Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa
File:                     3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa (raw, json)
Hash identifier:          +dqy0AHO9MzCcaonhBVMeyQV9NNN8UdI+3b0PpvDqzE=
Subject key identifier:   37:CB:A2:93:2F:41:3F:D7:4C:0C:E8:03:AF:60:CC:A3:FC:D3:50:B3
Certificate issuer:       /CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
Certificate serial:       2B2DF1F780A33EB99D66D023109ED3113A139EED
Authority key identifier: 32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa
Signing time:             Thu 14 Sep 2023 20:52:28 +0000
ROA not before:           Thu 14 Sep 2023 20:47:28 +0000
ROA not after:            Thu 12 Sep 2024 20:52:28 +0000
asID:                     266332
IP address blocks:        170.238.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2d:f1:f7:80:a3:3e:b9:9d:66:d0:23:10:9e:d3:11:3a:13:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
        Validity
            Not Before: Sep 14 20:47:28 2023 GMT
            Not After : Sep 12 20:52:28 2024 GMT
        Subject: CN=37CBA2932F413FD74C0CE803AF60CCA3FCD350B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:d8:cf:32:14:8c:bc:56:28:26:73:80:2d:
                    b7:0c:e9:ad:ad:cb:fa:0c:31:e3:0c:ac:78:28:a1:
                    b6:79:85:b3:cc:4e:c9:57:32:90:ed:63:56:a4:9e:
                    11:87:d2:a8:08:45:00:6e:c0:44:19:4e:91:7c:fb:
                    16:e9:62:6e:ce:90:f6:47:4a:48:69:c2:a5:79:6e:
                    d5:9c:9e:2a:ba:66:e3:fc:a9:35:17:52:96:7c:98:
                    df:cc:a6:39:fa:86:ba:81:b0:eb:db:48:a8:84:1f:
                    42:81:80:63:3a:3f:f1:09:ed:33:84:29:ee:02:7d:
                    12:47:0e:f3:82:63:0f:da:ee:29:40:19:61:5f:0e:
                    db:0b:73:d2:fe:9c:44:6a:f1:23:d1:d1:0a:0e:ad:
                    e8:86:46:bb:12:53:6f:1b:a7:6a:5c:5b:2e:de:4e:
                    a7:7b:bf:47:31:52:b0:58:d7:fb:c4:9a:ff:36:4b:
                    c8:71:61:b7:6b:11:fb:70:bd:5f:36:3d:50:64:06:
                    04:ef:07:4c:0e:d8:a2:51:36:7c:2d:db:f0:41:40:
                    a4:b9:aa:44:c4:76:3d:02:64:ae:a4:59:fd:a3:eb:
                    33:ba:1f:fc:37:ea:be:a9:61:15:ca:60:07:9d:f5:
                    d2:81:c0:09:4a:82:f8:5d:2a:d5:b4:7d:e3:dd:48:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:A2:93:2F:41:3F:D7:4C:0C:E8:03:AF:60:CC:A3:FC:D3:50:B3
            X509v3 Authority Key Identifier:
                keyid:32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:a5:a5:3d:8f:01:29:94:3d:3f:2d:0b:5d:ec:6c:3c:18:ed:
         cb:74:9e:4d:64:81:76:3f:53:5b:b4:d4:41:29:86:51:d2:3a:
         9a:23:92:31:7b:c1:ca:5e:cc:cb:63:a0:f5:b8:a7:d3:b9:8a:
         05:11:bd:13:66:22:46:8b:5c:ee:63:7e:a3:f8:76:11:42:e7:
         b8:76:17:d6:7a:86:c5:0b:3b:d9:cd:e7:1c:da:3f:0b:a5:09:
         95:0c:5b:9d:cc:fd:a9:ad:fc:98:32:25:19:eb:8e:d9:9b:ee:
         94:b8:0e:99:58:5f:5f:b4:ea:f0:7e:50:1f:2f:fd:1e:6f:73:
         51:3e:d4:fa:3d:60:f7:9a:eb:38:00:91:92:3f:3c:55:f5:08:
         3d:cc:b8:4f:0b:63:f6:69:94:fa:99:2f:00:d7:d3:62:03:29:
         37:da:32:3c:ba:e7:b6:c7:7f:2d:71:0f:4a:f5:33:1b:79:7d:
         14:64:73:53:6b:86:88:e5:d6:1c:c2:85:4a:64:d9:f8:c8:b1:
         05:ed:f1:cf:f9:f5:2f:a9:88:05:95:de:4b:e5:96:be:90:d3:
         ae:22:bf:99:ca:a7:40:2b:9c:e9:ee:e0:5d:a2:14:cd:d7:1d:
         43:1d:d0:b1:27:df:85:e1:4a:4c:b6:df:61:e3:44:04:b4:d3:
         62:74:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org