Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31392e302f32342d3234203d3e20323636343337.roa
File:                     3137302e38322e31392e302f32342d3234203d3e20323636343337.roa (raw, json)
Hash identifier:          aa/XVao3TlVl1z9GMEZh1gnxOjGjl3ShDMX1xLlD9Ks=
Subject key identifier:   4E:D0:2E:59:92:61:56:C4:43:3D:45:7B:9F:A8:34:F1:49:AC:94:5A
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       52123AAD57E75031C2FB214710EED758FAA85502
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31392e302f32342d3234203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:40 +0000
ROA not before:           Mon 29 Jan 2024 15:01:40 +0000
ROA not after:            Mon 27 Jan 2025 15:06:40 +0000
asID:                     266437
IP address blocks:        170.82.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:3a:ad:57:e7:50:31:c2:fb:21:47:10:ee:d7:58:fa:a8:55:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:40 2024 GMT
            Not After : Jan 27 15:06:40 2025 GMT
        Subject: CN=4ED02E59926156C4433D457B9FA834F149AC945A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:de:6b:96:e9:e5:85:1a:90:40:c9:b1:91:
                    24:1c:d5:e2:50:a6:57:9e:0a:3b:aa:d5:60:fc:a4:
                    08:67:c7:fa:cd:3c:55:d0:4b:24:73:5f:3b:6d:50:
                    66:2d:24:47:32:6c:9c:ab:ac:38:96:46:67:55:85:
                    f7:9c:a2:bf:44:b9:e8:14:52:5b:94:33:ca:7a:ac:
                    fc:a3:45:17:a1:b4:cc:6f:59:28:8b:e4:00:48:fe:
                    b2:20:6a:68:6e:5b:12:37:e3:32:6f:dc:5e:06:a0:
                    6c:04:07:7c:58:a5:c2:54:66:aa:86:eb:8b:3e:5b:
                    21:ac:b4:6a:ea:ea:3b:45:a3:9b:50:7a:4b:2e:3c:
                    e3:f1:54:c3:4e:bf:76:d7:76:d5:e6:6b:16:5c:78:
                    6c:9c:be:e9:ff:1f:a7:3a:1b:03:d7:6d:bf:47:85:
                    2d:b8:b4:7b:75:b1:7f:78:a5:31:42:3b:11:22:e1:
                    d6:20:42:10:7d:e1:73:b4:71:26:ba:06:96:04:98:
                    df:3a:a9:09:ac:d6:ee:e1:24:27:e9:cd:d0:96:6f:
                    51:45:49:29:fe:7d:5a:4e:03:ec:90:f3:13:f8:81:
                    c2:da:0b:30:4a:c3:d9:45:e4:c4:09:56:11:4e:b4:
                    37:d5:fe:89:48:eb:f7:55:1e:b2:06:cf:c0:76:cf:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:2E:59:92:61:56:C4:43:3D:45:7B:9F:A8:34:F1:49:AC:94:5A
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31392e302f32342d3234203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:0b:f6:94:76:3e:e9:92:0a:65:ba:8a:23:9c:dc:19:11:2b:
         74:99:e5:30:c4:86:f2:5e:fa:59:ad:de:a3:c6:d7:4b:5b:f8:
         7c:c4:3b:65:fc:7f:29:6f:97:4c:0b:e6:d0:ec:cf:08:dd:29:
         5e:14:cd:ea:f1:ca:62:c4:c5:45:72:3b:f9:cc:11:76:29:c8:
         24:84:4f:63:bb:1b:62:50:cc:9d:0f:01:00:9d:82:bf:a2:3f:
         fc:fb:44:f2:55:28:49:93:6c:a2:9f:4f:10:6d:d6:4e:51:92:
         e3:d9:3b:c6:ed:04:ab:3d:49:55:de:02:56:1a:c5:d6:66:53:
         e8:21:46:c6:02:92:bb:76:3a:00:65:5e:83:0c:37:86:2d:46:
         c7:57:7e:25:69:d2:70:0d:99:1e:df:57:f9:01:d1:c2:93:61:
         49:ef:4b:54:14:6d:22:b0:d1:48:ea:77:d7:f0:a9:79:c2:91:
         69:d9:18:07:74:9f:44:c7:3e:5d:09:67:72:ee:d8:fe:1b:22:
         97:60:54:21:de:ae:8f:8a:00:9e:30:d4:3f:6b:15:df:fc:e4:
         47:b0:2f:05:57:c4:21:7a:9c:ee:b6:b2:6b:2c:64:62:fb:0e:
         9a:5e:f6:a3:0f:76:1b:6b:38:cf:88:1f:79:d0:fa:c6:2c:77:
         d2:58:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org