Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa
File:                     3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa (raw, json)
Hash identifier:          Vv78IQt9xVTVUxK8zcVenjiDEcrTXXnP4NhePlqTS7w=
Subject key identifier:   B4:0E:A9:E5:7F:04:5E:58:DE:FB:85:23:0B:3B:82:F8:EB:76:AF:EB
Certificate issuer:       /CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
Certificate serial:       6532C005415E52B82265F30F77B5741C1E95529A
Authority key identifier: 67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa
Signing time:             Tue 13 Jun 2023 14:20:02 +0000
ROA not before:           Tue 13 Jun 2023 14:15:02 +0000
ROA not after:            Tue 11 Jun 2024 14:20:02 +0000
asID:                     265085
IP address blocks:        170.233.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:c0:05:41:5e:52:b8:22:65:f3:0f:77:b5:74:1c:1e:95:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Validity
            Not Before: Jun 13 14:15:02 2023 GMT
            Not After : Jun 11 14:20:02 2024 GMT
        Subject: CN=B40EA9E57F045E58DEFB85230B3B82F8EB76AFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:e5:e5:4d:3e:aa:5a:7d:f3:b7:30:20:ca:
                    f4:8b:5e:2b:ef:9a:44:35:83:26:b9:c8:95:68:0a:
                    d0:aa:5d:f0:63:9f:b8:0b:14:22:ec:bc:e8:f6:96:
                    dd:9c:01:b3:75:16:16:2b:e7:bb:76:2e:e5:c0:e5:
                    c9:94:61:d2:99:26:5f:68:5f:6f:7a:8f:37:7a:e7:
                    1c:b7:7c:5b:9c:f6:7d:e9:ce:0a:e3:33:15:fe:3c:
                    c9:45:e2:63:d4:7d:df:57:c9:60:1b:fe:af:54:73:
                    ce:9f:e7:52:ce:c2:59:d6:c2:6b:f6:58:64:51:5e:
                    76:b5:e4:e6:01:df:fb:6d:20:59:52:6b:c2:26:d0:
                    53:fd:31:53:59:2f:62:4f:e9:8f:5a:39:aa:bf:df:
                    54:e1:cd:e6:26:8f:d7:8e:6e:44:c6:b4:66:cf:75:
                    f0:b3:c2:d2:eb:d1:fd:67:62:4e:1e:1f:e6:ec:3b:
                    dc:97:42:76:aa:87:16:c6:ee:20:ac:46:85:8c:1c:
                    67:b4:45:f7:bb:a2:93:f6:17:c7:80:f8:cd:d8:30:
                    0e:d9:76:01:75:81:0b:cb:08:79:66:e8:34:c9:ee:
                    75:e9:de:05:73:ef:1d:29:80:97:e8:8e:d8:4a:9b:
                    a7:9f:00:16:f0:64:1d:0f:47:d1:24:14:68:77:08:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:A9:E5:7F:04:5E:58:DE:FB:85:23:0B:3B:82:F8:EB:76:AF:EB
            X509v3 Authority Key Identifier:
                keyid:67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:b9:49:d6:9e:e4:b2:8c:cb:0a:61:85:60:0d:c6:ec:32:
         f7:bd:e3:ca:da:34:e6:8d:f4:16:1c:33:c4:01:10:02:69:4f:
         c9:b9:94:1f:bb:a6:ef:dd:48:e0:fc:5d:c5:cd:60:eb:91:4d:
         fa:83:b2:ae:46:96:cb:b5:c1:82:e7:d4:65:2d:9d:fa:79:96:
         8e:d0:a0:b9:41:9e:0b:92:93:36:c2:64:e9:66:97:a2:81:49:
         4d:c1:30:6f:79:95:06:89:74:a1:8a:61:00:05:7f:7e:e5:27:
         3f:3a:6c:3f:d0:01:83:0d:05:a5:5a:24:bc:78:b3:9b:4b:24:
         65:8d:00:08:c1:1a:1e:f0:a1:ee:17:0b:98:d3:72:9a:0c:26:
         8d:be:b6:da:e9:02:ac:ce:4b:1c:0f:35:bb:0d:a9:72:ba:e3:
         30:ed:25:89:99:08:ff:f8:99:4a:41:c2:16:f5:3d:40:b6:f6:
         df:d3:99:b2:f6:47:23:82:f6:f9:c2:3c:8f:1f:7f:5e:eb:70:
         d4:63:bb:53:35:28:63:6d:c6:f7:6c:97:d8:18:47:ba:5c:a2:
         a9:20:36:1d:20:c8:7b:90:87:d9:b4:3b:f2:4a:d4:fc:d0:d3:
         e3:4b:d9:42:40:0d:02:3d:02:6b:cb:b1:56:50:3a:e8:bf:15:
         78:22:e3:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZTLABUFeUrgiZfMPd7V0HB6VUpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc1NUQzNTIyRDlBQUEwNUQ4RTYxOUJGOEVBNkRCRTM0
RDEwOEMyNDAeFw0yMzA2MTMxNDE1MDJaFw0yNDA2MTExNDIwMDJaMDMxMTAvBgNV
BAMTKEI0MEVBOUU1N0YwNDVFNThERUZCODUyMzBCM0I4MkY4RUI3NkFGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFuXlTT6qWn3ztzAgyvSLXivv
mkQ1gya5yJVoCtCqXfBjn7gLFCLsvOj2lt2cAbN1FhYr57t2LuXA5cmUYdKZJl9o
X296jzd65xy3fFuc9n3pzgrjMxX+PMlF4mPUfd9XyWAb/q9Uc86f51LOwlnWwmv2
WGRRXna15OYB3/ttIFlSa8Im0FP9MVNZL2JP6Y9aOaq/31ThzeYmj9eObkTGtGbP
dfCzwtLr0f1nYk4eH+bsO9yXQnaqhxbG7iCsRoWMHGe0Rfe7opP2F8eA+M3YMA7Z
dgF1gQvLCHlm6DTJ7nXp3gVz7x0pgJfojthKm6efABbwZB0PR9EkFGh3COTpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtA6p5X8EXlje+4UjCzuC+Ot2r+swHwYDVR0j
BBgwFoAUZ1XTUi2aqgXY5hm/jqbb400QjCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr
QlIvMC82NzU1RDM1MjJEOUFBQTA1RDhFNjE5QkY4RUE2REJFMzREMTA4QzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NTVEMzUyMkQ5QUFBMDVE
OEU2MTlCRjhFQTZEQkUzNEQxMDhDMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKV3NYR3FBcFoyZEE0RlhNUU1NVU5TZENadjlKS21HZkNKY0hYdGV6a0JSLzAv
MzEzNzMwMmUzMjMzMzMyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq6RgwDQYJKoZIhvcNAQELBQADggEBAIqbuUnW
nuSyjMsKYYVgDcbsMve948raNOaN9BYcM8QBEAJpT8m5lB+7pu/dSOD8XcXNYOuR
TfqDsq5Glsu1wYLn1GUtnfp5lo7QoLlBnguSkzbCZOlml6KBSU3BMG95lQaJdKGK
YQAFf37lJz86bD/QAYMNBaVaJLx4s5tLJGWNAAjBGh7woe4XC5jTcpoMJo2+ttrp
AqzOSxwPNbsNqXK64zDtJYmZCP/4mUpBwhb1PUC29t/TmbL2RyOC9vnCPI8ff17r
cNRju1M1KGNtxvdsl9gYR7pcoqkgNh0gyHuQh9m0O/JK1PzQ0+NL2UJADQI9AmvL
sVZQOui/FXgi4zI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org