Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33342e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          KlXTq8J9mb1+NO4EuLz593fmtUqiEBBwn5c6rz7BJhI=
Subject key identifier:   30:96:66:43:BF:1C:4E:BC:35:00:79:95:DB:24:F9:DE:C0:2F:C9:2E
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       08A12AA95125D9C2930A07004FA9108FF5AB6103
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:23 +0000
ROA not before:           Wed 10 Apr 2024 00:16:23 +0000
ROA not after:            Wed 09 Apr 2025 00:21:23 +0000
asID:                     264550
IP address blocks:        170.0.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a1:2a:a9:51:25:d9:c2:93:0a:07:00:4f:a9:10:8f:f5:ab:61:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:16:23 2024 GMT
            Not After : Apr  9 00:21:23 2025 GMT
        Subject: CN=30966643BF1C4EBC35007995DB24F9DEC02FC92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:1f:b4:14:10:72:f9:ff:d0:b1:02:25:52:
                    d1:e1:61:60:89:a0:fa:4e:bf:95:7a:d7:ee:bc:37:
                    18:1f:45:bc:d9:0d:de:de:e2:70:3a:71:97:cd:1f:
                    5d:96:59:05:d2:55:d4:37:e2:11:97:70:d0:fb:8e:
                    52:bd:2a:f9:ba:dd:42:d9:a5:13:8c:f0:59:a4:8b:
                    03:e3:55:ce:c6:6c:c9:c8:53:43:85:16:93:ac:c2:
                    b0:41:d9:fb:46:a6:5c:a7:dc:dc:1e:e5:cb:18:f6:
                    81:01:10:d1:19:85:54:de:88:49:63:29:19:27:24:
                    e8:47:75:61:c1:10:ce:e1:a1:7c:68:b0:29:36:9b:
                    37:3f:f5:0d:e2:a5:a6:b9:8b:d7:02:2b:d1:7e:5f:
                    ef:5e:a3:d3:6c:13:21:ed:4b:ea:ac:04:65:4b:16:
                    e6:66:e4:1c:b2:07:bc:c6:38:46:a2:1e:b9:b0:92:
                    af:cb:ea:b6:c9:5b:ba:c6:2e:09:8e:0a:00:b4:e4:
                    d6:57:7c:fa:80:aa:70:62:6d:21:d3:39:df:98:7a:
                    d5:9d:11:b9:a3:c4:4b:44:48:44:90:d8:b1:33:da:
                    bb:57:18:1a:ae:51:59:20:b2:eb:9a:bc:7f:45:e8:
                    96:a8:82:0f:0f:83:cb:5c:dc:e7:da:15:d9:74:05:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:66:43:BF:1C:4E:BC:35:00:79:95:DB:24:F9:DE:C0:2F:C9:2E
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:e4:f4:e7:83:78:66:10:31:92:a5:f0:24:85:45:d6:3b:
         79:88:eb:99:76:06:36:f6:f2:67:3e:af:71:c9:c3:69:90:b1:
         6c:2d:d5:e9:71:96:67:39:6a:13:33:07:51:4f:d9:54:7e:f2:
         46:2f:82:88:b1:20:68:b4:08:4a:d7:5d:cf:75:72:08:19:11:
         5a:f7:5d:1c:4b:bb:ec:7d:2f:d9:c1:3d:f6:46:95:12:7f:0e:
         83:95:9c:3a:7c:b0:42:e8:ab:78:0b:c7:30:26:85:4e:bc:db:
         12:74:5d:66:5d:64:20:6d:1c:fa:3e:90:46:f8:5c:0d:2d:45:
         5a:74:b9:7d:fc:a1:a1:34:10:a9:d5:dc:b8:3e:c9:14:21:5b:
         0f:48:8a:7b:d2:9d:2a:2b:0d:14:95:08:58:b4:4f:dd:ef:ac:
         d9:ad:63:da:84:48:d3:d7:ec:35:9a:e3:3c:8d:3d:f9:ba:0f:
         2c:3a:6b:aa:04:78:c6:1d:e5:e1:00:3c:f2:de:d3:ff:f0:54:
         9f:64:b7:02:e7:75:20:a2:ba:a7:c2:37:66:6f:ef:41:4c:fe:
         ba:15:64:78:86:ba:ce:a6:d4:40:45:3f:39:26:a9:9d:1d:ce:
         b0:38:88:51:c3:11:ca:e9:b0:c3:22:ff:ba:46:d0:13:5c:3b:
         b6:e6:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org