Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          wAKAszw0xTch/0IR9V5obZkSjd8YFDY/VMt3yHQQVwY=
Subject key identifier:   8A:A3:A1:4E:59:3F:AF:82:CB:E8:B0:BF:2F:18:BA:94:87:A4:9D:60
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       75D2D2448B97D762CA077932BF41D6F14155F820
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        177.73.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:d2:44:8b:97:d7:62:ca:07:79:32:bf:41:d6:f1:41:55:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=8AA3A14E593FAF82CBE8B0BF2F18BA9487A49D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:e2:4e:20:9f:3a:b1:03:17:a7:89:3d:68:
                    78:26:95:f2:cc:5b:7e:fb:b7:90:ce:8d:c4:ef:45:
                    39:b8:85:00:85:c6:49:b9:13:49:30:b3:f5:76:a8:
                    56:77:05:d1:89:2f:26:40:c4:0a:c6:64:1f:f7:a4:
                    d6:4a:ef:ce:cf:ef:e9:bd:47:bb:db:ef:30:51:b4:
                    82:4f:04:69:ed:38:1b:e5:05:2d:51:a6:0c:6d:55:
                    b1:33:ad:9c:12:6d:ec:b7:e0:44:1f:d8:0c:bb:59:
                    f4:af:e6:2b:99:b9:6c:0b:f7:63:41:e4:ce:66:04:
                    1e:d1:a3:97:96:1c:f8:fa:e9:df:92:dc:66:15:ad:
                    61:ef:7a:9a:3c:b9:fa:ce:fa:ad:d5:02:0d:bd:40:
                    6e:e2:79:29:41:9b:36:f7:2d:60:8d:01:7e:b7:05:
                    2a:85:a3:d7:9f:b5:cd:3f:d6:6a:00:e4:d9:e3:35:
                    ae:c5:05:72:54:f8:f1:6b:bb:ef:d5:b1:eb:0a:8a:
                    d5:b9:60:6c:9b:9a:9d:0b:65:ff:8b:57:d8:ac:2e:
                    52:2d:5a:f4:ac:11:59:f8:54:cd:d9:d0:68:ab:b0:
                    ac:dd:36:df:27:6b:e8:32:fc:41:23:c9:a3:83:9f:
                    2e:7c:2e:d6:dc:ef:7d:9e:6a:8d:ae:a7:da:bc:65:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A3:A1:4E:59:3F:AF:82:CB:E8:B0:BF:2F:18:BA:94:87:A4:9D:60
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:2c:7f:14:e8:97:01:d2:6b:12:cc:a5:6f:76:be:eb:dc:
         c6:d7:f4:23:a8:56:6a:0f:18:4c:db:58:3b:a8:90:af:2d:5c:
         74:d4:14:b5:f1:e5:d2:e8:44:cb:21:73:4f:32:31:9f:b2:f3:
         5f:9f:b1:14:1b:10:2d:a0:db:cd:9d:ba:14:f6:a1:0a:12:5c:
         e0:fd:d5:b9:69:3c:fa:9e:4a:bc:03:ef:90:4f:33:25:92:f9:
         dd:ff:6e:13:fb:7a:12:58:24:0a:a8:2b:a5:36:29:a5:d8:8f:
         58:d0:4d:b6:81:74:12:cc:9f:5b:b3:57:01:bf:1f:94:86:25:
         9a:03:41:6e:20:8c:69:c3:fc:03:f9:e7:67:7a:6c:39:7e:3b:
         fc:46:87:4f:23:bc:b9:85:2c:82:36:3f:e4:ee:16:76:fd:14:
         57:fb:73:b9:73:86:e0:d4:96:dc:b7:3c:ac:02:aa:78:ae:c8:
         2f:85:42:0a:47:19:ba:3e:6e:9c:41:0d:a7:fc:27:1b:85:58:
         5a:d1:03:8a:11:cb:90:a5:a2:d4:95:8a:a5:75:ac:bd:c9:a0:
         1b:42:40:a2:3e:72:ad:49:c0:c4:45:90:51:20:b3:ea:c2:8f:
         83:26:36:45:2a:de:d8:58:68:ac:a0:08:db:fe:89:c6:64:1b:
         c3:f7:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org