Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131352e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131352e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          Thtt8dy/9dYm2Eu/HGc8HV3FGjvWi4sqWwE1/49K200=
Subject key identifier:   43:05:50:B0:68:91:33:17:92:B9:A1:C3:6E:2F:F3:DD:2C:C8:BD:B7
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       2802B755BEADF88A83A1D60F976CB30FE6FD75F4
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131352e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        177.73.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:02:b7:55:be:ad:f8:8a:83:a1:d6:0f:97:6c:b3:0f:e6:fd:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=430550B06891331792B9A1C36E2FF3DD2CC8BDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:c1:9e:18:fb:d4:99:1f:5c:70:c8:f3:43:
                    dd:82:29:40:19:23:ca:a9:b0:43:9a:59:33:d7:aa:
                    db:5f:f3:69:d9:02:6f:c2:22:98:57:81:ba:a1:aa:
                    ff:5c:36:30:31:bd:82:41:e8:c0:5b:bf:07:af:59:
                    98:01:4f:d4:b3:60:2b:7b:4e:6e:a7:3b:86:4f:af:
                    ee:44:b6:82:22:a9:74:a1:54:34:6d:4c:77:28:72:
                    cf:2e:fb:b9:3a:83:00:19:3a:2a:7c:9a:82:07:f6:
                    69:10:34:4e:22:1d:4c:14:98:cc:09:69:cd:7c:75:
                    9f:dc:e8:b2:28:55:ac:f7:c8:d0:9c:11:b1:1c:14:
                    e1:88:db:d2:ba:f3:c9:18:5a:2a:54:17:00:7d:a4:
                    c4:ab:57:f3:7a:30:6e:3c:fd:38:85:1d:b3:7e:06:
                    dc:19:5c:c0:8e:e8:a8:1a:b0:72:67:51:16:25:a7:
                    99:19:9b:50:e6:b8:2d:59:de:86:e3:45:2a:f8:1d:
                    3f:82:0f:3a:fb:e2:5a:3f:8a:4e:58:86:65:cc:cc:
                    47:88:fa:36:82:7f:fb:0c:45:52:39:16:2d:0c:84:
                    f7:1b:51:7e:03:25:5a:07:77:3a:12:16:35:91:8a:
                    a6:e8:dd:a9:43:d6:68:ca:64:41:95:08:43:6a:67:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:05:50:B0:68:91:33:17:92:B9:A1:C3:6E:2F:F3:DD:2C:C8:BD:B7
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131352e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:13:b2:53:59:30:a9:d5:32:ab:8b:89:ac:86:5c:e5:15:
         a6:a0:e0:87:e3:23:4f:a7:51:c6:0c:25:aa:92:0a:2b:9f:72:
         07:31:a5:07:af:ec:80:1d:3d:44:aa:64:2f:2f:56:21:f4:0d:
         86:4e:9e:e0:1a:54:0f:59:67:66:d5:ae:88:8f:19:47:13:19:
         08:4e:8e:5e:fa:37:ee:85:dd:e5:3f:7e:f3:61:1f:40:d8:2d:
         8a:5b:95:09:d0:6b:95:66:b1:f3:b6:90:8c:8a:ab:00:26:e2:
         c1:aa:c1:a8:7d:e6:95:02:61:81:5e:3f:3c:4f:47:bf:48:02:
         6c:b1:2a:b8:63:05:33:d3:ad:87:bb:ba:bf:2f:89:8f:19:c3:
         27:f7:88:83:17:d1:52:ff:8f:24:da:6c:88:5d:e2:c5:7e:ca:
         3a:13:2f:4e:79:a8:d8:b9:9b:77:34:d3:07:b4:41:8e:5b:88:
         b5:73:8a:2c:d2:78:35:0e:62:96:fb:9a:4d:82:b3:36:a3:45:
         99:6b:d8:a5:d3:48:a0:b0:12:27:e0:bf:55:2b:b3:86:82:87:
         c9:0b:e4:d2:29:62:9d:df:11:56:4b:21:75:a5:92:29:de:31:
         6f:40:26:f9:41:85:86:15:f7:14:56:f3:fc:a2:7a:12:20:c9:
         90:75:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org