Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          x99GW2jv4OF217CdoIJeftnTUz8nTE+28g13MjRyzsA=
Subject key identifier:   5B:AB:6E:A7:6C:21:FF:AF:17:90:4F:EC:16:BC:D0:1E:A4:F5:A6:84
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       1230AB5DF6D499616CA901383F819A6B8678C25E
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        177.73.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:ab:5d:f6:d4:99:61:6c:a9:01:38:3f:81:9a:6b:86:78:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=5BAB6EA76C21FFAF17904FEC16BCD01EA4F5A684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:68:ff:34:64:58:db:77:b3:81:4e:f6:d9:
                    71:5f:c5:00:15:1d:f1:72:7e:57:5b:4d:6d:1a:3a:
                    e7:19:39:19:94:f4:5f:c8:ea:c2:4b:2b:38:8a:aa:
                    72:1c:f8:1c:b6:48:9d:27:c2:86:8b:59:fb:02:6c:
                    34:54:fc:55:50:7f:4b:75:33:90:33:1f:b3:33:18:
                    d1:ee:3a:ab:c8:5f:37:f3:68:52:3c:56:68:9d:47:
                    81:6e:03:69:6d:c0:a3:0d:44:c5:ef:2e:9e:11:34:
                    82:72:31:c9:d0:f9:ef:34:71:55:08:5f:d3:b2:da:
                    83:e6:5f:83:1a:1a:d4:b4:40:37:1c:a2:d9:cd:a6:
                    77:fe:b6:ac:d4:72:21:14:c8:b2:b1:9d:fb:e7:0a:
                    a8:63:75:56:6b:b9:8e:fe:5b:94:55:d7:9f:38:fe:
                    09:86:99:2a:2c:42:b6:41:e7:e2:45:12:f6:4e:e9:
                    67:b6:11:0d:ff:d6:3d:8d:18:36:40:1f:b0:1c:4e:
                    d8:24:44:b7:63:5b:b9:54:0a:c0:97:b9:7d:72:d5:
                    3b:f7:a7:30:30:9e:26:15:a7:c0:e5:63:1b:d1:87:
                    e1:29:de:30:44:a0:8d:1b:94:45:34:b9:62:62:32:
                    2e:5c:94:87:59:eb:bc:94:96:b4:6d:8f:41:df:20:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AB:6E:A7:6C:21:FF:AF:17:90:4F:EC:16:BC:D0:1E:A4:F5:A6:84
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:84:6e:5e:70:74:79:94:04:66:07:94:8f:f8:70:23:e9:9f:
         0d:7b:f8:52:26:c6:5e:f6:d1:71:b5:66:31:0e:14:59:9c:03:
         49:54:48:32:35:5c:73:98:52:f9:8b:79:f6:c4:28:e6:b3:b7:
         48:22:d2:53:a4:79:45:dd:07:cc:c6:bf:23:da:0e:7b:55:49:
         77:14:5e:fb:7b:4d:65:3e:b9:58:95:ec:b5:4d:23:b9:23:ad:
         cd:01:69:38:2c:06:12:53:5e:be:bc:6e:8f:ca:2b:4a:26:6f:
         1f:72:2d:8a:ee:ba:9e:95:21:0a:68:6f:51:ca:57:d7:4c:ba:
         c3:28:6c:ec:f3:46:9b:c1:54:bd:74:58:2a:e2:1f:87:88:26:
         cf:b8:0f:93:b8:3d:3e:b7:25:af:ab:bd:a8:b7:6b:6b:a8:08:
         83:93:e9:09:1f:d1:df:5a:e3:a5:e8:2f:a0:89:ea:7f:d8:7d:
         bf:02:a8:21:7b:e0:07:e7:d5:73:9c:da:76:b4:75:97:e8:8a:
         c7:dd:7a:e6:61:74:65:96:26:d3:e8:7f:e7:1c:51:35:7f:41:
         72:cd:d1:b1:b4:06:97:74:dd:e1:57:2b:83:7d:80:4b:dc:8f:
         91:cb:a2:96:98:b3:97:ab:76:a3:4f:e0:59:21:7e:2b:d2:28:
         62:cd:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:16:35 2025 by rpki-client