Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133392e302f32342d3234203d3e203631353837.roa
File:                     3137302e3235342e3133392e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          cVx/tuIJUtHd9hqKzBmBW2MoFpqrmlgJIsZTI2zJL3Q=
Subject key identifier:   93:10:04:B4:D1:4D:26:A2:FC:84:D6:5A:79:11:26:68:BC:08:3C:80
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       7B1590E3EFE1581CDF31827F5F052BBE1BD1DEAE
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133392e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 20 Feb 2024 13:43:45 +0000
ROA not before:           Tue 20 Feb 2024 13:38:45 +0000
ROA not after:            Tue 18 Feb 2025 13:43:45 +0000
asID:                     61587
IP address blocks:        170.254.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:90:e3:ef:e1:58:1c:df:31:82:7f:5f:05:2b:be:1b:d1:de:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Feb 20 13:38:45 2024 GMT
            Not After : Feb 18 13:43:45 2025 GMT
        Subject: CN=931004B4D14D26A2FC84D65A79112668BC083C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:23:22:35:e4:b6:61:24:5b:85:78:f6:3c:
                    c1:bb:66:4d:7f:cc:9c:fb:90:96:bc:fa:24:d9:3e:
                    c7:6f:c8:1a:56:63:18:41:a7:9b:90:a4:46:6c:cd:
                    83:ed:e8:1e:62:69:06:65:f5:b3:68:47:99:b2:78:
                    6a:5d:98:8d:a2:38:13:f3:30:35:77:74:d7:53:d8:
                    26:49:55:8f:f9:6c:90:8d:9c:67:c0:cf:bf:cc:11:
                    57:20:f7:79:37:42:0e:6d:20:24:df:df:66:a4:55:
                    17:40:86:2a:c7:43:e5:c9:fb:0d:dc:fc:6a:09:50:
                    6f:f7:41:e4:4b:8b:cc:6f:a1:16:46:ee:09:55:e3:
                    a7:97:34:97:ad:bd:34:c0:0e:74:ec:87:e5:f8:f2:
                    7b:82:14:18:00:29:88:fa:9e:17:f6:b0:66:82:f1:
                    13:24:8c:6b:4e:85:39:54:02:fa:8b:f2:c6:f2:5e:
                    e5:59:d5:44:34:16:4f:31:a3:db:f0:9a:d1:a8:d4:
                    10:c8:41:6b:e5:91:46:b3:d8:18:1a:5a:9a:c0:21:
                    ab:cb:56:6f:90:1e:21:19:51:4b:de:b6:c5:aa:d0:
                    af:47:0b:92:cb:97:55:c4:c5:40:eb:bc:6d:91:da:
                    dd:7a:95:7b:d1:6f:a8:8d:1c:f5:15:aa:0c:a6:58:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:04:B4:D1:4D:26:A2:FC:84:D6:5A:79:11:26:68:BC:08:3C:80
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133392e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:44:6d:56:3d:87:ac:ff:c0:51:1b:03:9f:86:be:6a:66:09:
         a8:ae:47:32:55:05:b4:ed:6b:75:47:ae:d6:ae:ff:78:3d:37:
         db:7b:94:6e:ce:cf:f4:14:85:a9:11:bd:ca:34:41:b4:f9:7e:
         08:e6:8b:cd:4d:43:73:fc:ed:e1:78:e6:c3:d9:38:7e:5d:4c:
         7b:51:12:8c:72:ac:02:7d:d0:d8:26:3a:c9:18:10:de:8f:fb:
         b9:5c:85:15:b8:fc:99:f6:75:ba:66:61:d7:8e:44:b2:ca:c0:
         9d:31:4e:e1:59:3d:a3:2f:15:3c:37:9b:f6:db:ca:54:ea:e2:
         19:9c:c7:fe:a7:eb:5c:7b:ed:ff:68:6a:04:81:8f:27:df:a4:
         0c:04:bf:66:61:91:d6:37:f2:cc:b6:d6:6a:9d:62:22:e6:8e:
         35:95:f5:0c:54:7b:37:74:00:73:0c:a3:09:1b:9c:89:9f:ae:
         88:99:49:e5:89:00:6c:67:da:2d:59:9b:ab:04:cd:40:78:9e:
         d1:97:a4:7b:95:9f:44:70:13:64:93:c6:5e:61:86:40:b0:eb:
         7f:c0:d0:3f:3d:ac:23:0a:b1:69:c2:14:c2:bf:8e:5b:1e:33:
         36:83:1e:c0:9d:0a:19:17:56:79:ef:27:41:a8:03:77:e1:bb:
         2d:b1:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org