Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa
File:                     3137302e302e3230342e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          vsK6ferGkvfHrEk1oMFnAJGWHBLlnH/S1nDMesGl2aE=
Subject key identifier:   E0:0C:33:91:13:68:E8:44:8F:48:2D:DE:3C:4E:05:17:AD:46:73:DC
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       02051CFF2CDC739022911606256FAE00FCCA5046
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:14 +0000
ROA not before:           Wed 31 Jan 2024 14:26:14 +0000
ROA not after:            Wed 29 Jan 2025 14:31:14 +0000
asID:                     271724
IP address blocks:        170.0.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:1c:ff:2c:dc:73:90:22:91:16:06:25:6f:ae:00:fc:ca:50:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:14 2024 GMT
            Not After : Jan 29 14:31:14 2025 GMT
        Subject: CN=E00C33911368E8448F482DDE3C4E0517AD4673DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:d1:40:67:6e:d8:60:dc:ee:5c:92:6f:94:
                    fd:37:64:1f:c4:cb:7b:a1:ed:f0:5b:c7:2f:30:1e:
                    1b:04:b3:f2:24:7f:92:46:01:85:c1:23:83:79:07:
                    c9:a8:5b:96:06:bc:8d:48:d8:fa:d0:05:6b:e7:56:
                    b6:6e:f9:cc:f3:01:f7:40:67:6e:18:77:87:cf:88:
                    e8:08:13:a1:a7:82:53:65:89:0a:2c:57:fe:db:60:
                    8f:81:2f:a5:61:27:67:e2:9e:74:ec:2d:5a:26:08:
                    21:25:38:88:88:53:f1:c2:bd:0d:90:d9:b6:c0:a6:
                    20:21:e7:69:1b:c8:20:c8:25:b2:3d:fe:87:72:91:
                    82:b2:d0:c5:ab:02:72:63:8d:a6:e8:27:14:b2:db:
                    a7:c6:3a:35:3f:13:5c:34:15:8d:8d:59:fe:b9:bc:
                    0c:70:92:12:5d:27:14:c1:ea:f8:0f:5a:12:51:a5:
                    36:e5:20:01:b4:cc:54:84:eb:35:96:be:29:15:22:
                    a9:78:2c:2a:da:b0:90:68:87:df:03:4d:7b:4c:84:
                    71:cf:55:a1:c6:31:ff:f4:61:3f:6c:4f:60:8e:9c:
                    af:54:eb:0c:db:c8:18:82:9e:03:58:b5:09:2a:e2:
                    99:5a:31:77:ab:34:00:db:41:c1:01:bd:e2:5a:98:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0C:33:91:13:68:E8:44:8F:48:2D:DE:3C:4E:05:17:AD:46:73:DC
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:b5:b2:42:f8:cb:4e:fb:59:2b:56:74:8a:47:7b:c8:f9:
         df:2d:de:56:6e:02:63:ad:4b:d9:44:56:32:64:6b:2b:01:94:
         92:14:99:92:8e:d7:f8:6c:32:e4:6d:44:6a:a5:3c:3a:7f:ff:
         87:59:5a:b7:b5:bd:4a:15:c6:6e:87:c9:52:b6:3f:87:7b:54:
         0b:ef:23:bb:f7:33:dd:4b:03:49:62:47:a4:b0:01:0e:92:8d:
         e8:a6:4e:3c:e2:54:19:99:d3:4d:39:76:10:d2:56:49:6d:01:
         94:1c:13:f1:47:72:3c:ff:41:ee:fa:70:b6:1d:48:60:c5:35:
         48:f3:26:96:9c:0d:2c:5c:df:f5:84:b6:f4:60:e7:ba:e1:f5:
         64:3c:56:7c:33:40:14:17:10:34:d0:d2:5f:db:5d:57:ab:dd:
         47:c0:bf:8a:4e:82:50:67:e7:2a:6e:e9:2a:23:f5:3e:bd:50:
         48:49:b7:3d:44:bb:9e:77:2d:14:95:95:9e:49:df:bc:d9:11:
         84:c7:95:93:cf:8e:ac:76:03:95:34:f3:91:f8:d3:79:86:f3:
         22:92:e8:f3:97:68:9b:0a:74:68:ab:bb:18:4e:91:dd:a7:18:
         d5:f5:6d:e8:be:58:58:06:71:ea:9f:e1:27:f0:01:e7:33:ed:
         cb:c8:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org