Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33322e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          Kv4IfgbqOQxjvMsfrd0mCfIprG37mHphhRoHyNd26qA=
Subject key identifier:   3B:7E:DB:EA:67:7F:62:A0:F6:25:F7:62:2A:4B:B6:1F:E4:CD:06:39
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       4C2B6F83EB2B9D5AB070BD538B39C8F91793689F
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:20:11 +0000
ROA not before:           Wed 27 Mar 2024 21:15:11 +0000
ROA not after:            Wed 26 Mar 2025 21:20:11 +0000
asID:                     264550
IP address blocks:        170.0.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2b:6f:83:eb:2b:9d:5a:b0:70:bd:53:8b:39:c8:f9:17:93:68:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:15:11 2024 GMT
            Not After : Mar 26 21:20:11 2025 GMT
        Subject: CN=3B7EDBEA677F62A0F625F7622A4BB61FE4CD0639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:98:7c:8f:27:db:78:0b:57:28:92:c6:cb:
                    a9:c4:cd:29:5b:a6:08:a1:c0:39:45:b1:84:b6:bd:
                    89:f0:40:9f:b3:cd:16:aa:96:31:a3:64:74:26:ad:
                    bb:ff:18:e2:ef:67:0e:50:27:95:a3:96:98:5e:5c:
                    6f:2d:99:ff:b9:20:bf:75:6c:8e:33:1c:06:5c:26:
                    53:e7:90:7f:10:c8:64:bf:67:e1:14:91:de:f2:28:
                    97:cc:ba:bb:11:0c:52:66:00:45:86:05:5e:0e:e7:
                    1d:2b:9f:ff:2a:22:68:fa:c1:b8:b1:33:b6:81:f7:
                    52:6b:83:e8:0b:41:f3:45:10:99:14:f7:76:1d:ba:
                    07:ac:30:bb:b2:4f:c8:fd:24:7f:9f:94:18:65:44:
                    2f:6e:b2:18:db:1a:b2:80:c3:57:67:eb:69:41:97:
                    88:f6:7e:bc:19:90:95:ba:db:59:8b:59:86:84:53:
                    e1:3e:3d:20:d0:eb:58:a4:dd:73:28:62:73:c3:59:
                    3f:2f:75:cb:0d:3f:10:52:a2:27:0f:fc:ab:1f:47:
                    37:b5:2b:bd:b1:b7:1a:1d:01:65:07:88:4d:60:50:
                    9b:c4:97:f8:97:84:55:b4:56:af:25:83:bd:98:91:
                    7f:1c:a5:2f:31:6b:72:7c:ec:4e:30:c8:00:c3:70:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:DB:EA:67:7F:62:A0:F6:25:F7:62:2A:4B:B6:1F:E4:CD:06:39
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:12:8b:bf:1d:62:85:83:60:ff:11:43:17:bb:b2:e6:e2:8e:
         6d:16:62:79:87:90:58:34:37:84:08:b3:aa:5b:28:e5:46:b2:
         34:4d:bd:14:81:df:d1:d5:cd:4f:bf:f2:67:9f:53:a1:ad:1e:
         eb:e8:f8:7a:36:9f:69:fb:36:b8:c7:55:67:18:cf:7b:c1:e4:
         b8:d4:13:17:aa:63:26:f0:0a:ee:34:29:d8:7a:0c:32:05:88:
         74:2d:0f:c5:46:5e:c6:4f:da:99:45:2e:5f:b4:ec:6a:4b:8f:
         85:0e:21:81:0c:95:9b:62:2f:70:00:26:a9:0a:5c:6f:86:5a:
         fb:75:03:11:85:3e:60:6f:6d:a5:f5:15:51:ef:78:c2:7e:43:
         26:d3:d4:fa:cc:59:2a:ca:5d:cf:bd:4f:ba:19:18:f5:87:22:
         27:b4:4e:b7:ac:05:59:72:01:fc:d2:e0:63:6b:6b:08:39:f7:
         a0:bc:2c:cc:6e:29:c7:88:b9:50:40:8c:88:3c:98:ef:ce:7d:
         03:29:71:46:7c:0a:48:7d:0d:68:be:96:31:a6:97:f5:9f:25:
         15:d2:cb:25:16:78:91:cd:47:58:d6:4c:18:34:34:73:1c:a9:
         18:75:12:69:f9:c1:3f:f2:9d:50:2c:24:4e:e4:4d:4a:5b:4b:
         22:60:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org