Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32332d3234203d3e20323633393830.roa
File:                     3137302e3234352e3132302e302f32332d3234203d3e20323633393830.roa (raw, json)
Hash identifier:          BlMdMeH369iCyaLML8M78nOy8ZboFEY8MLtKmM8SBCM=
Subject key identifier:   CC:7B:0F:99:F7:A6:06:DF:D7:1C:F2:FF:99:12:80:E7:6C:41:DB:41
Certificate issuer:       /CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
Certificate serial:       61112A22559CE1172DB43F58793E04A695973767
Authority key identifier: 0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32332d3234203d3e20323633393830.roa
Signing time:             Thu 15 Feb 2024 18:39:31 +0000
ROA not before:           Thu 15 Feb 2024 18:34:31 +0000
ROA not after:            Thu 13 Feb 2025 18:39:31 +0000
asID:                     263980
IP address blocks:        170.245.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:11:2a:22:55:9c:e1:17:2d:b4:3f:58:79:3e:04:a6:95:97:37:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Validity
            Not Before: Feb 15 18:34:31 2024 GMT
            Not After : Feb 13 18:39:31 2025 GMT
        Subject: CN=3082010A0282010100E00B6AC6E9F6754AF5A3705D2109B861002F86C80A2C2FA5E5F7E9629579C12FC29684FF757000CE12394FDE1E1B44AF607C47C3D87B4E1562B34FB6E82E86B4CE7C0CDAC9474D1B1C86415A12D5805FB541679B195C1C083D02B67CC9D6ABC030D26B5E7C4757354081837528D74E6DF5F6AF6DB206ED22ACF8F86C9A1D62380AB2C9DDB35F9AF4D7D0BBCDCF0291BE34C6F7C9DD045311C79D1A67714BCFBEE78DC82B3DDB99F9A9B68E137DDC8C260D3113C4C63170DA6D3F9DD508BD8A4AE7ADA5D2F7363859AC8A2BF92256B5F06835DB0B121D2D304838BBCB7C41D6AA2029DB2992713E0CAC04FD3CAE88705AACD0F19363C37DBE6DFDA7FAA16977F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:6a:c6:e9:f6:75:4a:f5:a3:70:5d:21:09:
                    b8:61:00:2f:86:c8:0a:2c:2f:a5:e5:f7:e9:62:95:
                    79:c1:2f:c2:96:84:ff:75:70:00:ce:12:39:4f:de:
                    1e:1b:44:af:60:7c:47:c3:d8:7b:4e:15:62:b3:4f:
                    b6:e8:2e:86:b4:ce:7c:0c:da:c9:47:4d:1b:1c:86:
                    41:5a:12:d5:80:5f:b5:41:67:9b:19:5c:1c:08:3d:
                    02:b6:7c:c9:d6:ab:c0:30:d2:6b:5e:7c:47:57:35:
                    40:81:83:75:28:d7:4e:6d:f5:f6:af:6d:b2:06:ed:
                    22:ac:f8:f8:6c:9a:1d:62:38:0a:b2:c9:dd:b3:5f:
                    9a:f4:d7:d0:bb:cd:cf:02:91:be:34:c6:f7:c9:dd:
                    04:53:11:c7:9d:1a:67:71:4b:cf:be:e7:8d:c8:2b:
                    3d:db:99:f9:a9:b6:8e:13:7d:dc:8c:26:0d:31:13:
                    c4:c6:31:70:da:6d:3f:9d:d5:08:bd:8a:4a:e7:ad:
                    a5:d2:f7:36:38:59:ac:8a:2b:f9:22:56:b5:f0:68:
                    35:db:0b:12:1d:2d:30:48:38:bb:cb:7c:41:d6:aa:
                    20:29:db:29:92:71:3e:0c:ac:04:fd:3c:ae:88:70:
                    5a:ac:d0:f1:93:63:c3:7d:be:6d:fd:a7:fa:a1:69:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:0F:99:F7:A6:06:DF:D7:1C:F2:FF:99:12:80:E7:6C:41:DB:41
            X509v3 Authority Key Identifier:
                keyid:0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132302e302f32332d3234203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:ae:c3:d7:86:cf:72:2d:34:e5:4f:cb:04:c7:83:b7:47:
         dc:05:cb:88:c5:95:90:d5:66:24:ae:c0:6e:2f:c4:7e:fc:06:
         21:fa:d9:34:8c:21:7f:1f:c3:a9:85:30:67:3a:a6:23:ec:ae:
         5e:15:0d:52:e2:db:35:e1:03:d8:87:9f:5c:5b:cd:14:9a:eb:
         1b:0d:1b:9a:5f:bc:47:23:f4:4a:06:da:46:2f:be:53:fb:fe:
         f2:0b:9b:60:d8:aa:89:ac:e2:08:2b:c7:4d:b4:09:0f:dd:9e:
         93:0e:34:21:ad:69:b0:20:f4:04:68:f9:96:5a:d3:de:7f:e1:
         dd:b1:97:15:49:bd:92:9b:46:d5:0c:9f:69:08:18:77:ff:04:
         ea:49:58:2e:a6:5a:b3:36:26:6b:8f:ae:c7:73:01:33:fe:14:
         eb:36:10:c6:10:ec:ed:bc:01:83:09:f8:ce:39:d3:eb:f6:bd:
         2b:41:2b:af:45:9c:c6:75:b5:49:80:df:86:23:50:6a:f8:cf:
         e8:63:02:22:14:65:83:06:6f:3f:7c:c5:fe:e2:93:94:6a:b4:
         c5:d2:1a:6f:06:00:7d:0f:74:29:ea:b2:d1:2e:1a:3d:1f:b8:
         32:21:5b:d8:20:53:20:e0:68:7f:d0:0e:fb:28:eb:eb:10:ae:
         1c:64:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org