Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3234203d3e20323731373234.roa
File:                     3137302e3234352e3130302e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          GLNJU9uCPWkw+8gWl5JRU1YY+O3eeesCYbu6sAjs9WY=
Subject key identifier:   CD:39:6D:03:94:21:61:54:EF:22:EA:F4:D5:E0:75:12:3E:A0:B8:E3
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       3D6F6E1D174FA5884DC4E7C66478415606C42434
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:15 +0000
ROA not before:           Wed 31 Jan 2024 14:26:15 +0000
ROA not after:            Wed 29 Jan 2025 14:31:15 +0000
asID:                     271724
IP address blocks:        170.245.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6f:6e:1d:17:4f:a5:88:4d:c4:e7:c6:64:78:41:56:06:c4:24:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:15 2024 GMT
            Not After : Jan 29 14:31:15 2025 GMT
        Subject: CN=CD396D0394216154EF22EAF4D5E075123EA0B8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:94:dc:7f:ed:b0:28:42:4c:ac:22:57:71:
                    44:20:e2:e9:d4:63:5f:c6:72:ef:ca:33:d4:49:7d:
                    ab:a6:0c:ce:13:4a:ef:b1:fa:cc:34:9f:74:42:ca:
                    2a:ac:24:9b:e6:6a:32:f2:02:c8:51:94:ac:e4:b1:
                    59:c8:bb:50:61:c4:0a:cf:0d:10:96:5a:df:8c:d3:
                    ff:21:43:0e:78:0c:90:96:10:38:d3:93:72:8f:12:
                    43:c7:70:b0:59:72:47:25:3f:3c:fe:33:69:61:b3:
                    03:ae:6e:69:be:42:4c:2c:93:c7:2e:7b:1c:f2:2e:
                    9b:80:4c:0d:e4:96:0e:4f:37:e0:d7:c4:0b:5e:f2:
                    67:a9:fa:f5:6f:ad:cb:9f:e5:f8:87:ed:88:41:59:
                    4d:68:bc:f1:09:b4:cc:21:46:48:f9:87:83:67:75:
                    16:d6:8a:a3:08:45:7e:01:98:92:4e:b1:9a:5e:5a:
                    dc:a2:bc:1d:47:19:c8:bd:cc:92:18:6d:bb:fd:92:
                    f7:43:a2:4c:1f:b2:9a:38:1c:9d:c5:76:bd:fb:a3:
                    c0:45:37:d2:88:e8:62:0e:e2:b3:a0:1a:c9:b9:01:
                    ab:80:a5:16:07:df:f2:5c:3d:1e:dd:3e:2b:80:31:
                    e8:18:8b:f3:62:c5:90:6f:24:83:39:48:a4:46:9c:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:6D:03:94:21:61:54:EF:22:EA:F4:D5:E0:75:12:3E:A0:B8:E3
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:4a:c8:4a:cb:af:52:98:f7:56:ba:c0:ee:5f:12:12:ea:
         b5:c2:9c:ff:63:4b:d7:fe:f1:d2:d8:45:49:8c:57:1b:99:6f:
         47:22:2c:21:a0:65:2f:64:3d:62:78:a9:f3:b8:ec:9f:3d:c1:
         e2:7c:dd:1f:d4:ff:f2:90:10:25:e9:7f:31:b3:d8:35:01:7a:
         f5:65:35:1e:2a:a3:52:91:10:d8:a8:fa:67:c5:c1:95:d3:d3:
         24:42:94:4a:23:2b:35:11:04:af:c4:e3:9d:fd:ca:9e:ea:9e:
         bf:a4:a2:fd:ad:94:ab:94:b2:74:09:0e:74:1b:9f:75:46:78:
         11:f1:62:20:52:bb:e7:c9:b5:01:29:64:77:81:e9:1f:6b:49:
         4c:09:3f:82:85:a1:73:da:0a:81:ed:f5:50:ce:06:3c:7a:2e:
         0c:cd:0b:32:ee:3b:10:48:43:71:fc:98:b0:7c:1f:d3:27:6e:
         ac:0b:e2:19:55:d4:21:34:1a:7d:11:05:c3:d8:7c:0c:38:3a:
         9f:76:fe:71:fc:3b:4b:99:a6:e1:0b:c5:0e:f0:cb:41:67:bc:
         8a:6e:b0:e9:39:72:5b:03:f7:b0:98:f1:24:0e:24:c1:89:d4:
         a3:d2:1b:3e:ee:56:e4:5b:21:33:09:6b:5a:2b:69:91:59:87:
         f8:39:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org