Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          ITDIsaN7ZkFafY0SskSdq+OMklzr0tRjifHAtSzBmUk=
Subject key identifier:   75:5B:45:39:41:B2:7A:02:99:DE:F6:FD:73:F1:0D:E2:FB:08:99:AC
Certificate issuer:       /CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
Certificate serial:       165CC34D8685CDC4631F99A39CBB65E9C9A8C422
Authority key identifier: 7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 12 Apr 2024 18:39:01 +0000
ROA not before:           Fri 12 Apr 2024 18:34:01 +0000
ROA not after:            Fri 11 Apr 2025 18:39:01 +0000
asID:                     263948
IP address blocks:        177.67.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5c:c3:4d:86:85:cd:c4:63:1f:99:a3:9c:bb:65:e9:c9:a8:c4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
        Validity
            Not Before: Apr 12 18:34:01 2024 GMT
            Not After : Apr 11 18:39:01 2025 GMT
        Subject: CN=755B453941B27A0299DEF6FD73F10DE2FB0899AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:04:ba:0d:91:27:b7:82:08:54:13:f2:35:
                    b8:d9:23:aa:9e:48:b3:ba:41:16:63:de:15:b2:c2:
                    41:ae:32:63:da:f3:06:0d:32:56:d8:90:88:77:ae:
                    f3:67:69:cc:48:84:c2:dd:1e:df:98:7e:c5:be:45:
                    7f:1f:6c:36:37:cb:43:b8:ee:89:64:a7:64:37:c8:
                    bb:be:78:87:e9:1a:b1:f2:61:35:4b:ab:54:d2:43:
                    85:cb:dc:58:92:fb:46:ea:db:1a:e5:32:61:1c:ae:
                    93:6c:93:f3:79:6b:ae:a7:be:6f:d3:52:89:4a:fe:
                    f0:63:71:12:6c:f2:e5:3d:53:dd:ce:f8:66:f6:4b:
                    b5:2e:d1:bc:f1:5c:d7:9f:f5:b4:72:f7:e2:15:c2:
                    5b:f2:02:ca:26:b4:44:a4:c5:ae:9f:90:54:a3:16:
                    ae:e6:ce:f1:c8:63:0b:31:0d:19:02:f2:3d:54:b5:
                    24:92:a1:60:43:6b:98:d6:ba:03:76:0c:ce:9f:8a:
                    21:d1:14:8c:46:d2:6e:0f:14:66:a3:7d:28:86:e5:
                    5c:d1:66:9d:33:f5:f7:c1:23:ef:29:fe:b9:05:77:
                    9a:03:69:7a:22:8c:f2:52:d6:c2:7d:b8:e3:21:09:
                    0e:cc:bd:03:6f:b1:cb:c1:db:62:10:db:26:0f:49:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:45:39:41:B2:7A:02:99:DE:F6:FD:73:F1:0D:E2:FB:08:99:AC
            X509v3 Authority Key Identifier:
                keyid:7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:71:7b:f6:c5:fe:9a:14:58:4c:34:07:6d:4c:30:b6:69:29:
         e0:c3:df:fe:55:03:3d:bf:ac:ff:c9:33:22:58:b1:50:3d:14:
         a2:3b:51:c4:b4:dd:87:e7:49:f9:9a:a2:f6:dc:a4:d9:4b:23:
         a9:b2:17:35:95:d9:c6:68:e1:80:f7:c1:3b:80:65:17:8b:21:
         f3:b5:fa:02:3d:7d:33:3f:da:16:c5:4d:0f:66:17:59:f9:02:
         1b:98:a0:e8:9d:11:2f:22:ac:7c:7f:05:7c:27:3b:94:7c:e9:
         24:0b:f0:14:77:41:8c:58:d3:75:33:c9:3b:79:c3:99:5b:a4:
         6b:82:c2:88:c6:82:48:58:e9:d5:6d:50:ea:20:e9:33:b3:70:
         52:c6:72:9c:7a:50:68:8f:bb:4e:7a:cc:56:fa:49:70:11:79:
         c4:29:75:ee:dd:41:3d:c0:4d:65:ff:7b:ef:62:5e:3b:33:b8:
         f0:55:4b:95:c9:fd:5c:0d:0c:c0:74:0b:f6:53:ac:80:51:d3:
         b3:a0:6d:23:14:47:a7:f5:76:79:98:b0:2c:bd:b6:33:f7:4c:
         db:fb:98:c0:bd:5f:94:4f:b3:f8:9e:16:5a:69:59:0a:1d:4d:
         53:3f:14:35:67:c3:4b:ca:1e:a8:db:20:96:cf:97:9c:3f:d0:
         5a:77:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org