Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131372e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131372e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          33CfJISOrivUi8EONuSAGyG7yMi4HVU9jgmUVxIF+VE=
Subject key identifier:   74:3A:B8:4E:92:3E:45:86:C4:DD:6A:7F:81:CD:6D:C3:CD:7A:4F:BA
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       11712A67D7B1BAE50EE8E3BB03B1AA404239EA11
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131372e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        177.73.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:71:2a:67:d7:b1:ba:e5:0e:e8:e3:bb:03:b1:aa:40:42:39:ea:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=743AB84E923E4586C4DD6A7F81CD6DC3CD7A4FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:a4:a0:59:67:1a:82:c3:aa:bb:76:8e:aa:
                    99:3a:7e:ee:22:64:7f:60:9e:f8:a4:e4:48:bf:f7:
                    c3:c2:3e:5c:1d:bc:1b:dc:98:71:47:a1:cf:c9:3d:
                    e0:23:4f:9e:3d:4b:cc:d3:a4:14:33:a0:01:b3:93:
                    90:32:33:9d:3b:92:7a:23:c6:60:c6:94:af:ca:72:
                    d4:c8:19:a4:8f:6b:63:01:0f:e2:59:c2:93:0b:44:
                    ab:6b:48:3c:5e:69:97:3f:e5:a7:8c:4a:4d:53:23:
                    bf:aa:45:33:54:62:b5:a4:7d:fc:9b:5b:40:cd:1a:
                    5c:17:a5:3d:9d:11:f6:96:51:10:75:c9:b8:95:3f:
                    79:46:2e:09:6f:b7:6b:da:dc:38:17:3a:44:a0:3c:
                    d9:ba:84:d2:70:88:05:5e:3f:70:fc:82:c9:22:0b:
                    87:aa:46:16:1b:c4:09:1f:40:d9:07:a6:83:3c:4e:
                    f9:1d:48:d2:17:88:ff:5b:2c:fa:9d:59:38:eb:fa:
                    ed:82:49:13:12:6d:da:0d:9d:90:6e:f9:84:ae:bc:
                    db:09:16:3e:6e:df:61:f4:2e:02:83:b1:2a:50:20:
                    f0:07:95:6e:3d:55:41:73:1e:c6:c8:7e:6a:a4:a2:
                    8c:69:c7:c0:89:c8:04:ac:8e:4e:32:64:68:e1:3b:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:B8:4E:92:3E:45:86:C4:DD:6A:7F:81:CD:6D:C3:CD:7A:4F:BA
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131372e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3a:0d:20:6b:a4:ca:45:32:fc:01:60:a2:32:42:72:c7:f6:
         f3:40:40:a9:c7:d9:1f:a8:a9:da:c8:ce:d9:fe:85:c9:08:fc:
         ba:fc:aa:f9:92:1f:3e:29:f8:8c:92:92:28:1a:3a:d8:92:f5:
         5f:ee:f7:24:60:50:5b:dd:12:70:6c:df:c9:95:71:a2:ce:25:
         8d:af:ff:b7:60:d8:36:ed:05:b5:d8:0d:cc:84:92:7e:23:05:
         49:e9:69:3b:55:60:70:f1:63:3a:24:51:b9:a7:7a:a1:a4:eb:
         4c:fc:87:26:ab:7f:40:92:5f:1e:20:6e:c3:e7:54:e1:5b:d8:
         b6:1e:8d:fe:5d:17:a0:3b:7e:7a:dc:cd:40:40:06:77:ff:f5:
         7a:f6:ef:84:0b:58:4d:42:90:26:c5:5e:90:42:1c:62:78:79:
         a6:df:80:08:0e:38:90:59:da:3a:b8:d3:6e:2c:10:37:60:66:
         d5:ca:de:50:e0:6f:c3:43:12:ce:dc:5a:78:b1:a6:f3:88:68:
         b4:41:c6:90:32:e8:b3:c2:6e:0b:96:b6:b2:5e:57:0e:b3:a9:
         69:f9:6f:a1:fa:e1:f8:16:87:9a:ab:0a:e7:4e:6b:e7:a6:c0:
         f6:97:dc:d0:6b:49:28:c4:81:fb:91:ca:9a:a7:61:fe:77:e9:
         ae:fc:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org