Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32342e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32342e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          4oe+xn9JHyW5b0xf7rwxOqHcONhtN0T8C3vfEw3Bj7o=
Subject key identifier:   42:EE:2C:E3:A0:EF:64:2C:ED:75:DF:E1:A1:B9:6F:99:A2:44:15:0E
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       3EE36F1AB399BFACE77FD4230891AA07B1E379B1
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32342e302f32332d3233203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:38 +0000
ROA not before:           Mon 08 Apr 2024 19:38:38 +0000
ROA not after:            Mon 07 Apr 2025 19:43:38 +0000
asID:                     52685
IP address blocks:        177.73.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e3:6f:1a:b3:99:bf:ac:e7:7f:d4:23:08:91:aa:07:b1:e3:79:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:38 2024 GMT
            Not After : Apr  7 19:43:38 2025 GMT
        Subject: CN=42EE2CE3A0EF642CED75DFE1A1B96F99A244150E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:fa:fb:9e:ad:25:ab:ff:d6:32:bf:65:91:
                    d2:76:c1:91:7a:1b:9f:00:8b:af:b8:96:3a:7d:0b:
                    95:2c:5c:60:df:eb:e5:9a:b8:d4:6f:20:73:aa:b1:
                    c3:a2:e7:3d:a5:72:92:a5:4b:b6:66:45:82:a1:c4:
                    b8:f2:4a:bb:52:e9:f2:0e:03:79:39:bd:fd:a6:cc:
                    94:44:61:ba:b0:8c:4b:2f:2c:6f:07:88:68:e5:28:
                    39:0b:86:cb:31:60:e7:b3:85:f0:f6:9c:a6:6c:a6:
                    57:eb:50:2c:59:55:f3:20:f7:05:47:cc:ed:bb:a2:
                    11:e5:b1:e1:c9:aa:1d:cf:15:3e:42:a2:4c:c4:a1:
                    f5:49:7f:b3:30:e3:10:50:6b:97:20:f2:8c:04:cb:
                    ae:46:d9:61:97:ac:f1:f5:2a:0b:41:85:d5:dd:dc:
                    34:b2:fb:cc:49:43:09:23:1f:a3:39:04:9a:7c:40:
                    95:7d:e0:e9:0f:56:5d:98:fc:b2:44:b4:9f:9c:9c:
                    2e:f0:f8:71:7f:b6:21:ae:df:26:23:3d:01:6d:8c:
                    9d:e1:89:f5:ea:5c:45:22:a8:62:93:0c:de:1e:8b:
                    59:7b:0f:25:96:55:d4:fa:9c:9d:c1:7b:4b:ed:61:
                    6f:54:a4:1c:21:c2:06:b1:74:8a:83:55:c2:45:b8:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:2C:E3:A0:EF:64:2C:ED:75:DF:E1:A1:B9:6F:99:A2:44:15:0E
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32342e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:85:69:86:ed:f9:89:36:47:1b:53:2f:10:39:d7:b8:a9:
         33:5b:8b:d0:c0:dc:f6:ca:df:5e:1e:80:84:8b:b7:7e:40:00:
         ab:fc:a0:a0:de:a1:db:dd:d9:8f:64:e3:6a:46:6b:58:25:1c:
         62:c7:6d:8c:0b:92:e1:d0:e4:72:8e:bd:f5:38:c2:a9:b6:21:
         d8:1a:dd:58:02:ce:25:f3:2a:9a:35:7a:2f:04:da:a4:d4:db:
         e9:f0:06:1e:e1:78:39:0b:f6:84:69:8f:b8:ba:7f:fc:d0:37:
         fa:f9:a8:db:0f:de:84:14:85:64:9a:d6:c9:5c:22:ca:58:f9:
         05:ee:54:fd:9b:62:cc:e4:c7:ec:09:fd:ca:a9:a5:16:ab:e2:
         97:3f:2e:d4:88:aa:f8:2a:7a:ef:00:80:1e:0b:6d:9d:fa:d2:
         d4:74:33:1d:6a:61:74:07:76:27:34:2c:46:34:51:af:ef:a4:
         f8:cc:59:40:09:c1:70:f4:03:80:18:5c:ed:db:e8:7f:48:d0:
         e2:df:ae:b0:f0:e2:6a:2d:e8:4b:d4:d8:06:07:d9:c3:67:b4:
         1c:ef:cb:10:85:7b:fb:72:24:35:a1:ba:5d:7d:8f:95:27:b6:
         b5:02:75:8b:b0:e9:79:60:c8:73:59:a5:45:67:56:5c:c1:d3:
         5f:1c:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:59 2024 by rpki-client on console.sobornost.net