Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32342d3234203d3e20323632353639.roa
File:                     3137302e38322e37342e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          N6N/d+OKJi4TWjxgOwhnuM2cxuTJFhlen6/Oy9VvlaQ=
Subject key identifier:   42:06:E8:00:4A:4F:84:14:6A:CE:6C:7E:BD:2E:DE:C2:67:BE:F3:AF
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       7A72B83E93CB4042CA1AD40A640E36F1C48D36CC
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:18 +0000
ROA not before:           Sat 30 Mar 2024 00:56:18 +0000
ROA not after:            Sat 29 Mar 2025 01:01:18 +0000
asID:                     262569
IP address blocks:        170.82.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:72:b8:3e:93:cb:40:42:ca:1a:d4:0a:64:0e:36:f1:c4:8d:36:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:18 2024 GMT
            Not After : Mar 29 01:01:18 2025 GMT
        Subject: CN=4206E8004A4F84146ACE6C7EBD2EDEC267BEF3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:e0:23:34:47:bc:30:36:4b:7b:02:c0:63:
                    96:31:83:c6:9c:fb:93:db:6e:86:aa:09:f1:6e:23:
                    0c:d3:e2:f4:40:a3:e7:03:46:3a:64:42:00:af:1c:
                    b8:fc:e1:d3:91:ef:8d:f9:ce:08:e5:34:df:3f:69:
                    4d:f0:9d:7c:db:e6:be:3f:46:45:88:0e:cf:f8:46:
                    68:79:ac:17:ad:f8:2d:57:26:1d:86:da:ab:80:1e:
                    ed:c3:f8:df:c2:2f:07:f0:38:90:80:f6:3c:9c:a6:
                    8c:f0:aa:68:e8:5c:4f:01:94:40:3a:2f:34:bf:2d:
                    dd:4e:ed:02:ac:98:d4:cb:2f:91:ce:c4:50:6a:06:
                    95:ee:c6:63:a5:64:b6:bd:ca:d5:b0:b4:6d:49:cf:
                    b5:66:4b:e4:88:eb:86:e2:fd:a4:c8:2b:f5:31:bd:
                    1d:07:6e:0b:c2:4e:29:b3:2a:19:cc:77:14:9c:31:
                    55:57:be:97:4f:c9:af:8a:38:a9:d9:34:e3:2e:b9:
                    78:e8:34:a8:bb:7d:46:59:06:99:9c:cf:89:29:3c:
                    a3:16:6a:1a:bf:b1:23:2e:0a:ea:26:ba:01:9e:92:
                    2c:ad:9d:ac:e0:12:15:de:8f:dd:9a:70:a2:0a:ec:
                    dd:d8:cc:53:1e:c1:75:a8:d8:dc:e8:2b:1b:4d:95:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:E8:00:4A:4F:84:14:6A:CE:6C:7E:BD:2E:DE:C2:67:BE:F3:AF
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:8e:ba:bb:89:99:5b:71:76:c1:99:14:7a:d9:d6:90:53:
         01:0f:df:1e:3b:0c:af:63:e8:e7:51:c0:6f:25:6a:2a:a5:ed:
         c3:7b:93:69:36:98:16:97:1e:21:87:6b:ba:77:19:db:90:97:
         9b:6f:e8:6b:df:21:60:64:d4:b7:5f:7e:c3:fc:04:4c:42:a0:
         f8:05:e5:b3:f0:59:62:57:bb:ff:d2:b4:60:b4:05:b5:34:cb:
         73:bb:9d:c3:0f:50:67:5a:3e:11:90:ab:20:c9:33:53:df:d7:
         19:72:d3:64:9a:ee:a8:c2:64:1d:cb:5d:09:1a:08:c4:34:72:
         23:b3:de:6c:e2:9a:e4:3c:02:c6:29:f2:ab:bb:f5:97:f9:5a:
         7e:6b:9e:e5:16:73:ee:e8:26:69:b0:0d:eb:36:ba:eb:2d:7b:
         57:5e:2d:23:d1:b8:b9:16:d5:e6:2b:0c:45:45:49:ac:18:03:
         d7:e9:46:7a:32:a9:9d:8e:5b:39:a9:6e:47:10:e7:c8:5c:83:
         0e:44:b3:48:83:df:62:60:ac:99:dd:0d:7e:8c:56:6f:0d:1c:
         cb:29:dc:be:83:32:c8:05:d5:84:8c:a9:69:79:f3:39:f1:90:
         18:13:5c:3f:07:c8:ea:de:7a:4a:4c:5c:ae:9a:33:83:7b:0a:
         91:93:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org