Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          CLIZ3fi+yeEigssJtJfSR9pGHYr07ppxv6ZzW7Kdkwk=
Subject key identifier:   1D:41:E2:C3:B6:26:9B:D4:D4:A6:AE:C6:EB:B2:C1:03:AD:77:6E:C3
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       2BD99FA8B5685A02A5624DB3317FC2B11334F33C
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
Signing time:             Thu 18 May 2023 20:00:00 +0000
ROA not before:           Thu 18 May 2023 19:55:00 +0000
ROA not after:            Thu 16 May 2024 20:00:00 +0000
asID:                     266348
IP address blocks:        170.239.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:9f:a8:b5:68:5a:02:a5:62:4d:b3:31:7f:c2:b1:13:34:f3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: May 18 19:55:00 2023 GMT
            Not After : May 16 20:00:00 2024 GMT
        Subject: CN=1D41E2C3B6269BD4D4A6AEC6EBB2C103AD776EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:bf:2e:49:1a:6f:2c:33:fc:24:93:c2:48:
                    2e:ee:d3:21:05:12:63:3c:c9:41:10:85:ab:97:dd:
                    58:72:dc:1f:65:48:c1:a6:22:15:1a:98:a6:9c:56:
                    63:77:23:bb:1c:a2:4c:d0:9b:c1:2f:da:2f:9f:65:
                    63:cc:3e:10:a7:e8:26:ae:49:55:11:cc:bb:f9:48:
                    2f:31:95:fb:b7:3d:6e:a7:15:93:ea:93:8b:52:4d:
                    47:d5:87:d4:e2:23:c8:d3:2e:5a:b6:6e:79:07:13:
                    8b:19:d2:a7:65:95:39:04:cc:e9:63:fd:23:cb:a5:
                    3f:90:88:d8:65:64:e1:6e:73:aa:ca:3b:dd:ec:62:
                    83:c8:e9:f3:a0:0b:01:58:1c:1a:93:ee:ac:bd:ec:
                    12:99:ea:82:03:32:2f:97:bc:95:c7:51:1b:e6:16:
                    4e:6b:6e:fa:5c:77:32:1e:28:9b:e5:81:d4:a0:f0:
                    9f:2f:0c:cf:79:3d:dc:92:c2:57:69:c4:c6:67:72:
                    b5:61:80:fb:3b:a4:7a:51:40:f4:ee:68:5c:52:03:
                    f7:f0:97:14:43:cf:6d:a6:7d:75:20:87:91:94:8c:
                    33:13:f5:07:30:b8:31:b3:19:51:2b:38:b8:72:1b:
                    bf:ec:46:f4:20:a9:45:e8:b9:02:33:a5:57:47:da:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:E2:C3:B6:26:9B:D4:D4:A6:AE:C6:EB:B2:C1:03:AD:77:6E:C3
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:17:8b:22:3d:fe:ab:e2:80:87:5c:34:72:48:0c:bc:b4:35:
         b4:50:6e:84:ea:66:e3:aa:35:3e:87:0b:66:67:06:b7:dd:20:
         8c:96:53:d6:71:94:8c:d3:26:06:7a:69:34:a1:30:4b:07:5d:
         b7:23:5f:7e:72:5e:66:4c:0f:f2:d0:ae:59:24:bb:3f:0c:cd:
         b3:f5:d9:9e:2b:3d:25:51:e1:15:0d:9a:ec:ab:71:a6:46:8d:
         41:99:66:ff:26:5b:e1:f3:93:5d:d5:dd:ff:18:3e:cc:f6:fe:
         3c:8c:aa:10:15:94:e3:75:26:50:3b:07:3b:23:e7:36:75:2b:
         39:61:86:1a:40:b8:ea:3b:b5:9b:e7:10:5a:a2:8a:f8:6f:23:
         83:ee:30:d3:52:c7:8b:8e:b3:e7:12:a6:b7:4b:cf:a0:a7:cb:
         ca:67:1e:87:b9:85:d2:ed:88:ab:0f:42:52:69:a1:52:a6:93:
         05:6b:91:26:98:7a:f9:f1:76:d5:0b:78:b9:3a:71:4a:99:f7:
         68:3a:ea:5c:ea:85:4f:e7:85:5c:68:74:39:62:82:c9:73:b1:
         c6:26:a4:9f:00:1a:05:f3:d9:55:0a:69:fa:72:9a:e9:61:f0:
         9a:49:23:1f:23:7c:de:8e:c9:42:07:cf:3f:46:cb:1f:e0:c2:
         00:4f:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org