Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          wxIGhVodZMsOgONVZJ2awNfpBZKjdZsL9/Lrod4YF5g=
Subject key identifier:   93:E5:E6:99:FD:A2:68:93:54:4A:A7:E6:EF:B6:3A:90:A0:32:39:0B
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       40B26BD9DE49AC8D4115FC3A09E044648C440072
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:07:56 +0000
ROA not before:           Thu 20 Jul 2023 14:02:56 +0000
ROA not after:            Thu 18 Jul 2024 14:07:56 +0000
asID:                     52706
IP address blocks:        170.233.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b2:6b:d9:de:49:ac:8d:41:15:fc:3a:09:e0:44:64:8c:44:00:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:02:56 2023 GMT
            Not After : Jul 18 14:07:56 2024 GMT
        Subject: CN=93E5E699FDA26893544AA7E6EFB63A90A032390B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:98:54:f7:c1:80:78:a0:87:b0:38:4b:1e:
                    0c:c7:04:26:bd:d7:e0:4b:79:ef:61:b5:ee:46:ea:
                    5b:bb:fd:40:a2:1b:b7:fe:93:34:d9:a6:f6:05:69:
                    db:c1:6d:20:e7:ec:5a:0d:52:3f:34:39:19:df:0d:
                    e2:32:aa:27:68:92:37:13:d9:e8:e7:0b:56:21:6a:
                    36:f0:ee:48:b0:9e:34:55:47:4c:6c:10:94:54:ee:
                    bd:57:72:93:22:5f:4b:88:5e:b5:06:67:9a:85:0f:
                    10:b7:1d:49:a2:52:99:80:1e:49:52:17:b0:1e:2c:
                    95:59:d2:19:58:38:c9:db:33:11:9a:86:16:30:7e:
                    db:d9:e2:bd:96:7e:fa:28:aa:ff:dc:03:15:51:f2:
                    0c:68:be:a1:50:40:64:7d:f8:bf:d4:a6:8b:05:ad:
                    21:c6:cf:38:d0:5a:9a:2c:9a:5a:8e:62:68:5e:be:
                    5e:eb:23:17:85:fe:2e:ba:c8:54:87:93:35:f4:2a:
                    5b:89:94:6d:f5:a8:ca:7d:55:ce:f5:b6:7f:f0:c8:
                    ab:ff:c6:41:43:39:f9:b3:40:df:cd:a9:1f:10:4a:
                    4d:0e:8f:58:32:0c:aa:37:d0:d1:fe:f7:58:2a:d3:
                    ed:4b:15:c9:67:c8:fa:fa:ec:bf:b2:76:35:7c:62:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:E6:99:FD:A2:68:93:54:4A:A7:E6:EF:B6:3A:90:A0:32:39:0B
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:d5:30:e5:2b:a8:79:30:27:2a:d7:ef:34:84:cb:c7:27:
         4d:e5:96:06:8e:8a:27:b0:06:b9:93:54:5a:60:3a:7c:ff:fd:
         4b:2f:67:d0:f8:74:b5:19:24:39:9f:0e:12:03:48:61:01:95:
         72:16:19:e2:20:8c:5c:8c:24:a9:33:17:76:b1:f0:07:8e:e4:
         9b:c9:a9:74:ea:2e:98:09:61:46:4c:df:b7:77:98:11:37:84:
         2b:44:3b:46:0f:ea:84:1c:86:f8:e0:d3:6b:88:98:b2:24:d7:
         ea:12:9e:80:54:3b:3f:b6:58:22:39:f7:1b:20:2c:a4:bf:56:
         a6:09:d1:6c:32:e6:29:04:cf:cc:14:87:e0:4c:3e:5d:2a:3d:
         f1:31:a8:1e:7c:d5:dd:6b:00:7d:6e:d2:06:e1:fe:8b:70:b1:
         07:5d:9c:2f:3f:ba:c7:3d:69:86:4f:50:53:bd:e0:52:5f:e0:
         8c:d3:42:26:52:4b:9d:80:76:18:fa:bf:9d:64:90:c3:11:98:
         92:e4:2f:3e:c2:ff:7c:b6:c2:70:70:b9:3c:42:99:ac:30:17:
         c6:6b:12:29:0e:e5:bc:4f:96:75:aa:a4:bf:3f:97:04:4a:8e:
         f3:5c:c7:8b:dc:d7:bc:af:a8:fc:4e:00:1b:de:ac:43:58:cf:
         e3:70:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org