Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          td8nsEPjsF41eIudIvIskv3/E91y0O7HfsrFlL+7/MU=
Subject key identifier:   CE:E9:C5:05:CE:7B:ED:2C:20:9A:16:13:62:F7:92:84:06:3A:7D:3E
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       2D82C68214A79DB92137B36B7A43332FA7ED2A23
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:51 +0000
ROA not before:           Fri 23 Jun 2023 20:01:51 +0000
ROA not after:            Fri 21 Jun 2024 20:06:51 +0000
asID:                     264996
IP address blocks:        170.84.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:82:c6:82:14:a7:9d:b9:21:37:b3:6b:7a:43:33:2f:a7:ed:2a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:51 2023 GMT
            Not After : Jun 21 20:06:51 2024 GMT
        Subject: CN=CEE9C505CE7BED2C209A161362F79284063A7D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:1c:da:73:3e:34:09:2e:db:cc:6f:07:84:
                    d5:cb:53:6c:d6:77:85:9c:67:b4:24:a6:3b:8b:1d:
                    ff:7f:26:ce:7c:7c:8c:bc:7c:9a:29:f0:8e:75:b9:
                    0c:29:fe:18:43:ac:77:9e:e5:9d:48:b2:78:8d:f0:
                    14:f5:34:fd:12:77:ca:44:df:37:3b:49:3e:c3:1f:
                    de:22:26:0c:64:76:f9:56:5b:4f:b6:af:a5:e8:49:
                    21:b6:90:d1:57:f5:7d:9e:17:fa:74:e2:40:5e:9a:
                    af:3c:86:81:a9:c1:c4:90:95:9f:ce:46:8c:ea:f1:
                    fd:08:59:c1:38:ab:4f:5e:c1:c5:e3:07:87:ec:97:
                    30:35:ef:28:13:39:17:4c:61:69:95:7d:1e:46:84:
                    cd:05:d1:0d:05:c8:cb:3d:a3:38:02:93:90:75:a9:
                    1e:3f:3d:9c:69:f5:b7:55:ad:7d:f3:e5:4e:b1:86:
                    6b:16:2d:15:ae:19:cf:29:24:a1:ad:1a:15:fd:e7:
                    73:08:22:20:9d:3d:35:42:ac:d5:4b:e5:91:0b:f1:
                    26:30:42:ab:a1:27:c2:b2:73:77:9a:fa:09:cb:e1:
                    8c:89:08:e9:b2:a3:28:0e:93:6c:0d:55:a8:69:47:
                    2f:65:c4:37:54:ba:de:22:a4:a0:7c:ca:de:93:51:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:C5:05:CE:7B:ED:2C:20:9A:16:13:62:F7:92:84:06:3A:7D:3E
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:b1:0e:be:37:eb:13:fd:4c:6b:96:13:96:1f:db:68:14:
         e8:6b:82:e7:27:30:fa:ee:b1:89:15:30:9b:be:a5:e1:77:5c:
         38:e0:d2:e2:55:3e:a9:66:ec:fb:6c:b1:82:99:8f:b4:72:b9:
         09:2b:99:6a:2a:cb:f8:20:11:ff:f5:ee:c0:e7:60:26:bc:9a:
         b2:a2:b2:d2:f6:b3:91:b6:c1:85:30:23:c4:bb:be:7f:8a:e9:
         87:09:72:55:d1:de:3a:69:84:8f:04:da:bc:69:91:00:77:80:
         7b:bb:fe:62:06:82:31:a4:75:69:f9:ea:86:97:b9:76:93:24:
         83:f0:27:6d:44:ab:00:ad:b7:9d:b0:4f:2f:4d:d9:96:a6:5f:
         88:85:d0:26:ba:e6:2c:25:35:72:57:94:06:b3:bf:3d:51:85:
         26:7f:5f:f6:48:0f:1f:4d:f6:99:76:55:d4:26:e0:46:12:5a:
         9c:d4:3b:88:f1:fb:f2:02:93:01:f2:ce:74:8e:68:25:b0:ac:
         9d:2f:2b:21:11:cb:f7:7e:2f:e2:6f:ab:df:30:7a:09:5a:7e:
         5f:65:60:23:4d:92:96:de:4a:50:11:9d:db:38:cc:80:2b:bf:
         dd:03:e0:79:e4:9b:23:39:ac:d6:b8:bb:e3:3d:5f:84:46:ae:
         85:7a:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org