Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa
File:                     3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          4SN+fNPiz0YAYOrBSImWD4aO4walUJ7FF9f6hr8gObw=
Subject key identifier:   A9:7C:3C:98:E0:E2:32:D6:38:CB:80:AD:C2:99:3D:C2:FB:34:4E:55
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       16AD218C023F1A7CB2DFF983938DD6EE61CF5287
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa
Signing time:             Tue 12 Sep 2023 16:36:13 +0000
ROA not before:           Tue 12 Sep 2023 16:31:13 +0000
ROA not after:            Tue 10 Sep 2024 16:36:13 +0000
asID:                     263321
IP address blocks:        170.233.204.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ad:21:8c:02:3f:1a:7c:b2:df:f9:83:93:8d:d6:ee:61:cf:52:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Sep 12 16:31:13 2023 GMT
            Not After : Sep 10 16:36:13 2024 GMT
        Subject: CN=A97C3C98E0E232D638CB80ADC2993DC2FB344E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:45:30:58:4e:9d:78:2f:b1:f1:61:d7:b2:
                    d0:d3:bf:72:b6:19:2d:97:04:e9:97:25:1b:5e:cc:
                    5f:a5:d5:29:f5:96:5a:d0:8c:d1:89:19:2d:5d:b1:
                    5c:db:e2:b3:df:50:d7:2a:53:b2:af:f6:1a:f9:fa:
                    cd:4c:78:1f:ae:c6:e0:3f:38:8e:c3:7a:3e:56:1b:
                    38:c4:50:d2:69:46:c8:50:55:49:44:35:bb:85:b6:
                    03:24:3c:9f:21:a2:6d:fd:b4:2f:79:e3:f7:5a:47:
                    e9:e4:80:81:cf:06:d3:c9:8f:a4:62:be:bb:b4:f6:
                    5a:19:ab:f9:26:ba:97:6a:7e:76:13:b7:e2:7d:0f:
                    ad:51:58:06:59:e9:1d:df:16:26:22:7e:75:ef:81:
                    9b:50:5c:22:a3:1f:a1:ab:8a:f9:c5:f5:79:c6:e9:
                    6f:58:53:ca:cb:f5:c6:ab:5e:82:9b:36:26:54:bf:
                    93:5b:ef:ac:32:92:40:19:1a:26:0e:4b:be:ac:fa:
                    1a:99:ac:eb:43:4a:c3:38:9e:7e:f9:5f:65:b0:37:
                    ab:6f:81:68:8e:01:c8:8c:5a:8d:ac:53:9d:37:6c:
                    e3:2e:ac:9b:19:93:45:1a:2a:95:0f:0e:65:55:5a:
                    ab:1c:08:ed:fb:e0:7a:1b:94:6b:38:ee:de:6b:df:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:3C:98:E0:E2:32:D6:38:CB:80:AD:C2:99:3D:C2:FB:34:4E:55
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:b2:1c:69:ed:a7:b9:16:99:7c:99:f2:e8:df:f3:c9:bd:
         89:71:2b:b4:c4:5a:c4:d3:73:26:01:95:76:4e:9e:1b:4e:29:
         46:de:bb:6b:c1:30:5a:d1:20:b1:00:ab:46:10:71:79:15:de:
         fe:f3:7f:21:46:32:31:a8:fa:ab:99:2b:e0:9d:c5:0b:7f:47:
         c3:b3:1b:d5:1c:48:df:0e:9e:fa:e6:3a:77:4b:8e:1a:1a:f4:
         19:28:6c:85:43:1d:cd:10:b2:a8:4a:5c:93:6c:19:00:7e:d5:
         2c:8c:a3:e3:29:1c:c8:ca:c2:8e:99:ee:a6:90:93:98:09:5c:
         cc:38:5a:72:ac:f4:03:69:ed:7f:05:26:8b:0e:7d:34:82:7a:
         87:f1:e9:dd:1f:9e:5d:98:31:7a:5a:fd:72:1a:d5:b6:fa:54:
         d7:ae:29:8a:6d:67:3f:06:22:ad:15:c2:de:24:bb:7b:ad:bc:
         ce:7c:bc:1d:35:98:5a:95:d1:28:80:fb:b8:d1:50:ee:8f:29:
         53:8b:10:70:fc:ae:a4:81:e6:23:9d:1e:fe:90:5e:e9:1a:76:
         25:68:ba:00:20:4f:ef:c3:75:db:5a:55:d0:f8:aa:45:8d:ed:
         f4:38:d5:8f:db:ac:b2:59:54:8a:df:21:c8:c4:b7:8d:f5:71:
         e8:35:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org