Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          AIO1ktPKKySd4OQmabhLu0RqCgCNzf/YnHz3ahKrFm4=
Subject key identifier:   E4:B7:CD:AD:13:03:D5:1D:E2:31:D0:A1:24:1D:1B:FA:28:7A:B2:34
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       3416EC8003F835317DC8AF3A9D935097D9E370A3
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:21:06 +0000
ROA not before:           Thu 26 Oct 2023 01:16:06 +0000
ROA not after:            Thu 24 Oct 2024 01:21:06 +0000
asID:                     266506
IP address blocks:        170.244.181.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:ec:80:03:f8:35:31:7d:c8:af:3a:9d:93:50:97:d9:e3:70:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:16:06 2023 GMT
            Not After : Oct 24 01:21:06 2024 GMT
        Subject: CN=E4B7CDAD1303D51DE231D0A1241D1BFA287AB234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:b9:15:ff:1e:2b:af:6e:5a:71:3d:bf:ce:
                    61:16:f8:10:77:86:ef:cb:87:e7:cc:f5:7d:53:03:
                    4a:6d:40:c1:e3:f2:16:b2:bc:3f:c3:e5:69:42:26:
                    58:d0:0e:52:5e:09:2e:11:ea:d0:a5:92:12:5b:78:
                    cd:30:b4:23:60:d6:8a:6e:41:a4:40:b2:79:41:f1:
                    a6:03:83:66:11:a2:2f:3d:7f:24:8b:2b:0a:98:64:
                    13:2e:f5:11:ff:5a:2e:55:ae:56:e7:42:13:0a:b8:
                    74:cf:0c:b7:94:45:e2:a0:84:19:d8:70:e6:35:30:
                    19:5e:2a:62:67:a3:aa:99:b7:f1:46:3f:de:9c:84:
                    2e:fd:02:c2:9f:ca:ca:d1:b4:70:0a:80:e3:b5:c2:
                    39:e0:f1:76:bb:62:d3:ae:f7:f4:a4:f9:8b:b5:c4:
                    52:cb:6e:59:ab:78:2b:47:d2:f9:06:84:f5:32:e0:
                    42:07:9d:55:a4:21:cf:02:f2:77:71:af:58:91:18:
                    e2:24:12:b1:a0:85:1e:c1:18:74:e5:2b:52:67:b0:
                    7c:43:dc:82:8d:37:9d:de:bc:80:5b:0b:be:b1:91:
                    c6:de:0c:0c:3c:8b:d5:98:9a:af:0f:59:85:b3:7e:
                    e7:6b:95:de:0c:5e:4e:13:0e:33:d0:1d:31:3c:8d:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:CD:AD:13:03:D5:1D:E2:31:D0:A1:24:1D:1B:FA:28:7A:B2:34
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         97:18:96:96:99:41:ea:d5:42:5f:b8:ab:7d:96:00:3f:9b:6b:
         49:15:98:c4:70:64:59:ac:ff:23:8d:c3:29:92:6b:d1:45:d4:
         4d:51:35:fd:f7:31:29:41:7d:26:f1:8f:e8:bc:28:6e:07:fd:
         d5:5f:d5:79:9e:14:7a:48:17:69:a4:d0:4c:ac:e0:d0:e6:8f:
         1f:33:b4:e7:39:06:fe:43:07:27:74:ae:8f:8b:ca:70:47:15:
         06:ef:49:18:bd:f9:9b:b6:7a:87:7e:42:25:7f:6c:4f:66:f0:
         34:25:e9:3d:70:f1:46:30:21:50:c1:76:b6:3e:85:e0:cd:7f:
         f9:9b:f1:ce:6b:b5:33:01:53:43:f0:f5:9e:9e:9f:42:ca:40:
         22:45:4b:0c:59:ae:36:30:94:93:08:4b:f6:eb:ef:04:07:21:
         e0:fa:97:65:58:a6:3e:17:9c:26:46:fe:24:66:c5:e5:f8:d0:
         e5:25:5a:2a:b6:48:0c:99:8f:2a:50:36:d3:c8:bf:18:82:ae:
         2a:8e:6e:58:16:6e:80:d3:09:bc:e4:63:0d:4b:6a:ea:84:ef:
         a8:77:8a:86:82:e5:95:74:7d:61:a9:07:81:5f:a2:55:b5:30:
         98:8f:3c:cb:31:ab:5e:ac:72:fb:4a:51:40:bd:70:7c:eb:59:
         40:5f:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org