Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          y6qp6z844FA5iLc3JYUormBaCWkf0In/iGTweOAJIDU=
Subject key identifier:   B4:A1:B4:AA:46:3A:4F:3C:BC:A7:6B:B6:BE:68:49:81:67:A6:98:70
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       7330E19A28D63979204F7C9FF7815050FAB6DDA8
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:30 +0000
ROA not before:           Fri 09 Feb 2024 10:54:30 +0000
ROA not after:            Fri 07 Feb 2025 10:59:30 +0000
asID:                     262485
IP address blocks:        170.238.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:30:e1:9a:28:d6:39:79:20:4f:7c:9f:f7:81:50:50:fa:b6:dd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:30 2024 GMT
            Not After : Feb  7 10:59:30 2025 GMT
        Subject: CN=B4A1B4AA463A4F3CBCA76BB6BE68498167A69870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:76:8a:d2:9c:b6:a8:31:0e:6b:97:0b:e1:
                    9c:87:c1:bc:a0:d6:d0:fb:19:d3:32:82:e7:5f:71:
                    64:91:35:7d:ea:01:48:b2:6a:c1:14:a3:74:04:a8:
                    b9:6c:49:40:74:59:b1:94:34:db:36:19:14:1d:04:
                    78:94:e5:f9:6e:62:ca:86:54:02:78:3d:0e:9a:c6:
                    02:0c:85:e2:91:1f:fd:7e:6f:39:42:01:97:bc:c8:
                    9a:c8:f3:c3:74:b0:85:dc:c1:b3:4e:52:9c:30:e4:
                    41:e0:21:29:2f:2e:95:50:e4:3f:82:33:87:6a:9a:
                    a3:67:42:b7:05:de:0f:d7:07:cc:1f:65:11:95:1a:
                    34:69:61:0f:57:b3:71:ac:22:76:1a:7f:32:c1:4f:
                    d2:7d:a8:ff:e9:ce:e8:a5:cd:e6:f2:b6:d9:2b:23:
                    33:ff:d8:58:87:5e:98:45:d8:2e:40:01:4f:75:f4:
                    b2:40:be:01:22:c3:dc:82:24:7f:ef:95:70:41:14:
                    ec:6e:84:a8:03:79:56:ec:c9:5b:4c:45:e0:d9:db:
                    2b:17:6a:51:ff:3d:7a:aa:02:5d:9e:80:3f:a0:b6:
                    58:c3:47:6b:db:34:2d:5f:43:b1:13:5d:70:ae:21:
                    48:86:90:73:7e:63:2e:a2:61:2e:f2:ee:34:ef:e3:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:B4:AA:46:3A:4F:3C:BC:A7:6B:B6:BE:68:49:81:67:A6:98:70
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:ce:65:07:b0:a2:49:42:63:de:56:9d:55:f4:67:4a:c5:95:
         f2:7e:79:d0:40:6d:b0:33:25:53:53:41:8b:61:08:6f:a7:6a:
         48:e9:53:e6:37:a1:ab:41:99:75:c3:15:63:6b:63:c1:bf:c4:
         31:8b:71:de:42:eb:f5:8f:57:bc:31:9d:40:b0:f1:02:9d:64:
         75:ae:17:e9:f7:72:cc:f7:40:61:0f:80:61:d9:30:71:3a:98:
         e0:eb:3f:fa:4d:06:1f:c9:a7:bf:2e:fe:00:24:88:88:94:b7:
         56:fa:36:da:8e:1f:d4:fa:2a:5a:82:50:ef:c5:6e:23:8f:40:
         69:c3:a2:db:d1:9a:06:79:57:d5:26:04:61:c9:54:1c:af:9e:
         34:fd:c9:07:35:c5:c5:c5:89:98:4d:c3:ad:db:38:08:b3:ce:
         70:e3:e6:1f:54:6f:70:7a:9d:4f:5c:49:47:87:7e:61:e8:68:
         a7:33:c0:b3:47:89:f0:63:00:ed:4e:09:f7:8e:82:b2:3e:2a:
         68:6a:b7:24:df:e4:bb:0e:8d:89:9c:cc:eb:5f:3e:f6:ef:12:
         4f:34:4a:65:f0:bc:36:c0:c8:65:eb:83:67:70:1b:b8:3e:e7:
         4f:97:33:0e:a0:3c:b9:65:b5:30:75:f2:22:7f:06:a4:40:64:
         20:de:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org