Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa
File:                     3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          n9C17U2nJUdy6/j8gTEq1UW865K7rZXf/m5XtQkMqJI=
Subject key identifier:   FE:B4:D2:76:50:0C:D3:67:6F:E7:41:8C:B8:F7:3B:84:55:30:5B:54
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       01108DF20CE5D24DEF5A1715730BC924B35E87FF
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 20 Feb 2024 13:43:44 +0000
ROA not before:           Tue 20 Feb 2024 13:38:44 +0000
ROA not after:            Tue 18 Feb 2025 13:43:44 +0000
asID:                     61587
IP address blocks:        170.254.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:8d:f2:0c:e5:d2:4d:ef:5a:17:15:73:0b:c9:24:b3:5e:87:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Feb 20 13:38:44 2024 GMT
            Not After : Feb 18 13:43:44 2025 GMT
        Subject: CN=FEB4D276500CD3676FE7418CB8F73B8455305B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:ea:d0:8d:9f:60:0a:8b:cc:c2:72:0c:f9:
                    40:0a:6b:28:f1:ac:3b:33:72:14:8c:c6:bd:60:54:
                    e7:25:f4:8b:55:5e:d1:89:db:df:73:98:bb:bf:03:
                    89:5c:0f:9c:6d:33:c2:10:5c:be:dd:9e:b7:1b:ae:
                    e6:c4:44:b4:4b:97:a9:a8:76:2a:29:55:2a:64:7b:
                    24:23:de:57:df:69:65:80:4a:02:d9:69:51:da:f4:
                    cd:a7:41:cd:d1:17:b8:57:62:29:76:22:bd:ff:d4:
                    b1:fe:1c:c0:c2:3b:90:f5:fc:87:c3:5f:a5:0e:f5:
                    3e:88:6c:8a:75:15:c6:f4:1b:f9:d4:de:67:0e:8e:
                    5a:9e:47:75:a5:fa:02:7a:33:7c:5f:a9:16:63:1d:
                    41:9f:10:ef:ec:97:1a:a9:5f:0a:37:ea:15:d6:14:
                    36:a6:eb:5e:cf:ca:c0:a4:0b:45:3b:c6:16:38:88:
                    ed:71:11:4e:b7:f2:1c:3d:93:3e:c7:f7:d5:e0:b6:
                    1f:e2:10:74:34:01:00:1d:bf:cd:3d:22:0a:dc:60:
                    3a:0a:0c:31:9d:50:12:c3:de:0a:3f:13:54:1c:08:
                    6d:a1:03:b5:08:5f:bd:ac:54:d8:cf:d1:2e:8a:8f:
                    b2:cd:a3:81:39:b2:e4:6d:76:cd:ce:bf:30:f5:4f:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:D2:76:50:0C:D3:67:6F:E7:41:8C:B8:F7:3B:84:55:30:5B:54
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:92:9c:84:1d:86:0c:6c:b4:82:f0:90:6c:ff:be:cd:9e:bb:
         ba:11:59:4f:11:3c:c0:28:de:4b:19:15:d1:74:23:ba:c4:c1:
         5e:c3:bc:dc:f2:21:c0:a5:8f:04:7c:78:34:3a:72:9a:ed:61:
         0e:30:2a:df:94:de:d4:52:ee:ad:5f:f1:1d:1e:b6:b3:99:ce:
         1d:f8:74:1e:9e:d9:e0:11:8a:87:8f:8b:3a:14:31:a5:2c:a4:
         a1:e6:19:71:5d:8e:73:01:23:bc:19:fa:55:73:93:d0:3c:d8:
         69:5b:d9:9d:05:d5:a9:c2:3e:45:74:c5:97:93:59:4a:21:e4:
         d3:b5:9b:66:e0:6a:33:43:5e:d8:88:0a:c0:fb:b4:8b:61:45:
         73:7e:35:8f:a6:87:5c:3d:41:96:1d:33:df:dd:f1:bd:6d:4a:
         53:f6:bf:d2:b3:2d:b4:87:88:64:17:eb:c4:06:86:22:ce:f1:
         e9:d1:57:b3:5a:7b:b4:ca:d2:aa:65:4d:4e:61:e7:97:94:7c:
         ef:c7:d4:e3:89:6c:10:74:51:d7:08:44:63:f3:08:bb:e6:6f:
         dd:d7:bd:ce:8b:42:9c:ec:40:e0:5c:b0:ac:a2:bc:04:b9:e8:
         cf:aa:76:bb:62:27:04:0d:16:c1:bd:58:0d:fa:d0:af:ce:07:
         4b:c1:cd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org