Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          s4mLENe+QxUSMSCO10Cfi33u4QUwo8JG5R/IS6cHft4=
Subject key identifier:   11:8A:D6:8E:CB:44:CD:04:E4:14:9F:73:C5:C4:54:C7:FF:9C:ED:72
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       69B187D00528F31F906ADBA021C2E2A4212BDB24
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 20:00:01 +0000
ROA not before:           Wed 27 Mar 2024 19:55:01 +0000
ROA not after:            Wed 26 Mar 2025 20:00:01 +0000
asID:                     266353
IP address blocks:        170.239.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b1:87:d0:05:28:f3:1f:90:6a:db:a0:21:c2:e2:a4:21:2b:db:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 19:55:01 2024 GMT
            Not After : Mar 26 20:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:4d:11:bd:95:6c:58:21:ea:f6:ff:70:e4:
                    2a:9e:3b:44:78:da:4d:06:b9:71:bc:6b:49:bc:86:
                    17:eb:24:ca:e5:c0:fc:d2:b7:ba:1d:5e:df:dd:5e:
                    3c:d1:4c:a1:f7:9e:68:92:21:0c:78:b6:95:50:bd:
                    9d:64:13:79:c1:5c:e1:50:f7:9a:1b:ca:06:69:b9:
                    8d:bb:d3:fb:cf:00:d0:a7:83:6d:1f:87:ad:a2:e0:
                    01:26:90:d0:d4:66:23:f0:60:21:32:c8:f2:f3:29:
                    b4:77:f7:46:e2:7c:3a:2d:03:a0:d3:2b:0c:b4:7c:
                    56:cd:f4:a5:53:6d:2e:2f:b3:b3:37:c3:ca:c2:8f:
                    f3:00:cd:aa:ea:2b:a7:79:24:f9:5e:de:e5:4e:ff:
                    81:74:75:a3:95:7f:14:86:3f:0d:90:95:9a:6a:ec:
                    5c:48:f2:2c:e0:86:83:cf:e0:bc:30:03:6f:a3:fd:
                    1c:35:36:01:bb:11:f8:5a:b0:7e:9f:19:75:16:88:
                    e8:75:be:53:eb:0c:5a:74:40:61:24:5e:b2:43:2b:
                    d3:2e:53:e3:f1:9c:f9:17:3b:d8:a7:91:ac:e3:45:
                    12:07:54:a4:6a:78:55:d7:9d:d1:ad:09:57:e0:74:
                    13:f9:6b:33:1c:64:af:36:ca:0f:ae:cb:99:3e:93:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:D6:8E:CB:44:CD:04:E4:14:9F:73:C5:C4:54:C7:FF:9C:ED:72
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:47:09:f8:32:03:de:0e:f7:85:d3:e2:10:9b:4f:7b:63:
         d3:d6:32:dc:be:2c:52:18:b0:1d:b8:61:4d:d4:05:c4:c9:a0:
         78:c2:6e:3e:d8:bd:2d:cc:85:c5:f9:e1:57:48:45:dd:f5:92:
         3d:d3:50:00:2b:8e:4a:2a:61:68:43:d0:4e:40:74:e9:47:20:
         6b:a3:91:68:ff:64:82:fb:da:2a:d7:69:06:97:d2:82:2e:4e:
         d0:a8:7f:db:39:ab:da:4d:50:b5:7a:5a:09:5b:2d:7f:a9:1f:
         4d:31:fa:8f:ad:4e:0b:8f:65:ff:5f:1a:9b:a9:51:ab:14:44:
         16:4a:16:2e:fe:66:a3:e3:4a:57:7c:52:4d:53:78:24:ba:c1:
         1b:cb:14:b6:6b:d1:74:20:5a:e7:ca:67:11:dc:4f:4f:aa:44:
         27:76:56:4f:f3:b3:eb:23:a8:92:fe:fa:36:34:34:ae:07:1d:
         29:4b:4d:20:51:dc:76:f0:b8:21:ae:76:f7:42:62:f9:d2:cf:
         51:5c:92:c2:cc:88:45:f1:20:23:b4:75:42:d0:89:3f:79:02:
         ac:ed:1d:78:9b:24:a4:92:3b:6a:65:5f:75:e4:1a:20:2c:c6:
         f7:bd:7f:0e:82:2b:65:ed:ae:68:f8:7f:e9:ba:6b:ac:9d:7d:
         f0:d1:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org