Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232312e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          c1hH1F0jygyg6E9zuLzQzT2KIMLYla5OuxGIzqtl+1w=
Subject key identifier:   CD:CB:0F:37:33:3B:F9:2F:49:5D:9C:E7:91:80:42:01:B6:BD:3B:5C
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       49AD8E06F9306BF3D18CE9A191BBA5FAB5F0334F
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:32 +0000
ROA not before:           Mon 11 Dec 2023 14:00:32 +0000
ROA not after:            Mon 09 Dec 2024 14:05:32 +0000
asID:                     264137
IP address blocks:        170.0.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ad:8e:06:f9:30:6b:f3:d1:8c:e9:a1:91:bb:a5:fa:b5:f0:33:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:32 2023 GMT
            Not After : Dec  9 14:05:32 2024 GMT
        Subject: CN=CDCB0F37333BF92F495D9CE791804201B6BD3B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:a7:95:ad:7e:09:f4:78:32:2c:ed:27:ff:
                    07:01:0e:92:26:6c:34:10:ed:30:c7:cf:5b:88:48:
                    2e:33:22:c0:8a:8b:43:18:10:eb:3b:b1:2b:8f:1e:
                    af:ce:42:72:fe:33:00:ea:b7:01:cc:55:a9:e5:6b:
                    4f:39:49:d4:21:14:ed:34:09:5c:45:f6:d9:2d:2f:
                    ab:bb:76:a6:d1:ed:c5:c0:92:f7:55:cd:35:48:47:
                    64:29:68:2d:ba:64:15:b4:50:1c:0e:0b:9c:0e:b3:
                    7d:41:2b:f1:23:f1:90:6c:33:64:85:1b:88:82:63:
                    e2:af:5b:32:74:c1:96:f1:19:23:fc:2a:10:68:42:
                    07:0e:76:1f:72:9b:ff:4c:d6:83:42:91:ad:a0:da:
                    9e:13:be:98:a4:0b:08:f7:7a:76:fc:9e:71:a1:cc:
                    ea:17:b7:d9:81:b4:05:ff:06:2b:41:a0:ea:54:9d:
                    dc:d2:9f:d7:25:94:25:a3:02:a6:8b:34:e5:f4:70:
                    b7:48:ab:28:8b:43:73:48:dd:58:f1:f6:a2:79:c0:
                    c9:b5:c6:73:c1:10:2a:6a:d1:47:12:50:90:a5:2f:
                    5d:76:0f:ee:14:24:20:72:bb:be:a3:21:b7:e4:5c:
                    f8:38:4a:14:40:0d:99:3d:f6:19:3e:8a:c2:00:51:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:0F:37:33:3B:F9:2F:49:5D:9C:E7:91:80:42:01:B6:BD:3B:5C
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:df:8d:9d:af:46:0c:5d:4e:7c:b7:e1:96:59:a6:be:bb:42:
         b6:af:4a:f4:83:fa:c4:22:d9:0d:05:1d:09:84:1f:0c:2f:24:
         3b:d2:de:47:61:b3:7a:4a:c6:45:82:58:72:5d:b6:8c:9f:3e:
         59:dd:3c:4e:80:c2:65:ca:6a:aa:70:08:54:9d:08:21:5f:cc:
         9d:97:e3:c5:45:c0:a3:05:6a:fc:03:b4:3d:ec:6a:e9:14:f8:
         8e:62:47:84:28:cb:bd:bf:d2:24:60:42:5b:38:aa:98:4e:24:
         98:7b:19:d0:15:2e:7c:98:4c:1c:f1:5e:50:2a:34:cf:41:e9:
         48:e0:a6:0a:58:75:2e:23:74:bd:84:48:fc:87:62:0a:c7:56:
         b5:9e:77:9d:e8:7a:a6:06:10:7e:9f:08:a3:5c:38:35:cf:6e:
         5a:7b:4d:10:8c:ad:6c:ea:e5:a1:88:ac:0e:ab:bd:2b:0f:a3:
         5a:43:d2:28:60:74:27:44:f3:18:70:d2:16:eb:7f:02:6e:e0:
         1d:4c:f3:13:0b:c6:91:e6:2d:6e:30:2e:1a:7d:e0:41:f7:00:
         2b:7d:98:90:a9:4e:07:49:f7:a3:9e:90:64:8e:0e:41:e4:97:
         cc:bd:89:8b:cc:5c:21:78:1c:34:a7:e2:33:68:03:47:2f:80:
         1e:b3:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org