Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa (raw, json)
Hash identifier:          YnFH6yfF0DkJ35feoPlU6czCK5roi6T/DzkD4BuhXl4=
Subject key identifier:   8D:F5:72:40:C1:76:EE:B7:0A:FB:75:23:24:F8:93:FB:46:AD:1A:44
Certificate issuer:       /CN=CE637EA74F748A988CEDDF0ED155D1D637DF515B
Certificate serial:       51A61E408B0F66AA967F44CE337AB63FBDCED5DF
Authority key identifier: CE:63:7E:A7:4F:74:8A:98:8C:ED:DF:0E:D1:55:D1:D6:37:DF:51:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE637EA74F748A988CEDDF0ED155D1D637DF515B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa
Signing time:             Wed 19 Apr 2023 12:06:22 +0000
ROA not before:           Wed 19 Apr 2023 12:01:22 +0000
ROA not after:            Wed 17 Apr 2024 12:06:22 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:1e:40:8b:0f:66:aa:96:7f:44:ce:33:7a:b6:3f:bd:ce:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE637EA74F748A988CEDDF0ED155D1D637DF515B
        Validity
            Not Before: Apr 19 12:01:22 2023 GMT
            Not After : Apr 17 12:06:22 2024 GMT
        Subject: CN=8DF57240C176EEB70AFB752324F893FB46AD1A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:f3:7d:25:5f:35:06:04:14:02:f2:d0:ef:
                    54:1c:b4:0f:bb:0c:b2:6f:ba:a4:89:d6:64:d6:82:
                    e1:4f:25:23:0c:fe:2b:f0:9e:65:c0:19:c2:72:f3:
                    a1:15:4a:1a:4a:13:89:4d:42:bc:11:d9:35:3d:ed:
                    e1:a6:c2:20:0e:4d:b1:bb:4f:dd:aa:bd:c3:10:0b:
                    54:ee:78:18:cd:75:be:4b:f5:e2:40:ba:cb:7b:56:
                    04:10:ab:f8:f3:02:81:0d:d7:e6:70:cf:af:fd:ed:
                    b6:a1:95:3c:b8:42:7d:8d:c0:9a:27:28:e3:c5:06:
                    ff:6e:eb:bf:76:34:b8:d3:43:8f:76:ef:2f:53:af:
                    1f:ca:2a:3e:df:ef:96:31:d8:e3:62:22:9b:a3:fe:
                    e0:a8:89:16:92:2a:f7:14:f5:6b:87:e0:b7:b6:93:
                    b4:76:df:a3:51:3d:3a:83:3c:2d:de:50:1b:f8:a8:
                    79:be:d5:b5:84:4c:7f:e3:be:a9:22:45:52:6a:5d:
                    23:ae:69:af:ed:c6:a2:d2:18:4c:45:17:17:46:42:
                    22:33:b4:79:e9:ed:1f:06:48:ec:0c:86:61:64:da:
                    f3:d4:93:b3:2d:ae:3d:e7:57:60:10:25:01:08:52:
                    e8:2c:b7:f6:66:35:45:b3:f5:98:e6:0b:f7:3c:ee:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F5:72:40:C1:76:EE:B7:0A:FB:75:23:24:F8:93:FB:46:AD:1A:44
            X509v3 Authority Key Identifier:
                keyid:CE:63:7E:A7:4F:74:8A:98:8C:ED:DF:0E:D1:55:D1:D6:37:DF:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/CE637EA74F748A988CEDDF0ED155D1D637DF515B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE637EA74F748A988CEDDF0ED155D1D637DF515B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3233203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:cb:ed:46:aa:b6:de:1a:6a:f2:96:5e:14:2e:24:cc:c2:
         bd:dc:d6:86:1f:15:38:43:97:85:87:f4:23:66:65:9e:98:2f:
         a8:a0:3d:eb:fa:0e:48:e2:4f:45:43:be:20:32:46:16:6d:87:
         b6:44:ca:33:cb:31:7f:e2:90:74:56:4d:4a:ee:fa:58:be:b8:
         7c:31:3d:1c:7c:ff:55:3c:f3:67:e2:b2:22:bd:fa:a6:30:65:
         38:2f:96:1e:ff:1d:7f:12:5d:1a:67:5e:54:b5:1c:4d:fa:2e:
         f6:aa:29:c1:27:13:77:20:37:39:04:08:f3:a5:23:b6:21:c2:
         8d:e0:f1:f8:6e:f3:15:9a:0b:6c:e1:2c:fb:e6:d6:2e:4a:8a:
         e6:90:3d:e7:95:1e:98:9c:22:8a:0a:97:92:a9:a7:28:c1:ca:
         26:51:09:dc:74:ff:8f:2a:5a:fe:21:f8:d5:cb:3e:a4:ca:0d:
         d5:d5:ec:87:6a:81:2e:7e:50:1f:75:e5:2b:e9:18:75:73:79:
         90:75:01:83:94:3f:59:ef:07:dd:8e:c2:93:ac:78:d1:57:49:
         a3:5c:06:15:06:bc:f6:c9:9a:7a:c5:d9:a3:59:44:63:72:0e:
         19:c3:f3:e1:1f:22:4a:c9:38:43:80:da:fa:d9:35:e7:36:88:
         18:36:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org