Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32322d3232203d3e20323632353639.roa
File:                     3137372e37332e3131362e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier:          ArZCAnj8M5dej0NQHJtXAK/ibBZcZHIDyK7FNEEe+ok=
Subject key identifier:   37:C9:76:C9:80:ED:EA:4D:A2:F9:38:42:64:3A:38:8E:DC:6D:92:F5
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       299B3FB45C411BB032C0EF310855C927FE7886B9
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32322d3232203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        177.73.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:3f:b4:5c:41:1b:b0:32:c0:ef:31:08:55:c9:27:fe:78:86:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=37C976C980EDEA4DA2F93842643A388EDC6D92F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:02:4c:86:66:1d:f6:20:1a:e5:f4:fa:ff:
                    9b:40:b7:e6:c1:8c:65:bc:35:d1:b0:e9:19:35:4a:
                    c3:a0:a1:d2:51:b0:f3:d8:33:09:bd:51:71:fd:7e:
                    15:d8:8f:bd:db:94:6f:70:4f:74:ea:6f:96:4d:64:
                    56:2f:25:22:07:52:a5:04:b6:42:af:68:67:d1:0e:
                    09:72:1d:e7:3b:8e:37:47:8c:af:3a:05:dd:0a:73:
                    66:c0:3d:24:55:06:71:dc:43:ea:1f:b2:a7:2b:e9:
                    91:9d:7d:e9:18:d9:00:97:c1:fa:09:5d:84:05:13:
                    48:0f:bf:25:15:5b:6e:78:06:be:5b:0d:bc:57:f6:
                    41:f1:aa:ac:25:4a:38:01:c4:ca:b3:9a:c4:cd:64:
                    a3:14:86:8d:62:c9:56:a5:05:eb:6d:46:10:4c:82:
                    26:dd:6f:2f:99:b2:a0:de:4b:64:e9:bb:40:b4:2d:
                    e8:3f:50:b1:1a:5a:99:11:69:63:b4:5d:87:7f:1e:
                    cd:8e:3c:88:75:c4:b3:54:5a:9e:7d:cc:21:76:96:
                    d2:37:ef:da:b4:f0:66:1e:b9:df:1d:c0:36:fa:aa:
                    f2:f1:42:b0:6b:8c:1d:7f:a8:9b:a2:eb:7e:bf:ab:
                    c5:3e:22:8d:d1:10:5f:71:e1:6d:7b:e3:64:10:97:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:76:C9:80:ED:EA:4D:A2:F9:38:42:64:3A:38:8E:DC:6D:92:F5
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32322d3232203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:05:06:9e:89:f1:73:3b:33:29:93:f0:2b:fa:2e:68:44:12:
         3b:d5:54:b3:00:d3:66:35:34:3e:c6:2b:3d:a4:16:e3:31:63:
         3e:2f:24:27:8c:16:34:0c:0a:bb:64:b3:88:a7:f1:dc:2f:16:
         11:fd:22:94:9d:14:64:d3:e2:89:3f:ef:b8:f0:48:ad:df:54:
         4f:37:c2:07:84:f1:f7:08:a8:a4:64:c8:06:25:a4:7c:38:c3:
         d0:25:bb:1a:6f:1e:1d:b1:97:c4:f4:12:da:31:5c:cb:de:62:
         4d:f6:11:c0:70:74:9f:ab:7a:93:d4:f6:8a:c3:7e:90:97:47:
         a6:87:b9:55:e5:67:a2:71:1a:2c:32:4c:50:99:7f:bb:43:3e:
         ae:de:15:41:8e:4e:25:00:40:ab:cf:48:48:63:f0:43:53:91:
         9e:4d:16:11:41:66:9c:be:4f:5c:4b:bc:89:8e:77:d9:1c:59:
         b6:dd:eb:b5:c3:22:cc:e1:68:1b:4e:8a:a9:49:25:c9:33:0c:
         0d:c5:db:85:ad:e7:05:f0:d1:16:dc:51:e7:f9:aa:bb:c3:48:
         09:c6:26:21:72:57:11:48:e4:ca:92:8e:f5:ae:10:9d:d0:a4:
         83:b7:52:1a:f7:9d:4e:ca:4d:87:38:30:69:fc:07:be:82:4f:
         40:9f:b8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org