Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          kI+f9DbZH8WZjuI9baa85Ybsp2LgD+tjSWFLRTD504k=
Subject key identifier:   87:D8:D8:DE:34:0E:DE:3C:34:45:F0:02:79:67:CE:76:07:C0:AA:6C
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       5AA076A66690A582BFD0BEB2A41F85C1ACBB507B
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:08:18 +0000
ROA not before:           Thu 20 Jul 2023 14:03:18 +0000
ROA not after:            Thu 18 Jul 2024 14:08:18 +0000
asID:                     52706
IP address blocks:        170.233.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a0:76:a6:66:90:a5:82:bf:d0:be:b2:a4:1f:85:c1:ac:bb:50:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:03:18 2023 GMT
            Not After : Jul 18 14:08:18 2024 GMT
        Subject: CN=87D8D8DE340EDE3C3445F0027967CE7607C0AA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ca:f9:e5:f5:f6:cb:f4:41:b1:79:d6:20:c5:
                    a8:a7:c3:89:75:e3:a7:97:d4:a6:8b:17:25:ee:a3:
                    8e:94:2c:0b:36:f1:d8:51:6a:c6:6d:bf:7f:81:41:
                    49:58:ac:78:12:f9:6b:da:8b:1a:fe:d2:42:96:fa:
                    62:13:3f:46:88:8c:ad:df:f3:1d:7b:ba:31:b2:23:
                    11:ef:e2:96:0e:56:db:8d:db:af:1a:98:ff:3a:6c:
                    d1:12:4f:fe:36:12:9f:18:08:1e:cf:da:11:06:ac:
                    bc:a3:c2:37:aa:c3:2c:b3:96:dd:4e:62:8c:86:76:
                    7b:cc:31:ec:8e:bf:fd:35:f9:26:b8:86:6d:33:fd:
                    ca:98:32:d4:d9:3e:f0:79:fa:ff:d5:19:6f:9f:37:
                    6d:72:c8:71:c6:73:d4:34:d4:90:b1:d4:ea:a9:60:
                    52:db:34:6b:03:4f:f8:98:9e:de:18:1b:45:b2:a7:
                    ee:f7:36:45:e0:a5:95:5a:51:9e:4e:3f:82:95:ee:
                    e4:76:01:1b:f1:7c:87:35:58:19:48:8f:dd:0e:46:
                    cf:c4:89:c4:ae:5e:69:12:13:ec:0b:c0:a7:fb:59:
                    ba:82:1b:ba:95:5c:74:d0:3d:a6:22:22:b3:4a:9a:
                    d2:09:1a:c4:54:4e:23:07:f7:b7:ee:b6:cd:2a:e9:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:D8:DE:34:0E:DE:3C:34:45:F0:02:79:67:CE:76:07:C0:AA:6C
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:40:a5:4b:96:9f:06:75:d8:e2:53:2d:22:12:7c:fa:d1:
         76:0b:10:1f:a7:57:ec:b3:ef:d8:83:fc:3e:b0:f0:02:fe:8e:
         f9:fc:88:fe:2c:e6:3c:02:d3:fd:cb:08:7e:27:46:4d:8a:0d:
         17:83:36:af:96:bb:de:88:dd:81:76:10:a4:a0:ab:e1:52:4d:
         8a:e9:88:07:29:77:ff:11:15:2f:73:08:f7:1a:87:11:98:82:
         79:9f:28:a0:22:b3:2a:63:8f:5a:ef:dd:9a:f5:ce:7c:e4:92:
         94:99:68:77:08:90:38:10:82:25:00:c0:c8:75:b1:46:15:23:
         8a:f0:db:db:87:17:92:30:34:a5:90:57:06:45:93:18:68:57:
         75:38:87:3a:1c:f7:f2:87:14:66:eb:2d:7a:93:f4:01:6d:9a:
         26:cf:87:0a:d6:1d:81:66:60:c6:49:f0:c8:f6:71:a0:76:7f:
         b7:e4:db:b7:33:1a:d3:35:b0:1c:06:4c:46:6b:55:4f:2a:91:
         ce:ef:0a:74:2a:cf:d1:c3:84:d0:ce:a7:5f:c0:90:9a:27:d5:
         6a:69:19:07:76:c8:90:77:6c:bb:5a:63:ff:80:5b:ec:51:b4:
         34:92:e1:fe:94:8a:84:ac:ee:0c:40:0c:30:2f:b9:c1:f8:29:
         6e:6c:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org