Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/3137372e37332e3134382e302f32322d3332203d3e203532373035.roa
File:                     3137372e37332e3134382e302f32322d3332203d3e203532373035.roa (raw, json)
Hash identifier:          9sJmDZHIirxjzfQ5tgG9eBUtfSdq4eWyQN7eULejoO8=
Subject key identifier:   43:31:F5:35:1A:81:25:AF:D6:E0:B2:65:7D:FB:5C:29:AB:4A:CF:AC
Certificate issuer:       /CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
Certificate serial:       58A30BDF84C8F8BA9531534A5353D69BE55FC61D
Authority key identifier: 0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/3137372e37332e3134382e302f32322d3332203d3e203532373035.roa
Signing time:             Fri 28 Jul 2023 21:38:19 +0000
ROA not before:           Fri 28 Jul 2023 21:33:19 +0000
ROA not after:            Fri 26 Jul 2024 21:38:19 +0000
asID:                     52705
IP address blocks:        177.73.148.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a3:0b:df:84:c8:f8:ba:95:31:53:4a:53:53:d6:9b:e5:5f:c6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
        Validity
            Not Before: Jul 28 21:33:19 2023 GMT
            Not After : Jul 26 21:38:19 2024 GMT
        Subject: CN=4331F5351A8125AFD6E0B2657DFB5C29AB4ACFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:fe:4a:fb:a6:a0:5f:57:c7:8b:60:7b:c7:
                    3d:df:c2:ba:e1:a7:3d:82:42:73:54:36:50:f2:37:
                    65:79:86:df:5f:3f:7d:dc:aa:54:d3:8c:1c:99:5a:
                    5e:e2:3a:93:bd:1b:45:47:19:05:8b:9a:50:01:b8:
                    0f:97:a2:02:ef:3d:80:9a:ef:f3:d1:e5:6e:88:ae:
                    95:3a:66:1f:e3:64:ed:c6:0c:75:c2:ee:41:c9:5f:
                    d2:9f:68:58:67:00:9e:6d:18:18:bf:ae:50:7d:53:
                    27:6e:95:f3:bf:21:b3:0b:b4:b6:b4:53:84:90:b5:
                    4b:a8:db:bb:65:31:b0:ba:af:1a:81:9a:24:03:03:
                    eb:40:00:4b:45:81:45:6f:f4:b9:85:40:22:46:ea:
                    16:8c:67:40:3d:49:d9:9c:73:6f:01:af:cd:fd:64:
                    74:26:3c:49:bb:0c:e4:db:78:d0:1e:69:5e:78:c1:
                    11:bc:2f:ec:df:60:79:8f:69:23:de:3e:c4:96:02:
                    2d:13:d8:04:cf:a5:ec:72:75:98:87:7e:bb:59:7c:
                    62:fb:cf:62:ba:bd:07:35:a2:88:cc:34:be:9a:1e:
                    ae:3e:85:84:e5:6f:a1:84:09:49:31:45:0c:5e:ad:
                    b6:1d:c0:d5:17:28:43:8b:5a:33:1e:0d:b8:23:75:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:31:F5:35:1A:81:25:AF:D6:E0:B2:65:7D:FB:5C:29:AB:4A:CF:AC
            X509v3 Authority Key Identifier:
                keyid:0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/3137372e37332e3134382e302f32322d3332203d3e203532373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:53:45:97:e6:46:30:a6:30:94:db:79:b2:a0:bf:57:35:
         52:0f:a8:7f:17:40:6d:2c:9c:72:9f:35:33:8a:7b:dc:97:1b:
         ee:34:52:99:ca:1a:2a:73:fd:59:ac:3b:8a:c2:b6:a6:da:ad:
         ed:cf:72:1d:7d:34:5c:47:04:4d:30:dd:60:8b:f8:30:0d:f5:
         2b:c5:dc:8e:16:1d:c2:c7:f4:29:88:e0:ea:ed:36:46:81:22:
         a0:99:da:42:ca:53:0d:12:54:ad:9f:bd:fb:84:d1:7a:bb:d7:
         76:34:28:18:0b:60:58:50:21:dc:2b:47:5b:39:56:57:c3:68:
         49:a9:a1:d5:8b:da:25:ef:ed:f0:f8:42:2c:0a:50:5c:75:b1:
         55:6a:4a:b2:72:21:15:46:a4:1c:d2:f2:e6:65:86:69:d4:a8:
         b4:98:da:3c:e1:d0:13:ad:d2:24:22:1d:7b:5f:a6:a1:58:66:
         cd:30:0a:c6:a5:5b:f3:a4:c5:b7:dd:d3:3b:27:01:e5:23:c0:
         c2:10:8e:5f:e4:b0:43:5f:be:c0:f8:b1:ff:aa:dc:22:6c:fc:
         08:92:e3:67:24:02:4a:52:99:93:93:7b:85:38:ff:77:1e:6e:
         c9:a8:01:cd:7f:93:52:7e:4a:f3:48:d7:0c:a7:24:6e:bb:68:
         f3:d8:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org