Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3234203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32322d3234203d3e203532373036.roa (raw, json)
Hash identifier:          kniPQi4PKU9Vamg+KxuG388hVVmhNGjD03JYb/NvvQc=
Subject key identifier:   80:65:47:CF:BF:E5:8F:20:80:4D:F0:08:BA:7B:A5:55:12:69:D0:80
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       15D91216DC2C090792049534662B570EE312226A
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3234203d3e203532373036.roa
Signing time:             Fri 14 Jul 2023 20:11:57 +0000
ROA not before:           Fri 14 Jul 2023 20:06:57 +0000
ROA not after:            Fri 12 Jul 2024 20:11:57 +0000
asID:                     52706
IP address blocks:        170.233.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d9:12:16:dc:2c:09:07:92:04:95:34:66:2b:57:0e:e3:12:22:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 14 20:06:57 2023 GMT
            Not After : Jul 12 20:11:57 2024 GMT
        Subject: CN=806547CFBFE58F20804DF008BA7BA5551269D080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:08:98:2c:ee:bb:51:af:93:67:8c:b9:10:
                    b5:50:99:c4:b3:4c:cb:b8:9a:5b:01:08:f2:67:7d:
                    0e:2f:5d:31:9a:19:ca:48:ed:76:ef:a0:c2:ed:0e:
                    1e:40:3b:2d:eb:50:4f:1c:61:b2:3c:9f:32:ae:60:
                    f3:19:ee:6e:c8:2c:1d:44:34:b6:c3:aa:b1:07:83:
                    2d:12:6e:f9:ed:c2:95:ce:f5:1c:01:90:93:0a:49:
                    82:ba:dd:70:64:20:7b:bc:6e:e3:aa:ad:4f:b9:65:
                    d7:20:06:de:9c:42:80:71:fc:89:ab:db:e6:43:14:
                    7e:65:b2:ad:29:ad:f5:5e:c0:4e:72:a1:87:ea:8e:
                    14:12:51:49:20:eb:54:45:51:8e:da:fe:dd:79:7a:
                    ae:81:fc:82:b4:ab:ae:56:6d:1b:13:e6:18:2b:48:
                    50:b9:20:89:34:f5:77:86:71:e8:d6:92:59:bb:a6:
                    10:82:0b:c8:e5:79:6b:d6:cb:00:5b:dc:b7:c6:76:
                    46:9d:fa:f0:d1:8e:8b:a4:27:b2:d1:65:40:37:43:
                    bc:dd:a4:99:2f:e1:e8:15:2e:77:3f:ad:cc:d5:9c:
                    dd:3b:9c:1c:f0:a0:54:bf:65:a6:d6:00:a8:91:ff:
                    17:46:3d:ea:c4:ee:8a:18:e0:5f:0c:88:48:4d:29:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:65:47:CF:BF:E5:8F:20:80:4D:F0:08:BA:7B:A5:55:12:69:D0:80
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:a7:28:db:d0:4a:92:fb:82:b0:5c:c6:e1:4e:13:e5:1e:
         6f:af:1c:e3:49:c8:59:41:91:4c:07:c4:e8:96:3d:1d:d9:14:
         3c:60:ae:07:78:f1:f9:43:cf:bc:bb:25:f3:26:53:ca:0e:0e:
         c1:e6:94:45:ce:96:36:e2:e8:9a:4e:3b:94:19:54:b0:65:3a:
         a6:5f:ad:79:4b:6a:59:f7:19:e9:17:36:33:ba:35:ab:de:d7:
         62:f1:d9:ab:4e:f5:af:8d:8f:69:68:46:fd:1b:2f:65:01:e8:
         c5:2a:bb:de:ae:ff:20:73:1d:03:e2:3b:c2:f3:69:71:ed:a4:
         81:3a:5a:dc:bd:45:cf:e6:d3:e7:c0:4b:85:74:74:81:47:dc:
         10:4c:5a:2c:14:1d:19:e8:f4:f5:36:a9:5b:28:83:fd:22:7c:
         42:b2:b1:d6:79:70:37:f2:93:c9:b1:7b:16:54:ed:5b:24:40:
         91:81:66:1f:cb:27:f6:34:8a:a3:57:5e:f2:6a:02:2c:c8:68:
         8a:8e:c6:2b:60:f3:ad:8d:16:f3:dd:03:a1:c1:ae:0c:d2:9d:
         e2:8b:79:a4:48:d2:7b:f5:22:f4:cc:10:85:90:59:a1:e1:90:
         e8:69:f0:31:29:18:83:68:0d:50:4e:ce:83:55:71:b7:32:38:
         5e:cb:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org