Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          PM/EhU8wcbZCYDysY3dApEJoARsIR8H9WGSztOx+FXk=
Subject key identifier:   A8:EB:0C:98:0D:F7:5E:48:06:7F:53:AE:58:F2:83:4E:85:AD:07:5F
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       137D4AB15AFF65C15EA0B535BFD2688C685982F4
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        177.73.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7d:4a:b1:5a:ff:65:c1:5e:a0:b5:35:bf:d2:68:8c:68:59:82:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=A8EB0C980DF75E48067F53AE58F2834E85AD075F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:1e:48:a5:2c:3d:34:f1:da:4c:a3:bf:22:
                    35:b9:18:ce:5b:2c:c3:4e:1b:f1:9e:a0:9d:ec:c6:
                    88:b0:4b:af:38:69:67:af:04:ca:b3:68:64:19:f5:
                    3b:10:31:38:57:ee:45:f8:f1:34:10:13:19:09:8f:
                    a7:20:be:c7:59:1f:5b:a0:f1:6a:d3:ab:85:b2:ee:
                    eb:f2:53:65:f6:51:73:03:96:f8:29:0a:13:84:99:
                    91:c5:c1:e4:23:1c:b4:f0:9c:c2:ed:61:a8:40:3c:
                    71:0c:04:db:c8:4e:c0:6b:20:c1:fc:fb:dc:f8:18:
                    a7:23:b4:d1:c2:20:3a:73:d8:45:a2:67:90:44:e0:
                    98:81:10:d7:67:b1:1a:e3:5d:75:87:2a:13:cb:2c:
                    9f:29:ad:8b:a9:54:49:41:6d:96:07:32:bb:2f:9c:
                    b6:6e:1c:80:32:2d:9a:c2:9b:a9:f5:b5:d9:43:b2:
                    1b:7c:c6:ba:5c:77:a1:88:71:9a:16:25:ea:b9:5e:
                    bd:3a:4f:8d:8d:af:f3:a2:96:c1:60:42:c4:8c:07:
                    b0:26:8c:22:4c:80:2d:f3:4e:ed:fc:35:18:52:42:
                    e4:0e:51:da:0e:0a:c7:db:39:f5:0e:53:dd:93:72:
                    5c:50:a0:2a:a2:90:46:80:1d:c8:cd:d0:ec:ec:b4:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:0C:98:0D:F7:5E:48:06:7F:53:AE:58:F2:83:4E:85:AD:07:5F
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:83:ae:5b:50:7a:e2:7a:be:fb:57:1c:85:3d:d6:75:73:b7:
         40:de:b1:68:82:80:44:81:49:89:db:7b:fe:08:5a:ea:af:35:
         a5:63:05:06:ab:a5:7e:a7:fe:ed:26:ac:34:b8:5a:69:48:7e:
         bb:82:2a:f8:4c:22:2b:c0:cf:fd:97:ee:9e:68:f0:1a:45:99:
         21:8f:b5:99:3f:b9:44:48:7f:72:e3:dd:48:9d:96:13:12:8f:
         81:1d:cf:93:b1:af:3c:cb:ba:a9:0f:c5:d5:0b:bf:98:a9:0f:
         5d:97:dd:b8:26:63:fa:5c:55:0d:e4:33:c6:8d:27:ca:7d:f4:
         92:98:e4:f5:27:9f:47:ce:2c:99:a3:b3:21:09:be:0e:d5:b5:
         01:26:9d:f6:2e:5e:1c:7b:7d:52:2b:72:b1:51:58:b9:62:1f:
         f5:00:d4:e1:c1:59:75:ce:29:c7:a9:00:9f:e4:b5:46:d9:3c:
         7f:62:69:0c:ac:6c:cb:02:c1:ad:d5:74:f3:06:f0:dd:ef:54:
         23:a1:d4:16:44:79:09:6b:4a:d5:41:33:93:fe:1c:4e:06:6a:
         a5:1e:d8:f4:f2:22:95:6e:a3:7e:aa:e1:07:08:4e:ea:0e:00:
         d6:6b:f5:e2:c5:26:04:18:b1:3f:cc:90:c9:75:ce:5b:37:43:
         18:f0:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:25:03 2025 by rpki-client