Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131362e302f32322d3232203d3e20323633333830.roa
File:                     3137372e37342e3131362e302f32322d3232203d3e20323633333830.roa (raw, json)
Hash identifier:          l77/MiHCnoXs6jF8csKkFr2mlLRvcx0kIwvvVyyKsKg=
Subject key identifier:   AE:80:BD:F9:D1:16:CD:BC:3E:65:9A:6A:6C:B4:AC:BE:99:85:82:F6
Certificate issuer:       /CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
Certificate serial:       587FDFF79F0F2FC87AEFA1D988CDB872B9021EA3
Authority key identifier: 3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131362e302f32322d3232203d3e20323633333830.roa
Signing time:             Thu 02 Dec 2021 18:26:31 +0000
ROA not before:           Thu 02 Dec 2021 18:21:31 +0000
ROA not after:            Thu 01 Dec 2022 18:26:31 +0000
asID:                     263380
IP address blocks:        177.74.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:df:f7:9f:0f:2f:c8:7a:ef:a1:d9:88:cd:b8:72:b9:02:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Validity
            Not Before: Dec  2 18:21:31 2021 GMT
            Not After : Dec  1 18:26:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:75:b2:6c:75:2b:a2:15:39:fd:8e:7b:c0:
                    e1:20:bd:c6:ce:fb:09:d9:fd:84:6c:47:a0:8f:50:
                    7b:f8:1a:4a:bf:f8:64:24:1b:28:a8:9e:6a:75:1f:
                    c0:42:62:62:77:a3:0b:77:ce:72:72:c5:0b:e8:56:
                    f9:f8:75:63:13:d7:32:9b:90:f1:6a:e0:dc:f5:48:
                    c2:5b:39:c9:80:95:a6:c8:dc:35:4b:6f:5d:48:13:
                    eb:18:f8:2d:93:0b:03:f8:1b:0e:22:6c:59:a6:27:
                    8f:d8:09:58:34:de:a5:c9:aa:a4:6b:a7:a8:36:c0:
                    05:56:dc:f0:6b:88:dc:f3:0a:4a:16:82:1b:b7:e4:
                    58:5c:24:49:4f:80:74:81:25:aa:d7:ba:1b:fe:cf:
                    e2:2b:bd:f0:f1:a2:11:f2:bd:5c:a8:85:b1:7d:09:
                    45:97:88:ba:ad:d6:b6:d2:f8:ae:9c:39:4f:bd:8c:
                    8f:db:32:47:1b:10:ee:5f:a0:43:8a:43:ef:ed:75:
                    ee:1c:70:85:00:f4:ba:44:9a:08:6c:60:35:cb:7c:
                    d9:d8:39:9a:5e:24:a4:ac:e3:c5:74:86:96:0f:d0:
                    b6:4b:bc:ea:7a:a3:1a:4a:08:54:e1:dd:5a:a5:35:
                    17:4d:94:14:29:ef:99:d6:ae:dc:d4:65:ff:ee:f6:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:BD:F9:D1:16:CD:BC:3E:65:9A:6A:6C:B4:AC:BE:99:85:82:F6
            X509v3 Authority Key Identifier:
                keyid:3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3137372e37342e3131362e302f32322d3232203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:67:16:9d:81:b4:09:ad:df:35:70:ed:63:e3:d0:7c:8f:
         2f:26:83:d9:dd:cf:1c:1d:ce:25:9c:f0:53:04:8d:04:0c:8d:
         21:b2:63:6a:96:f6:dd:50:50:94:35:f0:51:ec:42:de:c6:82:
         d2:82:6f:83:a7:5d:57:9a:0e:a2:3a:11:71:83:a4:f4:aa:25:
         67:7c:4a:56:91:e7:3e:f8:c4:4f:19:18:d2:34:00:a3:a9:5e:
         03:b8:78:68:57:60:47:89:5e:71:47:af:04:ab:e7:09:6c:00:
         3c:cf:0f:d7:28:db:c8:40:4d:09:21:3e:6b:fe:de:90:31:71:
         61:42:99:02:b9:4d:54:1a:d3:64:2d:54:82:fe:ee:29:15:85:
         05:ed:71:dd:7b:f2:00:95:cf:30:56:9c:e1:43:ec:90:82:80:
         f4:02:0b:05:2c:b9:cb:41:c6:4e:d1:71:6a:70:f7:80:d7:4f:
         d1:f7:69:0d:58:84:00:86:fd:58:7f:22:8d:0a:b8:a4:80:8d:
         67:79:2e:d0:dc:d5:2b:40:3a:7e:15:43:b5:af:a9:9e:16:ed:
         77:5a:a9:d5:e3:a0:92:5e:f8:07:cf:64:7c:77:87:ad:8d:a5:
         31:07:4b:f1:44:3a:92:e5:b2:2e:67:2e:ac:ba:ae:bd:0c:46:
         6e:59:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org