Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          3TCdnaXKhrAoBDUCtpFf6XrAmNlFeKGpzrBemcWHSKc=
Subject key identifier:   4B:B1:0A:74:02:FE:BD:65:21:E3:40:79:BF:25:88:B1:87:36:43:89
Certificate issuer:       /CN=E3A4438513EFDD1A35ADD2988C6AB7B959769B9A
Certificate serial:       CA8A9AC1E290806CBFDEE56BB12BC6B0556B2E
Authority key identifier: E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa
Signing time:             Thu 18 Jan 2024 20:55:02 +0000
ROA not before:           Thu 18 Jan 2024 20:50:02 +0000
ROA not after:            Thu 16 Jan 2025 20:55:02 +0000
asID:                     265078
IP address blocks:        170.233.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:8a:9a:c1:e2:90:80:6c:bf:de:e5:6b:b1:2b:c6:b0:55:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A4438513EFDD1A35ADD2988C6AB7B959769B9A
        Validity
            Not Before: Jan 18 20:50:02 2024 GMT
            Not After : Jan 16 20:55:02 2025 GMT
        Subject: CN=4BB10A7402FEBD6521E34079BF2588B187364389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:ff:21:00:1b:20:e2:72:e7:09:8b:2f:4e:
                    5f:0d:db:56:7d:7e:fd:b3:b7:7d:7f:ed:4c:39:8b:
                    6c:74:c3:cd:64:4b:a7:30:d1:66:bf:1b:52:b3:47:
                    fe:e0:9a:b3:7c:37:68:79:00:f4:99:aa:3e:fc:5e:
                    27:da:29:e3:fb:55:71:15:45:6c:05:ca:06:87:b2:
                    f2:6a:a9:5b:9c:ce:c8:d1:6a:f9:22:ed:e6:04:26:
                    97:56:47:8d:35:50:cb:6e:0b:3b:92:a9:68:f5:67:
                    a5:34:ff:f1:a0:d8:25:73:d6:f0:e7:05:a6:1b:27:
                    c1:12:bc:ac:6f:a3:6d:aa:cc:14:17:f3:22:49:a2:
                    b0:07:4f:81:76:89:39:17:d2:5b:02:30:2c:29:59:
                    8a:08:ec:7a:3c:05:d0:b9:30:32:0d:cb:8a:70:73:
                    ca:5d:19:55:78:20:2f:00:20:a3:38:f2:eb:47:f8:
                    93:a1:8d:c1:8d:cf:5a:80:58:ae:9f:ff:c1:97:b6:
                    18:b5:9c:68:68:9d:a9:7f:07:c6:6b:09:8d:8f:05:
                    dd:c4:b5:c1:1d:03:dd:7d:6a:60:7a:8c:84:b3:dc:
                    4c:4b:90:50:b9:33:01:b1:f5:ea:a7:c0:fa:b2:69:
                    ea:2c:a7:ec:82:48:8d:e6:30:45:c4:f0:ac:bd:a6:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B1:0A:74:02:FE:BD:65:21:E3:40:79:BF:25:88:B1:87:36:43:89
            X509v3 Authority Key Identifier:
                keyid:E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:21:69:6d:9e:de:69:ec:27:f8:35:6a:8d:1d:1d:51:e8:
         a6:c1:01:66:2c:b2:89:46:6a:89:cb:31:c1:f2:07:70:6b:3e:
         9b:44:1b:5d:9e:6c:15:3c:47:6e:63:3f:da:10:88:d0:2e:74:
         4f:81:42:55:d9:a1:b0:f2:38:77:8d:4e:0c:6a:29:f8:34:d1:
         3f:84:32:b7:4e:b9:7c:be:bb:fe:f7:ca:17:f6:80:5c:07:e5:
         48:11:82:94:94:0d:71:24:06:9b:4b:de:ab:b1:fc:ed:a8:54:
         5d:ce:55:06:44:3c:0f:b1:bd:ca:e3:dd:3d:f0:8f:8e:40:1e:
         a3:d7:e5:10:33:7e:a7:f7:e3:a7:63:da:d3:cf:17:e4:2a:92:
         8b:41:20:c7:b2:2e:ac:c6:c4:e0:e6:b7:5f:58:22:36:33:98:
         32:0d:bc:d2:16:de:6a:e0:38:b9:1f:8f:85:29:22:34:c4:08:
         62:c1:c3:f2:45:f2:83:d8:2b:ad:8c:e2:f9:42:0f:a9:10:ac:
         d1:15:3e:8b:7e:f5:43:8b:6e:c4:76:7d:10:50:75:27:7d:55:
         aa:0f:c2:66:77:99:1b:5e:a1:3c:29:bc:33:d7:6c:57:4d:ac:
         8e:e3:9b:0e:10:fe:96:66:6f:88:e6:24:84:48:0e:f7:4c:8c:
         59:fd:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org