Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131342e302f32342d3234203d3e20323633333830.roa
File:                     3137372e37342e3131342e302f32342d3234203d3e20323633333830.roa (raw, json)
Hash identifier:          /GLx1vIXp9dLCjUk7pT17IqdpsWjkiziSJ7jIlNo/+8=
Subject key identifier:   63:95:D6:5C:52:B8:A8:10:06:13:0C:37:AA:4D:22:A1:96:4A:95:0D
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       48B7C9E54486E3086823FFFFDBB4AD47E06900DA
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131342e302f32342d3234203d3e20323633333830.roa
Signing time:             Thu 02 Dec 2021 18:26:29 +0000
ROA not before:           Thu 02 Dec 2021 18:21:29 +0000
ROA not after:            Thu 01 Dec 2022 18:26:29 +0000
asID:                     263380
IP address blocks:        177.74.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b7:c9:e5:44:86:e3:08:68:23:ff:ff:db:b4:ad:47:e0:69:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Dec  2 18:21:29 2021 GMT
            Not After : Dec  1 18:26:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:ff:0d:ee:cf:12:7f:70:a8:29:5b:ec:f8:
                    ad:66:df:40:86:8c:62:8e:91:91:cb:61:4a:ac:db:
                    17:78:b4:8f:7a:9d:98:a4:e9:12:c0:13:7c:e5:87:
                    70:dc:c5:ea:88:43:f1:cc:8f:28:79:68:66:08:88:
                    ef:ae:50:f5:55:59:19:29:f2:a3:4f:8a:c1:36:fc:
                    b8:fa:02:4c:cb:78:d8:10:ae:4f:bc:d4:e6:bd:53:
                    83:f6:1b:5b:26:d5:65:5c:cc:df:0f:92:20:e7:4c:
                    96:e6:e5:5e:30:e9:51:5d:f4:6c:5e:a6:bd:6e:03:
                    32:72:8f:b0:7e:ec:f4:e0:b2:1e:6e:78:84:82:40:
                    2e:cf:38:31:4d:b7:c1:1b:21:ae:55:63:d8:39:06:
                    6d:31:2c:84:e7:bf:d5:e9:c7:f7:fd:a0:45:59:eb:
                    b2:42:13:2d:8c:07:a3:95:b8:cb:d7:66:c1:0a:c9:
                    e8:5a:aa:e0:f2:9f:4f:8a:8f:e9:d9:a7:7e:67:ec:
                    f7:53:fd:65:a2:bc:0e:d8:2f:d3:3d:33:25:88:fa:
                    6f:d7:a0:df:a9:cf:e3:5a:82:0a:4f:c9:64:58:d1:
                    23:eb:72:c8:f9:39:be:a2:2a:e1:e9:de:ba:88:d2:
                    00:d4:80:b5:06:44:31:8d:e5:cd:8e:7b:21:54:f5:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:D6:5C:52:B8:A8:10:06:13:0C:37:AA:4D:22:A1:96:4A:95:0D
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131342e302f32342d3234203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:46:0d:62:44:2a:ae:41:29:64:5e:70:72:cd:9c:aa:97:13:
         92:6c:e8:d3:45:f7:d2:ac:2d:33:6b:e2:f2:ba:b4:45:6b:d0:
         58:dc:ba:bb:a7:b8:55:07:71:da:05:8e:16:23:93:2f:d1:10:
         b8:46:16:32:c9:a4:1d:2a:11:75:55:e9:bd:12:da:bf:91:d2:
         28:d3:4b:4d:3b:dc:f0:07:3f:73:9e:b1:dc:b0:d5:1e:92:7f:
         f1:85:f5:81:19:14:95:7b:72:57:b6:c3:03:05:ae:48:5c:4c:
         0a:32:8d:3d:81:eb:ba:c8:51:7e:4f:b9:1c:3f:0c:12:ba:bf:
         3e:9d:8a:7e:1d:00:a7:fa:54:61:1c:60:d2:4d:74:2b:ac:2c:
         0b:48:86:93:24:d6:9c:d9:6a:b8:a4:d2:95:72:b4:6b:3e:59:
         2d:d8:11:38:37:4c:cc:82:40:a2:57:b6:2b:ac:e3:1d:06:ca:
         05:3b:d2:48:6f:f1:66:45:69:af:88:4d:ce:38:d6:70:5c:d7:
         9b:62:50:f7:d3:d6:ef:33:5f:45:60:95:af:83:21:87:10:d5:
         f9:01:83:cf:ef:17:72:cd:f7:f8:a7:37:72:30:68:cf:1d:f7:
         33:59:de:0f:b3:03:e3:7c:e6:4f:54:06:0f:a0:84:16:a3:31:
         ad:05:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org