Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa
File:                     3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          xrJ/0RV+VGgyWDc/XVCwYWjatv/tVZA0VvtYWNnIbiE=
Subject key identifier:   57:5A:D9:2B:22:F2:CF:BF:29:51:52:4A:FB:25:0C:A4:04:88:5D:27
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       4F1AD1858E7BCB08F4398F6CC587C00985B0A243
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        177.73.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1a:d1:85:8e:7b:cb:08:f4:39:8f:6c:c5:87:c0:09:85:b0:a2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=575AD92B22F2CFBF2951524AFB250CA404885D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:d1:5f:f5:ae:d1:2a:d6:48:e6:00:b3:54:
                    c7:4b:19:b2:e7:b9:9f:b9:ce:4a:b4:d6:9e:32:df:
                    0c:74:79:af:33:96:40:61:a9:69:92:62:e4:78:c7:
                    be:7b:47:9e:75:94:dc:c9:6e:c0:86:a4:c2:7e:2a:
                    c0:89:a4:2e:46:a4:01:a7:52:96:da:31:07:21:f4:
                    53:9a:da:cb:56:75:ad:12:0c:f4:35:c0:f8:e3:0e:
                    e8:60:2a:97:c0:44:07:1d:d8:26:1f:41:66:4b:d3:
                    c7:4a:89:35:5c:b9:e7:0c:42:58:de:3a:46:3e:30:
                    d4:83:b3:8c:14:c5:9b:9f:9e:8f:aa:f9:18:6c:ee:
                    d4:c2:59:cc:da:6f:f5:ea:91:52:c3:94:5f:89:31:
                    4f:cc:b2:fa:05:d8:80:fc:74:10:bc:7c:ce:5b:3c:
                    3e:33:33:4d:c1:4d:f4:a7:fb:69:36:22:97:a1:b9:
                    2f:6f:c7:7f:bd:f7:64:0a:20:76:4b:6f:9b:7a:b1:
                    5e:b4:e3:87:69:ab:bf:6c:ff:52:8f:0f:25:1a:b0:
                    69:35:b0:db:56:fd:0f:d7:6a:a2:db:c6:d8:b4:0a:
                    ab:49:ee:6a:e6:33:f4:03:47:16:fc:3f:b9:fe:1c:
                    2b:3f:37:17:41:de:4d:31:73:9e:94:f5:01:8a:76:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:D9:2B:22:F2:CF:BF:29:51:52:4A:FB:25:0C:A4:04:88:5D:27
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:c6:5e:14:6b:2a:86:49:b2:3f:3e:50:2b:14:0a:ee:e0:
         9a:d9:f9:49:cf:28:55:0d:a6:25:c2:f0:aa:9f:46:a0:d9:df:
         e3:5f:7f:6f:10:6a:e3:63:35:d0:a8:75:52:e3:76:22:af:f0:
         1b:17:5a:f7:b9:c6:d4:95:86:47:68:52:79:c3:37:2c:f7:8d:
         dd:64:21:df:99:7c:d9:e1:50:0b:8d:7e:60:c4:2d:b6:b1:6a:
         1c:c7:45:88:38:90:c5:68:de:f6:d0:a0:69:4c:ba:af:b7:64:
         5e:e3:5a:a6:f9:3a:3b:c4:c0:51:6c:53:14:57:a5:4c:a1:8e:
         de:1c:a9:11:5d:a2:86:b9:bf:60:3f:89:8d:18:40:94:1f:73:
         35:b1:e6:82:2a:7a:97:eb:34:7b:6d:e4:0c:33:57:71:11:07:
         c7:96:1d:9f:4e:77:b8:ec:19:12:05:3d:e5:0e:da:f3:c9:63:
         23:5c:53:61:a6:0b:a9:b7:d2:cd:e7:29:e6:7b:4c:68:aa:49:
         b6:71:b1:1e:82:f1:3f:c4:88:b6:bb:b8:98:d3:ae:31:92:c8:
         6e:33:cc:97:a8:3e:87:ea:b1:d5:07:41:a3:1c:13:a4:e1:01:
         1c:63:f6:c7:56:aa:45:96:eb:a9:c5:38:80:d7:7d:80:c8:da:
         2a:ea:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org