Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38372e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          JrQyqW1vWLy5v5u+hnt5Z37urvnWh+U0Ud0wPLEPPXk=
Subject key identifier:   56:79:80:59:C5:0E:B0:31:92:05:50:BF:C9:66:30:D7:9C:5D:0E:C8
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       57FBB118DD4A864C9501F861D59950B0860B0A92
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:51 +0000
ROA not before:           Fri 23 Jun 2023 20:01:51 +0000
ROA not after:            Fri 21 Jun 2024 20:06:51 +0000
asID:                     264996
IP address blocks:        170.84.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fb:b1:18:dd:4a:86:4c:95:01:f8:61:d5:99:50:b0:86:0b:0a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:51 2023 GMT
            Not After : Jun 21 20:06:51 2024 GMT
        Subject: CN=56798059C50EB031920550BFC96630D79C5D0EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:a4:1a:99:95:4f:c3:a5:8a:e4:d4:f3:a0:
                    2c:19:bd:45:c2:58:52:f8:f7:e8:48:69:4b:4e:35:
                    27:9c:48:ef:65:99:34:78:fa:8c:f1:85:19:78:ed:
                    9a:cc:25:55:d0:6c:c8:f6:db:7b:8d:98:03:ae:76:
                    fb:88:de:c3:9e:a0:86:20:80:83:6f:b0:9d:c4:e4:
                    3f:02:a0:3c:a6:e9:c3:05:d7:aa:62:8f:f8:08:b4:
                    9d:a3:8a:18:68:de:17:17:45:a4:ba:03:f8:ec:59:
                    28:78:f7:c4:f5:60:42:be:4b:c7:89:06:83:44:c2:
                    a7:5c:41:07:23:bb:9a:57:3c:64:06:87:36:06:7f:
                    99:70:6c:59:49:63:57:5d:6b:1c:36:77:1b:f3:1a:
                    fb:ea:41:6b:6f:98:f2:4c:c8:39:6a:2f:ae:4e:80:
                    d1:77:96:6e:32:98:99:2c:26:b8:c0:d3:fa:d2:84:
                    06:39:78:f6:34:c3:31:57:97:08:1b:74:98:29:37:
                    b8:e9:5e:8b:ba:ee:22:4a:fd:50:63:80:4e:4b:ff:
                    07:25:69:42:e0:52:cb:9e:26:d7:a6:11:29:03:00:
                    7a:b8:0a:ac:70:af:0b:ef:43:3e:39:57:eb:93:51:
                    74:2f:b6:80:8d:26:26:78:b2:1b:78:11:19:e4:dd:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:80:59:C5:0E:B0:31:92:05:50:BF:C9:66:30:D7:9C:5D:0E:C8
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:6a:3f:69:2f:07:a2:48:a7:4e:24:49:e2:c4:30:bf:1a:
         97:0f:e0:6f:86:b1:e9:4f:df:cc:df:aa:47:bb:05:61:d4:5d:
         69:dc:e8:56:bf:82:ed:0a:02:17:bc:d1:a2:6c:c8:02:43:1c:
         2a:c7:63:74:c2:04:1e:82:0c:e6:32:78:dc:7c:e2:7b:99:1b:
         01:37:ff:5d:a0:76:c8:4c:59:dd:ed:a7:a5:38:82:f8:87:32:
         bd:37:d8:8c:b8:46:84:8e:be:c8:50:f0:d0:b4:9b:11:25:a6:
         27:37:d5:53:74:eb:48:00:b8:80:b9:9d:3e:f4:d2:64:af:06:
         54:c5:5e:e2:c4:93:12:4e:34:03:08:e5:69:84:9b:b9:5f:d7:
         d6:48:7d:50:a0:33:f0:56:dc:a5:ed:ac:08:3f:16:7c:69:26:
         02:a6:d3:14:9a:ef:12:21:31:0c:5c:fb:c2:1a:61:96:da:10:
         be:34:b6:46:71:1a:50:81:9c:ad:79:51:f5:59:61:04:c9:0a:
         09:61:16:f6:e5:de:8a:4b:f0:95:3d:ae:08:2f:7f:79:ed:da:
         64:7d:61:79:94:67:d1:90:b0:5d:f1:a5:0a:e4:a7:3d:fb:5e:
         04:56:50:cb:5d:6c:f8:b5:fa:1d:59:c1:5c:78:f4:ef:94:86:
         b6:15:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org