Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          ZI34iW7BbsjA8Ox270CW2vxJmVmhnB2IGh7tmqt5EgM=
Subject key identifier:   39:50:7B:A8:F8:DB:6F:D0:E0:EA:A5:FC:2E:BA:78:DF:1B:F0:83:7C
Certificate issuer:       /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial:       31DC9236638965D208E7AC4B821E10F36B53E23A
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
Signing time:             Wed 03 Jan 2024 12:10:32 +0000
ROA not before:           Wed 03 Jan 2024 12:05:32 +0000
ROA not after:            Wed 01 Jan 2025 12:10:32 +0000
asID:                     264022
IP address blocks:        170.245.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dc:92:36:63:89:65:d2:08:e7:ac:4b:82:1e:10:f3:6b:53:e2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
        Validity
            Not Before: Jan  3 12:05:32 2024 GMT
            Not After : Jan  1 12:10:32 2025 GMT
        Subject: CN=39507BA8F8DB6FD0E0EAA5FC2EBA78DF1BF0837C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:ea:2b:4e:08:a3:6a:be:6b:10:ac:b0:2a:
                    01:eb:5b:14:93:92:84:b6:4c:56:bb:a4:cc:6b:c5:
                    d2:b6:c5:f9:83:20:59:f6:4d:e9:a8:87:94:3c:5f:
                    7c:86:b2:2e:11:cb:04:35:28:70:e3:fe:49:1d:d4:
                    74:e0:63:a6:68:5c:52:7f:20:5f:7e:d8:f0:27:74:
                    c3:ee:d5:95:e2:86:7d:e3:3a:b1:92:97:07:01:ed:
                    78:0a:ec:93:f4:51:6a:bb:bc:9e:70:18:c1:bf:b8:
                    8c:11:60:be:76:64:17:c8:8c:df:71:c0:e6:96:4c:
                    72:27:39:b3:97:69:40:c9:8d:52:0a:51:06:33:bd:
                    a7:d6:7d:04:49:4e:20:fa:1b:28:b7:8c:c2:e7:9d:
                    a1:28:21:5f:1e:82:58:50:d0:b4:63:ea:c9:a6:a5:
                    ac:cc:0b:6e:d0:9c:4c:75:ed:c4:9a:d4:08:25:a9:
                    f9:c8:e7:19:66:36:b4:10:c3:1b:34:b8:c4:78:04:
                    0a:2e:fa:8b:82:2e:ef:6d:7a:e3:27:b0:4e:d3:83:
                    cf:ce:f6:8f:c1:ec:e3:31:b8:0a:d1:99:ac:6e:8b:
                    08:c9:99:cd:ba:95:87:0d:5e:36:1e:b5:c7:11:72:
                    9a:c9:d1:b6:57:a7:89:0b:b8:0e:73:40:df:40:e4:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:7B:A8:F8:DB:6F:D0:E0:EA:A5:FC:2E:BA:78:DF:1B:F0:83:7C
            X509v3 Authority Key Identifier:
                keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:65:ae:aa:54:fa:81:cd:41:bd:7c:c1:b6:ef:51:94:6f:83:
         98:df:79:e7:df:e7:81:75:ee:81:27:36:f9:e1:68:bd:c8:e4:
         f1:da:1a:04:ea:23:9d:13:f1:a3:0c:ea:1b:bc:6a:f7:f6:5a:
         cd:4a:c6:04:d7:3a:0a:f3:80:82:60:c3:6b:19:4f:1b:18:04:
         91:50:ef:a0:1b:c6:06:18:b9:1b:4e:34:07:fb:d5:bb:f0:16:
         09:68:c7:65:5e:bf:42:99:c0:ee:39:8b:6b:86:a2:ff:b5:cb:
         06:20:57:72:4b:e1:e6:8f:a1:9e:7f:4e:85:53:61:d8:66:3b:
         c0:4f:fe:e2:c2:17:74:a6:ab:c0:97:81:80:67:1b:aa:45:80:
         4e:b7:25:27:c5:01:2d:a7:e3:62:01:89:b6:7a:99:82:76:ca:
         9b:a8:df:c1:07:03:c5:95:13:64:64:b8:a3:0b:8d:2c:a2:d7:
         76:62:94:1d:43:89:44:5c:16:62:6b:41:d7:9d:39:5d:fd:68:
         13:cb:e6:6b:25:93:0a:3a:f4:0a:5f:92:13:54:73:2a:e0:54:
         47:61:78:ee:51:42:0e:f5:0e:7d:8f:41:d0:e2:5b:26:2f:4c:
         b8:9e:69:6d:70:d4:c8:44:d7:8f:43:d1:eb:e6:2f:f9:86:61:
         f2:9c:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org