:ad:da:0c:73:3b:71:c5:b3:ea:8a:c1:
                    89:4d:bb:b9:45:f0:57:b6:da:b4:11:a0:24:42:c0:
                    b7:f7:08:ab:6c:07:5e:33:72:d8:b3:60:9c:e5:82:
                    ac:d9:29:dd:92:9f:74:1e:e0:78:d9:9e:c6:97:46:
                    04:43:56:53:04:e9:d8:01:b4:8e:1f:36:3f:d7:3a:
                    d5:b1:da:38:8a:8e:2a:93:2a:19:b3:11:c9:53:49:
                    da:bd:10:c7:66:b2:56:15:93:0a:ec:45:31:bf:02:
                    b8:c9:07:0b:5c:d6:02:7e:95:a8:fe:22:b2:05:84:
                    dc:3c:95:03:0d:f8:1f:ad:ed:2c:ea:f7:22:e0:9e:
                    a8:6d:88:e2:ae:25:93:f8:94:da:7f:cc:96:7a:5e:
                    e1:19:38:f9:88:27:14:10:54:92:e9:bf:bd:8e:9e:
                    b2:be:c2:e9:d1:95:c8:d4:21:f2:b9:10:e9:de:ec:
                    bf:d5:3e:38:d0:99:0e:e3:3c:a2:df:6d:77:c1:e6:
                    5f:32:9d:40:af:aa:ca:12:e3:18:c6:b8:23:2d:ec:
                    9f:60:19:d0:25:90:cf:da:a7:47:7e:4e:01:05:20:
                    3f:54:2a:2d:f3:f5:82:c8:25:84:a6:2e:5d:22:4d:
                    bb:66:4e:7d:0b:96:d6:b7:04:bf:9e:e5:10:48:6b:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:33:E4:31:23:96:E2:E7:07:BD:8A:95:CB:A1:B5:2B:55:F6:87
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131322e302f32322d3232203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:49:1f:5f:da:2a:0d:fe:7f:80:c1:f8:c3:9a:ef:0a:05:61:
         ed:d2:5b:c0:45:c0:91:45:c6:53:6e:c7:c1:80:94:4b:6e:4b:
         01:75:2d:52:32:93:06:c7:02:8a:5b:87:c3:99:03:54:35:06:
         3a:4c:15:b6:76:a0:06:bc:c5:e6:27:f4:b6:29:00:a3:cb:b2:
         2b:cf:34:d7:7f:04:67:c9:7b:c1:08:da:d4:32:5a:ea:11:c6:
         40:03:46:b1:33:36:fe:04:8a:f2:45:27:c3:6a:2e:37:0b:ea:
         61:b0:fe:f4:72:78:2d:c3:e1:fd:f1:e1:69:07:93:17:67:e9:
         75:68:ab:6a:5f:0d:30:eb:66:2e:17:59:f0:9e:e1:15:77:0d:
         79:d0:5d:7d:fa:f8:ed:28:0e:2b:6c:59:31:5d:52:77:4f:2d:
         04:b3:82:1d:5c:22:a5:f4:77:46:2e:8c:b4:31:44:77:db:5c:
         62:00:9e:39:9f:ea:dd:74:94:0c:80:59:88:4b:e6:99:6f:f8:
         fd:6a:a1:02:7a:38:ce:09:bc:06:69:02:8f:50:67:36:f4:73:
         a8:b5:54:3b:ed:41:c0:74:6c:92:51:41:8f:4d:11:6e:ba:94:
         30:6c:f9:8a:d0:44:fd:0d:e2:fe:0d:5e:1e:f8:41:ec:e4:6d:
         2a:71:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org