Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa
File:                     3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa (raw, json)
Hash identifier:          QFM0GL3sNsF0o6lJfkWBSvq2Y2O6/fUtdJYGaNpFfaI=
Subject key identifier:   70:FC:DA:E0:0D:BC:7F:FC:9C:E2:35:5E:A8:76:60:DC:20:72:1A:FE
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       19D3E5915F191479F57030318813F6C123159B38
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa
Signing time:             Mon 23 Oct 2023 21:45:12 +0000
ROA not before:           Mon 23 Oct 2023 21:40:12 +0000
ROA not after:            Mon 21 Oct 2024 21:45:12 +0000
asID:                     266506
IP address blocks:        170.244.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d3:e5:91:5f:19:14:79:f5:70:30:31:88:13:f6:c1:23:15:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 23 21:40:12 2023 GMT
            Not After : Oct 21 21:45:12 2024 GMT
        Subject: CN=70FCDAE00DBC7FFC9CE2355EA87660DC20721AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:8d:2c:35:67:d8:51:3a:fb:4d:78:26:39:
                    ef:ac:85:b6:05:d2:36:31:d6:12:92:de:45:42:15:
                    57:2a:2f:d3:0b:c8:96:97:c7:03:b0:7a:1a:21:d1:
                    0b:5c:2e:1b:1b:0d:88:37:ff:99:78:7c:49:a9:32:
                    d9:6b:a1:f6:1f:63:b5:53:a8:cd:65:a3:01:77:8f:
                    2a:ca:32:7b:1c:18:a4:fa:c5:69:2d:15:46:21:2e:
                    99:f4:a9:47:04:80:9a:ae:b0:31:aa:07:e8:38:8e:
                    0c:d1:07:17:fe:4f:3d:79:77:a9:24:ba:90:fd:2e:
                    07:76:9b:cf:8e:af:ab:8c:0d:c2:37:c6:a1:59:6d:
                    87:45:a4:cc:06:86:92:d3:ac:c7:25:b9:be:72:77:
                    6e:b5:8f:74:cc:b5:0c:0b:93:bf:ef:fc:23:da:8f:
                    5b:48:0f:a6:b5:b3:5e:78:bf:68:c2:96:bc:47:12:
                    17:c6:0f:d4:2e:12:59:05:8b:37:bc:18:61:26:47:
                    ef:f8:ae:a8:72:a4:f7:ea:e2:4b:99:a0:ea:b4:a9:
                    61:99:e2:da:fb:00:46:41:eb:66:45:2e:3d:34:e9:
                    5b:9e:5e:8b:f4:82:86:6b:87:35:c3:a2:b7:30:5d:
                    6a:59:b3:c0:3f:54:ca:05:6d:19:35:db:26:d2:49:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:DA:E0:0D:BC:7F:FC:9C:E2:35:5E:A8:76:60:DC:20:72:1A:FE
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:bc:cb:48:3d:76:fa:e3:0e:ed:d1:e7:5b:7c:be:b0:1f:
         76:88:90:5c:cd:67:f1:f3:c3:e8:04:30:dc:53:7c:26:3d:26:
         d7:65:bc:d6:39:7f:ea:5b:8f:bc:51:bc:02:c5:cd:89:72:ce:
         7f:91:8b:98:4e:da:5b:5b:3e:a0:6c:62:e9:68:2d:df:a8:a4:
         c6:b9:09:af:76:a4:a5:04:9b:93:16:26:b5:e9:1f:7f:8f:82:
         c3:6a:43:a9:d9:f9:44:95:4c:51:4c:e6:8b:8c:8f:d5:f0:69:
         65:42:13:77:39:ad:b1:61:f3:70:90:15:54:1e:3d:02:f7:cc:
         4e:57:6c:00:e1:02:fc:94:d9:52:4b:50:45:a1:fa:5d:2d:73:
         14:b9:20:22:5e:d9:09:86:8d:32:e9:c6:40:51:fa:b1:32:e1:
         12:e1:82:89:34:c7:60:57:36:f5:56:6a:68:d4:d3:52:1c:0c:
         de:0b:00:d2:52:cf:f4:ef:b7:2d:16:5c:0d:04:b5:5f:e3:4d:
         70:b3:50:db:08:67:6f:9b:f5:f4:7d:8a:7b:20:d0:99:a3:ae:
         c1:6e:21:23:1b:e6:3d:07:12:2c:c4:a5:8a:34:37:5c:8a:82:
         70:15:5f:b4:95:a1:c6:5e:ac:f2:2a:05:fe:3b:67:c1:1d:29:
         66:94:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org