Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa
File:                     3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa (raw, json)
Hash identifier:          ygB3j71cUusnUfk89zMss4l1TaeuP88KQcQSOtIJ+8A=
Subject key identifier:   F6:71:69:2E:34:4F:AF:C0:02:FD:9E:36:41:76:6D:D1:43:64:21:9D
Certificate issuer:       /CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
Certificate serial:       70D7621FECB0C362604422D294301E3F3789C741
Authority key identifier: 0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa
Signing time:             Thu 29 Jun 2023 17:15:19 +0000
ROA not before:           Thu 29 Jun 2023 17:10:19 +0000
ROA not after:            Thu 27 Jun 2024 17:15:19 +0000
asID:                     270876
IP address blocks:        138.94.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:62:1f:ec:b0:c3:62:60:44:22:d2:94:30:1e:3f:37:89:c7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
        Validity
            Not Before: Jun 29 17:10:19 2023 GMT
            Not After : Jun 27 17:15:19 2024 GMT
        Subject: CN=F671692E344FAFC002FD9E3641766DD14364219D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:d5:b3:3a:9a:ec:b1:fa:94:c0:69:5a:9f:
                    3b:18:b4:31:05:d3:54:fa:77:3b:30:42:c2:2f:0a:
                    ad:e1:b9:e5:b1:20:bb:6b:37:c3:f4:47:99:0d:76:
                    88:79:17:64:c3:7e:84:57:38:bc:03:82:ac:59:39:
                    d3:07:87:36:11:11:3e:2d:4f:a9:c1:3e:a5:ba:27:
                    de:c7:23:59:32:bd:4c:25:bc:40:9f:72:7c:ad:97:
                    d0:de:47:36:06:49:4f:0f:d7:24:04:0b:7d:64:a9:
                    ac:6a:9c:a3:7e:10:2e:28:fc:cd:79:d9:b7:f4:10:
                    14:e4:e8:61:62:8d:73:b1:67:9f:75:57:a9:a0:86:
                    39:51:eb:18:44:46:45:db:04:5b:6e:e7:73:09:2e:
                    a2:9a:53:dc:05:63:fd:fb:74:31:8b:b7:42:50:79:
                    0f:1c:96:36:e9:71:48:01:74:da:b3:2d:02:56:ae:
                    c2:f6:97:d7:45:de:14:4a:0d:43:69:61:22:b2:64:
                    a6:c9:46:93:14:ba:87:1c:40:16:8f:4f:21:96:7e:
                    e8:6a:80:8f:22:3a:7a:25:50:28:fd:fe:f1:de:68:
                    75:97:ed:3e:e3:c0:d4:84:02:57:a0:3f:bf:56:10:
                    00:61:4f:b0:fb:92:a8:28:af:73:30:2e:06:0b:24:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:71:69:2E:34:4F:AF:C0:02:FD:9E:36:41:76:6D:D1:43:64:21:9D
            X509v3 Authority Key Identifier:
                keyid:0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137302e302f32342d3234203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:38:7f:28:3d:f1:d0:5b:c8:3f:d3:43:93:b8:1c:c6:a4:75:
         55:25:cb:22:2a:98:8f:9d:16:b6:a7:de:0e:aa:ea:56:77:cc:
         dc:9e:52:c4:8a:19:14:b8:c5:e7:51:fe:7d:7d:d6:66:3d:95:
         a2:ab:3a:cb:97:e0:6d:a0:c4:c5:cf:b2:79:2d:42:bc:01:9d:
         dd:3a:72:43:99:15:fb:c8:b7:69:5e:e1:cc:fd:81:52:d2:79:
         21:d4:a2:85:39:b6:00:44:00:6a:4c:1b:97:92:ad:ba:36:07:
         a0:45:f9:a0:31:25:c4:44:0d:f2:d9:34:1e:43:d1:8e:c3:5d:
         92:94:b5:6d:ce:84:7b:fd:31:06:1f:ca:3d:b8:a6:ef:68:09:
         5d:47:c9:2e:22:12:5d:4f:fb:ee:dd:24:15:e0:d3:a1:f2:2a:
         c5:b9:6f:ca:d3:4a:b7:17:83:fe:ff:e8:4c:75:9c:c1:95:99:
         e1:13:b2:5d:30:68:ca:ad:ce:b5:2c:46:2c:f1:c3:dc:9c:ac:
         02:d8:53:5f:32:9f:10:2b:2e:79:f1:90:a9:e3:32:ca:cd:07:
         b9:b8:e6:11:65:e4:2f:4b:a3:1f:7a:0e:df:ea:02:fc:e5:33:
         11:09:57:52:f8:60:07:9a:76:fd:bd:13:dd:14:d2:cb:0d:ad:
         bd:8a:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org