Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131332e302f32342d3234203d3e20323633333830.roa
File:                     3137372e37342e3131332e302f32342d3234203d3e20323633333830.roa (raw, json)
Hash identifier:          YyEYGMoxHwDEroTIyqdt8p9Ncr274vnXLpC25AaDr8E=
Subject key identifier:   DE:61:C9:10:24:F8:AA:B7:A7:1B:16:20:EB:84:B7:D8:EF:1E:7C:3C
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       4DEAC4BDACF841D904049C6CF7212BB08EFFD7B7
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131332e302f32342d3234203d3e20323633333830.roa
Signing time:             Thu 02 Dec 2021 18:26:27 +0000
ROA not before:           Thu 02 Dec 2021 18:21:27 +0000
ROA not after:            Thu 01 Dec 2022 18:26:27 +0000
asID:                     263380
IP address blocks:        177.74.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ea:c4:bd:ac:f8:41:d9:04:04:9c:6c:f7:21:2b:b0:8e:ff:d7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Dec  2 18:21:27 2021 GMT
            Not After : Dec  1 18:26:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:bf:71:69:19:6d:7a:e1:3f:cc:6e:b3:e2:
                    5d:6a:b1:60:d6:ff:05:bb:cf:3d:f5:78:8c:1e:95:
                    25:20:f9:30:5e:69:21:42:f0:58:bc:b6:a2:08:e9:
                    e9:79:2d:99:c7:eb:b6:38:88:aa:ef:15:c8:5a:d7:
                    8f:7c:3f:2b:fb:40:f7:74:d5:b9:dc:9f:a4:22:4f:
                    26:ab:12:1b:77:05:cb:c0:7c:dd:e5:20:15:99:fd:
                    b6:17:d0:0c:9c:cb:4b:96:03:a4:42:76:fb:46:47:
                    fb:d4:0a:d7:93:ac:18:8b:60:30:d8:45:07:0b:98:
                    d0:34:28:a9:3a:03:df:6d:85:46:1f:8a:0e:05:17:
                    26:f1:d9:fe:44:4e:40:7f:32:76:b5:ba:73:b9:48:
                    5a:6f:e6:6b:0e:88:89:24:d8:e5:c2:6a:53:e8:19:
                    ca:69:77:bd:df:cb:1e:7e:cf:24:c7:d8:65:7c:cb:
                    a3:71:68:f6:da:5f:f9:b2:f8:27:01:cc:7a:d0:35:
                    c6:db:22:e4:77:86:2b:62:b9:f0:56:00:07:09:de:
                    45:9c:27:6f:e2:8f:04:0e:f9:1d:69:15:68:39:a9:
                    3f:cc:f3:22:97:cc:fc:ff:bf:52:18:ba:4a:37:70:
                    ff:bd:b4:69:6d:5c:00:a9:4a:fb:4c:44:7a:dc:03:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:61:C9:10:24:F8:AA:B7:A7:1B:16:20:EB:84:B7:D8:EF:1E:7C:3C
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131332e302f32342d3234203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:ef:0b:9c:31:c2:cc:d5:8d:53:d9:37:b6:69:50:24:bb:
         ef:df:37:49:1b:87:3c:5c:9f:ff:8f:f4:88:c8:63:d8:e9:73:
         dc:20:12:da:71:04:27:d7:9b:92:ac:af:70:42:86:de:eb:34:
         e4:86:9c:72:b9:b2:98:04:07:5a:f0:3d:64:76:81:99:ec:0e:
         d5:71:56:07:78:69:53:b0:3a:e0:fa:5a:d5:f8:95:78:c1:27:
         17:5f:ee:45:c5:7e:ec:22:24:43:4f:be:94:b3:ff:3a:ef:3b:
         e5:a7:6d:62:8a:9c:9b:7e:de:c1:50:ad:a3:64:ac:f2:a0:d7:
         ba:a3:cd:cf:b5:d8:2c:44:16:fe:79:1f:c8:94:92:45:fe:4c:
         dd:88:07:c1:48:3c:70:a3:7d:34:82:99:c9:38:86:3b:0c:f8:
         b9:c7:be:77:67:77:a8:0e:c7:1c:df:a1:78:25:f5:5b:8e:8f:
         6a:d1:41:1e:b6:d9:92:1c:7d:82:db:dd:ea:2c:36:c9:8b:6d:
         74:df:da:a1:cc:b6:85:25:91:35:5b:12:34:77:7f:ca:9c:c1:
         68:71:54:2a:9e:5a:7a:a8:62:44:b0:49:56:d8:a7:43:5d:03:
         c8:0f:0f:bc:50:d3:f4:63:55:a0:5f:42:83:40:15:00:58:30:
         28:fa:04:51
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTerEvaz4QdkEBJxs9yErsI7/17cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzMEFGRjRGMEUzODAzNUZFOUZGRDNFQjk3RTE3NjY3
Mzk0RkU0OTAeFw0yMTEyMDIxODIxMjdaFw0yMjEyMDExODI2MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgzMEJGNzE2OTE5NkQ3QUUx
M0ZDQzZFQjNFMjVENkFCMTYwRDZGRjA1QkJDRjNERjU3ODhDMUU5NTI1MjBGOTMw
NUU2OTIxNDJGMDU4QkNCNkEyMDhFOUU5NzkyRDk5QzdFQkI2Mzg4OEFBRUYxNUM4
NUFENzhGN0MzRjJCRkI0MEY3NzRENUI5REM5RkE0MjI0RjI2QUIxMjFCNzcwNUNC
QzA3Q0RERTUyMDE1OTlGREI2MTdEMDBDOUNDQjRCOTYwM0E0NDI3NkZCNDY0N0ZC
RDQwQUQ3OTNBQzE4OEI2MDMwRDg0NTA3MEI5OEQwMzQyOEE5M0EwM0RGNkQ4NTQ2
MUY4QTBFMDUxNzI2RjFEOUZFNDQ0RTQwN0YzMjc2QjVCQTczQjk0ODVBNkZFNjZC
MEU4ODg5MjREOEU1QzI2QTUzRTgxOUNBNjk3N0JEREZDQjFFN0VDRjI0QzdEODY1
N0NDQkEzNzE2OEY2REE1RkY5QjJGODI3MDFDQzdBRDAzNUM2REIyMkU0Nzc4NjJC
NjJCOUYwNTYwMDA3MDlERTQ1OUMyNzZGRTI4RjA0MEVGOTFENjkxNTY4MzlBOTNG
Q0NGMzIyOTdDQ0ZDRkZCRjUyMThCQTRBMzc3MEZGQkRCNDY5NkQ1QzAwQTk0QUZC
NEM0NDdBREMwMzZCNzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyDC/cWkZbXrhP8xus+JdarFg1v8Fu8899XiMHpUlIPkwXmkhQvBY
vLaiCOnpeS2Zx+u2OIiq7xXIWtePfD8r+0D3dNW53J+kIk8mqxIbdwXLwHzd5SAV
mf22F9AMnMtLlgOkQnb7Rkf71ArXk6wYi2Aw2EUHC5jQNCipOgPfbYVGH4oOBRcm
8dn+RE5AfzJ2tbpzuUhab+ZrDoiJJNjlwmpT6BnKaXe938sefs8kx9hlfMujcWj2
2l/5svgnAcx60DXG2yLkd4YrYrnwVgAHCd5FnCdv4o8EDvkdaRVoOak/zPMil8z8
/79SGLpKN3D/vbRpbVwAqUr7TER63ANrdQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FN5hyRAk+Kq3pxsWIOuEt9jvHnw8MB8GA1UdIwQYMBaAFD4wr/Tw44A1/p/9Prl+
F2ZzlP5JMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFSzRIRUR0Q2hvcGZQ
ek1FV2JGZlQ4NHZ3OVRaQnZBaUZnenlLaVE4UEZyLzAvM0UzMEFGRjRGMEUzODAz
NUZFOUZGRDNFQjk3RTE3NjY3Mzk0RkU0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zRTMwQUZGNEYwRTM4MDM1RkU5RkZEM0VCOTdFMTc2NjczOTRG
RTQ5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERUs0SEVEdENob3BmUHpNRVdi
RmZUODR2dzlUWkJ2QWlGZ3p5S2lROFBGci8wLzMxMzczNzJlMzczNDJlMzEzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzMzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sUpxMA0GCSqGSIb3DQEBCwUAA4IBAQBQt+8LnDHCzNWNU9k3tmlQJLvv3zdJG4c8
XJ//j/SIyGPY6XPcIBLacQQn15uSrK9wQobe6zTkhpxyubKYBAda8D1kdoGZ7A7V
cVYHeGlTsDrg+lrV+JV4wScXX+5FxX7sIiRDT76Us/867zvlp21iipybft7BUK2j
ZKzyoNe6o83PtdgsRBb+eR/IlJJF/kzdiAfBSDxwo300gpnJOIY7DPi5x753Z3eo
Dscc36F4JfVbjo9q0UEettmSHH2C293qLDbJi21039qhzLaFJZE1WxI0d3/KnMFo
cVQqnlp6qGJEsElW2KdDXQPIDw+8UNP0Y1WgX0KDQBUAWDAo+gRR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org