Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3231203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32312d3231203d3e20323632353639.roa (raw, json)
Hash identifier:          Qsd9+rDEdivY/kKMq8X6k8AR5zoAWmY5FEPzUyrREf0=
Subject key identifier:   89:EF:57:EC:B1:60:AF:AD:62:D4:DB:72:18:5C:E2:A4:FB:5F:3B:A2
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       3450805CEC9329667E7B14909A42C77DD544B8BA
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3231203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        177.73.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:50:80:5c:ec:93:29:66:7e:7b:14:90:9a:42:c7:7d:d5:44:b8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=89EF57ECB160AFAD62D4DB72185CE2A4FB5F3BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:7e:e5:ce:72:fe:18:52:dc:c5:75:5c:0b:
                    be:07:64:af:8e:be:df:49:39:59:68:51:8d:73:d2:
                    db:b4:9b:6f:64:b1:7c:8a:1c:da:76:81:b4:f4:a1:
                    43:b0:df:c9:4d:0f:fc:c9:ed:3f:88:54:6d:fd:cf:
                    16:ae:8f:78:28:f5:7a:4f:fc:54:70:7e:da:be:bf:
                    65:ab:c5:be:6c:e4:27:01:8b:14:04:6f:63:3e:32:
                    a7:f6:63:00:87:ab:90:16:9b:b7:7d:cf:97:4f:f7:
                    9d:2d:95:36:7d:d7:f6:49:b9:36:d4:be:14:68:11:
                    a7:68:5c:8d:e2:9c:92:df:92:1e:99:32:e8:b8:d5:
                    2c:a6:a1:a6:18:e0:7d:d7:ad:78:ef:2d:98:98:8a:
                    60:1f:40:bc:c9:38:ec:f3:5c:5f:66:06:f3:3a:ad:
                    c9:b4:27:fa:3b:a3:76:88:43:90:8f:b5:da:9b:85:
                    e6:30:6b:60:0a:be:2c:99:3c:61:ac:05:d7:6e:29:
                    d0:50:3e:d2:f0:9a:a9:2d:84:c3:6e:71:d3:6e:ad:
                    4a:af:75:cb:e6:04:27:6e:50:41:8b:b2:0e:cf:02:
                    61:16:52:9e:e0:b2:70:60:b6:1b:9e:d5:96:ff:06:
                    7b:ca:7c:fd:7e:b3:46:4d:5c:0a:3f:e0:5a:59:80:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:57:EC:B1:60:AF:AD:62:D4:DB:72:18:5C:E2:A4:FB:5F:3B:A2
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3231203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:57:a5:6f:a5:23:9e:df:32:32:0c:30:66:f7:74:70:6f:
         6a:11:c5:f4:b1:24:cb:22:ac:81:65:03:ab:b9:17:4b:fc:e8:
         e6:d0:1b:ce:2b:a3:d6:dd:f4:07:bc:f6:ad:2c:f5:50:5b:a4:
         ea:d8:0a:c3:5f:58:8c:3c:58:f9:91:31:6e:9f:a8:bc:f3:10:
         67:9d:94:42:b6:c1:f0:3d:0a:05:e8:b5:e8:59:f0:9e:50:27:
         59:ab:59:51:d4:51:7b:6d:80:87:0f:38:2e:17:4f:96:31:54:
         6c:73:01:19:ee:23:64:e3:8c:79:da:a6:17:2b:9b:bb:48:a8:
         5f:ec:95:52:87:5d:4d:df:e1:bf:7a:82:c1:07:5f:9f:9e:01:
         3a:b9:71:ff:6c:22:f6:73:7a:cb:24:6a:18:4e:9e:e7:50:da:
         e9:1f:c8:a5:a8:1a:96:e4:76:20:eb:33:49:d8:8a:3c:93:92:
         be:93:6f:62:09:f1:5d:48:2a:67:f2:2a:2c:af:21:28:da:2c:
         08:04:56:cc:23:af:4e:ca:f2:ce:ce:11:0b:31:9e:02:47:9f:
         cb:11:39:3a:37:3e:48:47:52:1e:71:c5:89:5e:fd:ba:b2:59:
         ea:28:05:ec:a0:d0:7e:32:ad:c0:d4:a0:f0:9e:e1:4e:fd:6a:
         02:3a:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org