Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32332d3233203d3e20323632353639.roa
File:                     3137372e37332e3131342e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          TnrUW7OC/ypFgAtO0TfQ+bcFCFDJ2KbZHT4/5ZwjryA=
Subject key identifier:   DF:80:7D:B7:B0:33:B5:70:D5:5F:C2:C5:49:3B:41:92:13:30:D8:65
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       28A5055874037F2B44A57E8FBAFF00AFE0879789
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:18 +0000
ROA not before:           Sat 30 Mar 2024 00:56:18 +0000
ROA not after:            Sat 29 Mar 2025 01:01:18 +0000
asID:                     262569
IP address blocks:        177.73.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a5:05:58:74:03:7f:2b:44:a5:7e:8f:ba:ff:00:af:e0:87:97:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:18 2024 GMT
            Not After : Mar 29 01:01:18 2025 GMT
        Subject: CN=DF807DB7B033B570D55FC2C5493B41921330D865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:b5:43:ae:f2:b0:8e:a6:ee:2b:30:2c:c9:
                    77:df:69:79:8d:68:cc:f7:9e:eb:b4:66:d5:75:7f:
                    9c:88:49:11:0d:dd:91:b3:e7:64:75:f0:6c:7d:54:
                    72:7a:e9:4a:26:c4:47:8a:69:15:37:6f:99:c7:c5:
                    f7:b7:cf:66:70:ac:b7:1e:9a:39:18:ed:26:69:65:
                    03:6c:c1:0f:8d:d2:bd:19:28:98:71:52:80:5e:90:
                    cb:c8:d0:94:7e:bc:ee:d9:e5:5c:92:3f:b4:bb:62:
                    4b:b5:fe:35:00:c2:8a:86:7c:2c:6d:40:8c:cc:ff:
                    c6:aa:3e:f1:ec:7f:70:cf:6e:65:41:11:ab:25:52:
                    a0:07:25:ee:2e:f4:39:70:b9:aa:f0:e3:b2:18:48:
                    17:e9:f5:05:a7:a5:34:e8:b6:3b:f7:c9:62:0a:6c:
                    cc:1d:a0:f5:18:25:23:9c:dc:1e:e3:ec:e9:08:09:
                    20:fa:4b:09:bf:69:02:23:a5:b4:ec:c6:47:00:52:
                    23:b6:31:5c:48:1e:30:67:3a:0a:7a:56:7a:8b:b8:
                    73:77:98:86:f5:f4:de:1f:f8:9d:40:33:49:bd:41:
                    a3:1a:1d:e2:3b:67:5a:db:a0:eb:4c:c0:c2:66:40:
                    b3:59:6b:4a:31:56:90:c0:7f:15:e0:1f:f0:57:e4:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:80:7D:B7:B0:33:B5:70:D5:5F:C2:C5:49:3B:41:92:13:30:D8:65
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:ba:76:18:fe:77:2d:bf:6e:38:aa:de:b8:90:b7:9d:b7:
         dc:8d:d3:c0:22:0c:e8:ca:c3:df:d3:8c:27:b5:94:5e:99:26:
         c8:94:5d:8d:84:70:78:df:8b:42:a6:02:63:a6:57:29:19:4a:
         cf:18:9e:1d:34:f4:b7:df:be:b9:e5:02:30:3e:90:21:ff:04:
         28:97:c5:a3:fd:57:06:f7:54:3b:d3:b4:76:ad:1e:01:fb:3f:
         df:cb:b0:c7:f9:dd:b7:9e:66:2b:13:36:d5:2d:8b:cc:df:a5:
         10:e7:0c:6b:3e:68:56:a8:4a:cc:32:13:27:93:3a:cb:41:32:
         6d:d3:ef:54:3b:a5:a1:16:e7:0c:cc:44:58:ac:82:02:79:3d:
         bb:21:4c:8c:5a:47:ff:10:d7:1b:b8:92:44:0b:04:57:cc:4c:
         ba:f8:eb:98:77:df:a0:30:da:5c:39:5a:d6:97:60:cf:1f:d3:
         c0:56:a0:fe:97:34:52:d4:88:8f:b6:51:53:76:bf:d5:bf:81:
         bd:10:4b:e3:63:0d:ff:e0:11:b5:e5:b6:4a:3b:2d:cf:0b:bb:
         92:71:18:e8:42:12:1c:de:0c:c9:2b:ac:08:1c:f8:3e:ea:ff:
         bb:fc:5f:8e:5e:cc:f9:78:03:c4:12:99:0f:0a:76:f8:9e:bd:
         fe:e3:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org