Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          O/3uQc8d0h9Js0+4cPLw1AIiXyEwZSpaCn4DqeK7uJM=
Subject key identifier:   90:F9:40:27:5E:F3:39:BD:46:C0:48:04:8B:8D:64:F1:71:26:CA:C5
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       2E5AA49F6181086AAAC07A977295344432E897A8
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:44 +0000
ROA not before:           Thu 04 Apr 2024 05:58:44 +0000
ROA not after:            Thu 03 Apr 2025 06:03:44 +0000
asID:                     265010
IP address blocks:        170.84.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5a:a4:9f:61:81:08:6a:aa:c0:7a:97:72:95:34:44:32:e8:97:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:44 2024 GMT
            Not After : Apr  3 06:03:44 2025 GMT
        Subject: CN=90F940275EF339BD46C048048B8D64F17126CAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:12:b3:9c:b9:57:ef:5b:15:21:49:3a:fa:
                    18:ae:69:55:21:b8:df:7f:91:39:04:ea:e7:ff:81:
                    97:28:66:e1:f3:ed:bf:e6:83:ef:be:b5:3b:37:9b:
                    31:0b:dd:08:93:6f:26:27:85:10:5c:5d:fb:82:87:
                    2a:ac:99:37:93:78:e4:28:57:15:b7:86:b5:95:bd:
                    fb:04:18:67:2c:4f:1d:9e:31:45:8d:e9:c4:8c:14:
                    34:e2:91:92:58:6a:40:47:70:8f:8a:ad:3b:bc:49:
                    21:a7:e8:d7:f6:d3:71:a4:a3:59:fd:a5:97:72:80:
                    76:bb:c0:f9:0f:8d:06:e0:d8:18:06:1b:da:1c:b3:
                    4f:94:1f:5f:e6:51:ed:ba:e1:1e:e1:00:1c:a6:8c:
                    fd:d3:2b:8b:e5:de:b9:07:e5:26:2d:82:6c:17:0d:
                    49:25:35:f8:66:cc:6d:6d:0e:76:cc:f1:c3:ed:6e:
                    92:84:96:7c:7e:7b:c3:9b:70:75:13:ce:95:16:c1:
                    5d:bf:84:de:1c:aa:b6:d9:b9:ec:19:fa:69:fb:67:
                    64:24:3a:cc:fe:7e:53:57:22:8b:0a:3f:46:0f:b6:
                    8a:15:a7:89:f0:b1:ab:75:31:43:e6:85:b7:c1:b6:
                    df:b1:75:d6:e6:58:d6:2d:1c:78:2c:be:04:70:ae:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:40:27:5E:F3:39:BD:46:C0:48:04:8B:8D:64:F1:71:26:CA:C5
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:21:e5:e0:d9:44:2d:79:a1:f1:45:a9:15:2e:24:85:6e:
         11:ee:38:c5:d9:0b:13:3c:a9:fb:ea:f8:0e:91:04:c1:38:32:
         04:ba:5d:43:32:9a:d5:df:9b:ff:ab:89:75:35:30:98:a7:91:
         f7:2e:3f:a5:50:d7:db:bd:e3:db:99:9d:e5:04:f3:74:58:8e:
         dc:79:ac:6f:00:82:98:02:95:e8:29:cd:89:00:7e:1b:00:25:
         99:b4:b2:d2:7c:53:80:61:63:cd:ae:7f:62:84:cb:f5:60:f3:
         4a:34:58:1b:c2:ec:bd:3c:f3:0e:95:6a:ff:20:44:c7:b3:39:
         c6:d0:8d:58:ad:93:96:fa:79:33:89:9b:aa:cb:44:67:4a:ff:
         d8:61:66:f7:2d:5d:fc:ea:db:79:5d:7c:7d:8a:38:d5:d7:b5:
         43:31:58:4a:b0:64:61:f7:be:1f:6e:70:9f:4e:7f:97:8f:70:
         a6:46:5b:8c:bd:bc:7c:f8:62:5a:ac:bc:df:e7:1d:92:55:e6:
         7a:fe:d0:69:7a:2d:48:93:a3:9c:c3:f4:a6:db:29:3a:ca:7d:
         9b:a9:54:10:e9:5c:16:5a:33:77:65:6e:5e:47:e3:df:70:83:
         e3:4d:e7:2e:0e:99:8e:e0:eb:43:8c:29:be:3a:fa:a7:ae:3b:
         e8:f3:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org