Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier:          z7O+RH8lOyDfVF0QQEmwt5unNiUrECLivS5goWG2k4o=
Subject key identifier:   D1:95:F9:CF:21:1C:BE:04:0A:0A:CA:2C:65:B6:7B:D8:7E:37:E6:8A
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       3EB5054837A0E5C562311F606D3C99F8F5738208
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:18 +0000
ROA not before:           Sat 30 Mar 2024 00:56:18 +0000
ROA not after:            Sat 29 Mar 2025 01:01:18 +0000
asID:                     262569
IP address blocks:        177.73.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:05:48:37:a0:e5:c5:62:31:1f:60:6d:3c:99:f8:f5:73:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:18 2024 GMT
            Not After : Mar 29 01:01:18 2025 GMT
        Subject: CN=D195F9CF211CBE040A0ACA2C65B67BD87E37E68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:ef:d0:0b:42:ea:d5:bf:81:d0:a8:26:73:
                    6c:33:29:0c:60:ba:9f:ee:f8:7c:2f:bb:70:4a:59:
                    0e:5d:d8:28:a4:d0:71:a8:6a:6d:2a:28:25:83:f1:
                    a0:75:15:76:13:3e:89:6d:70:20:72:86:63:11:41:
                    4c:a9:f0:db:b6:95:7d:28:1e:47:58:05:48:e1:b2:
                    fc:ca:21:ad:57:49:d6:48:5f:55:4c:a4:26:c1:33:
                    e0:f7:9b:5b:a3:73:a9:65:ac:6b:30:b1:ba:c6:69:
                    a2:7e:97:c2:77:3c:25:c2:5a:f2:37:86:9d:9e:e6:
                    40:85:05:78:5d:ec:2c:56:5f:37:df:b0:07:4b:07:
                    02:ab:3d:51:c9:c8:30:d4:a0:63:45:ee:8b:85:e4:
                    5d:c2:42:4e:71:12:24:d1:c4:04:3e:13:fd:55:c2:
                    d1:b1:75:a1:f4:b6:41:3a:84:89:34:f1:20:10:49:
                    28:b2:ee:5c:6a:b8:d6:26:ec:56:d0:1c:c2:d2:39:
                    40:07:92:1f:0c:7f:ce:ce:14:c4:14:4a:61:00:dd:
                    37:7d:0e:d1:39:22:de:6b:9e:db:82:04:6e:fa:a7:
                    27:06:6d:8c:a7:ed:bf:e9:62:4a:60:3a:fe:7c:26:
                    14:0a:5a:ea:80:7d:ba:20:8c:91:b6:d1:aa:7a:a5:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:95:F9:CF:21:1C:BE:04:0A:0A:CA:2C:65:B6:7B:D8:7E:37:E6:8A
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:c6:c8:12:bd:d2:35:a3:56:66:04:da:d8:23:ff:7b:b3:
         e4:49:8e:e0:38:8e:9a:7f:82:97:06:10:81:76:84:ef:fc:4b:
         c6:9c:c3:ef:71:24:79:5e:c1:03:9a:cd:08:d1:b2:71:1b:9a:
         d1:c2:26:92:d9:ab:b2:d6:07:ef:22:b5:44:cd:af:98:62:eb:
         94:c2:80:fc:49:4a:d5:35:6d:91:ed:db:07:27:2f:fe:14:e4:
         3f:e4:d3:13:d4:8d:23:ed:e1:3b:ef:88:14:83:50:e9:ac:35:
         28:0e:ce:b4:ce:86:30:73:01:9c:2a:9e:7b:3c:2e:f5:69:54:
         fe:81:9b:f6:40:b2:fc:6c:c8:e2:c9:25:74:b8:d4:e8:69:e9:
         bb:bb:31:af:7e:fe:00:ad:1d:8d:ac:b4:46:f1:92:39:87:60:
         fb:13:96:f4:f2:c1:0d:1c:5c:56:ee:74:46:4a:36:1a:42:20:
         93:99:44:e9:af:13:ae:74:88:9d:82:99:41:b3:a8:25:c8:b9:
         d4:ef:64:f8:84:40:11:17:60:b5:ab:c7:cd:e7:6d:fa:0b:70:
         ec:93:bf:69:54:13:5e:5c:25:78:80:9a:4b:fb:ae:81:84:a8:
         28:56:8b:80:95:c6:7d:5c:78:6a:69:6b:af:eb:3b:a1:94:97:
         7e:28:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org