Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          PZb96kL3uk/l2WBvt9xJ81ckVlZFZZhhwnIIVskzZ5Y=
Subject key identifier:   20:DE:9C:D5:EE:30:7C:5E:8D:2E:86:65:09:11:97:36:35:DA:34:31
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       6B6E76FF5E983D4DBB4AD791ADF111026F833391
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:44 +0000
ROA not before:           Thu 04 Apr 2024 05:58:44 +0000
ROA not after:            Thu 03 Apr 2025 06:03:44 +0000
asID:                     265010
IP address blocks:        170.84.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:76:ff:5e:98:3d:4d:bb:4a:d7:91:ad:f1:11:02:6f:83:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:44 2024 GMT
            Not After : Apr  3 06:03:44 2025 GMT
        Subject: CN=20DE9CD5EE307C5E8D2E86650911973635DA3431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:9d:d1:79:de:47:20:bd:68:75:18:e3:80:
                    8d:57:3f:40:07:6a:17:fa:5a:53:6f:5c:fc:fe:19:
                    a9:19:6a:1c:04:ce:f7:af:7b:27:77:05:28:0c:4f:
                    77:2b:f9:5e:8c:e5:0d:af:8d:22:20:db:d7:bd:f8:
                    b3:fa:d5:96:4c:c2:9c:74:2b:59:33:b4:d1:59:d6:
                    ba:69:2a:a5:3b:28:d4:68:ad:aa:e9:78:8d:2d:26:
                    97:03:1e:d2:01:17:a5:79:d5:f4:d9:77:50:c7:50:
                    99:ff:01:d4:ee:76:03:bc:7f:39:b0:d8:b0:7b:2e:
                    0d:32:0e:82:28:4b:4f:da:5f:8f:2f:a2:a6:b0:72:
                    06:b4:b5:dd:4e:77:67:d0:7d:46:76:c3:52:f5:45:
                    5e:76:ad:2e:73:16:2b:6b:02:69:64:97:9a:6b:ac:
                    db:45:27:96:e8:f8:bf:a3:2a:5e:33:a3:bf:6d:b9:
                    42:7c:27:44:95:7b:ab:96:05:46:a7:e9:2a:5c:80:
                    70:3c:88:fe:a5:e4:ce:63:d0:a2:9a:7a:a5:aa:91:
                    39:7f:7e:94:ae:56:0b:ee:06:a6:41:c5:f6:7f:4c:
                    01:bf:60:26:c5:9d:1f:a5:eb:55:81:37:93:91:2b:
                    b0:5a:e9:50:6f:21:9c:db:99:80:37:e5:4f:e0:8f:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:9C:D5:EE:30:7C:5E:8D:2E:86:65:09:11:97:36:35:DA:34:31
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:6d:a4:d1:9b:1e:9e:31:df:98:7f:df:b9:87:cb:3a:7a:
         d3:7c:b3:99:3e:ca:6d:43:08:ee:b7:c9:0d:4c:aa:2e:4d:75:
         04:d6:ee:fb:65:92:5b:07:f8:39:93:75:52:af:c1:f9:a3:62:
         74:c4:2c:c1:51:32:aa:52:23:03:e5:e8:d6:34:10:13:d7:05:
         9d:f5:86:64:e8:08:46:37:02:2c:4a:5b:e4:3b:19:49:32:db:
         f2:5f:54:91:7f:eb:6a:1b:e1:f7:52:14:66:5c:37:1f:da:a3:
         29:08:4a:3d:ca:88:91:dd:8d:fc:24:e4:a4:82:6b:b9:9c:22:
         bc:79:52:16:d6:c5:c1:b4:03:31:71:5e:a1:f0:3a:3e:36:f0:
         3d:39:90:c7:b5:44:f6:c2:2f:88:18:1f:77:8d:2e:a4:02:4f:
         2a:06:d8:14:6a:56:fd:45:59:36:d7:80:75:33:6a:93:82:a6:
         2c:81:1b:60:93:f2:0b:ca:fd:b0:6a:97:41:92:ea:be:2a:8e:
         02:2e:c6:b8:1c:3c:0a:11:4c:f5:68:8a:c5:05:87:f8:e3:57:
         37:3c:b0:f6:14:f4:8e:9d:f7:9a:f0:4b:53:1e:92:91:cc:c5:
         ff:03:fe:f8:1e:46:bf:fc:65:e4:bc:bd:f8:bc:1e:61:63:1a:
         94:23:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org