Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          ZV52LsyBgEoQDl78weepzMeVm6pp3IpNRgvTKkw5caU=
Subject key identifier:   59:EC:6F:1E:E7:69:E3:D2:98:81:0D:03:C3:BA:7C:D8:95:3A:3E:CD
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       540FF042DC9575EB11C70312CE72CE33D288A67A
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        177.73.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0f:f0:42:dc:95:75:eb:11:c7:03:12:ce:72:ce:33:d2:88:a6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=59EC6F1EE769E3D298810D03C3BA7CD8953A3ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:76:93:ca:08:5f:4c:c6:ff:c2:53:59:f5:
                    0e:28:50:ca:15:c0:e7:9d:b4:e8:60:10:cd:ec:a8:
                    ea:f3:11:3e:e1:23:6b:0f:69:55:d0:00:f3:16:74:
                    ad:38:9d:75:b3:ae:88:22:5b:71:f6:39:29:91:d4:
                    77:b8:6f:57:aa:c6:aa:f5:a4:11:64:3e:f6:5b:c7:
                    3a:9a:2b:af:37:07:07:5c:2f:6c:9c:4a:0e:3d:d0:
                    ee:5d:0f:09:10:f1:f3:26:6b:37:58:ee:74:62:62:
                    44:19:25:53:52:78:84:f2:3e:7e:00:6b:1b:a2:f3:
                    be:17:cd:68:7f:a8:5a:a6:1c:56:72:c0:9b:d1:3a:
                    86:6a:6e:af:ea:12:1b:13:f2:4f:35:03:a5:a7:10:
                    36:6c:8a:8b:2f:f4:07:b0:39:08:68:1a:25:91:84:
                    0f:2f:22:f8:64:66:58:c7:00:d5:aa:70:c9:5f:25:
                    ab:37:d3:fc:c7:24:9b:42:5d:42:55:cf:e5:24:ff:
                    fa:5a:0b:0a:78:86:7b:43:9d:e5:5f:2f:50:b7:1a:
                    3e:17:e8:ca:99:c8:fc:8a:b0:a6:96:12:f1:0c:e3:
                    75:91:fe:0a:f5:f1:92:41:ea:b6:fa:04:82:bb:e0:
                    e0:58:c6:db:dd:a9:f2:9a:f8:e7:81:7d:8b:94:c2:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EC:6F:1E:E7:69:E3:D2:98:81:0D:03:C3:BA:7C:D8:95:3A:3E:CD
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:ea:7c:f4:a5:08:40:a8:72:e1:a1:a5:2e:98:86:26:42:
         9d:a0:65:9d:ff:be:a2:ff:5a:ac:0c:69:f4:0c:9d:c5:a3:2c:
         d1:b8:78:c7:24:a9:d7:47:e9:24:1a:59:76:a5:9b:0b:8b:3d:
         a0:8d:a5:ab:66:f8:de:85:02:54:78:b1:a6:c5:67:d7:de:e4:
         d3:a1:54:4a:de:d1:fe:ff:7d:1b:57:4a:47:7e:ea:61:e8:54:
         e0:83:95:ac:36:e1:0b:ae:87:82:b8:09:1d:ae:52:ef:ed:92:
         27:a9:d1:a1:08:2a:6a:26:50:4c:16:fc:96:56:52:e7:04:48:
         a7:ac:53:b4:72:1e:c3:4e:57:fc:ae:64:c9:62:b1:71:0c:20:
         8b:b3:da:e4:4f:52:9f:1e:2a:d4:5d:cf:75:f2:4a:e4:a3:68:
         03:ae:d2:79:da:73:f4:d3:47:44:e3:5d:03:ce:ca:2a:a8:ec:
         07:7a:1c:15:96:3d:cd:f0:07:75:d3:91:ae:3f:fc:30:28:2f:
         ee:3e:2c:ea:0f:0b:97:9c:a9:20:16:d4:9c:91:b1:cf:ba:6c:
         33:f2:85:39:93:8b:92:55:9f:78:a5:87:7b:68:52:fe:07:ac:
         73:2a:e0:6b:4c:50:1e:5a:72:03:0e:ae:20:a1:0a:2c:81:ea:
         17:e5:b7:44
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVA/wQtyVdesRxwMSznLOM9KIpnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURD
MkNBQ0ZCRjAeFw0yNDAzMzAwMDU2MTlaFw0yNTAzMjkwMTAxMTlaMDMxMTAvBgNV
BAMTKDU5RUM2RjFFRTc2OUUzRDI5ODgxMEQwM0MzQkE3Q0Q4OTUzQTNFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamHaTyghfTMb/wlNZ9Q4oUMoV
wOedtOhgEM3sqOrzET7hI2sPaVXQAPMWdK04nXWzrogiW3H2OSmR1He4b1eqxqr1
pBFkPvZbxzqaK683BwdcL2ycSg490O5dDwkQ8fMmazdY7nRiYkQZJVNSeITyPn4A
axui874XzWh/qFqmHFZywJvROoZqbq/qEhsT8k81A6WnEDZsiosv9AewOQhoGiWR
hA8vIvhkZljHANWqcMlfJas30/zHJJtCXUJVz+Uk//paCwp4hntDneVfL1C3Gj4X
6MqZyPyKsKaWEvEM43WR/gr18ZJB6rb6BIK74OBYxtvdqfKa+OeBfYuUwlFpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWexvHudp49KYgQ0Dw7p82JU6Ps0wHwYDVR0j
BBgwFoAURgy1fR5JKlZqDDGaAuW+XcLKz78wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURDMkNBQ0ZCRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NjBDQjU3RDFFNDkyQTU2NkEw
QzMxOUEwMkU1QkU1REMyQ0FDRkJGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NzM3MmUzNzMzMmUzMTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxSXIwDQYJKoZIhvcNAQELBQADggEBAH/k6nz0pQhA
qHLhoaUumIYmQp2gZZ3/vqL/WqwMafQMncWjLNG4eMckqddH6SQaWXalmwuLPaCN
patm+N6FAlR4sabFZ9fe5NOhVEre0f7/fRtXSkd+6mHoVOCDlaw24Quuh4K4CR2u
Uu/tkiep0aEIKmomUEwW/JZWUucESKesU7RyHsNOV/yuZMlisXEMIIuz2uRPUp8e
KtRdz3XySuSjaAOu0nnac/TTR0TjXQPOyiqo7Ad6HBWWPc3wB3XTka4//DAoL+4+
LOoPC5ecqSAW1JyRsc+6bDPyhTmTi5JVn3ilh3toUv4HrHMq4GtMUB5acgMOriCh
CiyB6hflt0Q=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org