Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
File:                     3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          t4u3sr149RComtqLcr9yTFrPpcv3uRWWEkHWbrWaoFM=
Subject key identifier:   ED:05:C8:24:AC:18:42:31:43:21:36:A5:8D:D1:3A:E9:18:A6:44:15
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       69E067715B31FE195D41EDCE42124B209A61F2E0
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 14 Sep 2023 12:46:00 +0000
ROA not before:           Thu 14 Sep 2023 12:41:00 +0000
ROA not after:            Thu 12 Sep 2024 12:46:00 +0000
asID:                     52706
IP address blocks:        170.233.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e0:67:71:5b:31:fe:19:5d:41:ed:ce:42:12:4b:20:9a:61:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Sep 14 12:41:00 2023 GMT
            Not After : Sep 12 12:46:00 2024 GMT
        Subject: CN=ED05C824AC184231432136A58DD13AE918A64415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:a3:3a:99:b2:cb:de:85:85:a5:98:f4:b1:
                    87:14:7e:77:db:ae:66:9f:7b:54:5a:0c:c6:17:bb:
                    3a:fe:21:69:42:83:e2:5e:89:ed:14:7d:66:7f:6a:
                    18:99:bd:7b:53:22:96:ed:66:b6:c2:f6:28:06:9e:
                    fa:78:d0:64:58:9a:c7:ea:49:2a:a1:e5:6d:84:f7:
                    86:cb:67:a6:1f:f5:af:90:ea:3f:b2:47:e7:5c:c1:
                    7b:b2:4d:6b:d6:55:15:d3:f7:16:c7:c6:d1:13:92:
                    7c:44:a5:df:ce:6e:fb:fa:01:0f:b9:05:c8:82:86:
                    11:f6:3a:7e:ad:f4:fa:54:f6:78:62:71:83:b9:31:
                    70:88:b4:4b:a3:8e:a2:43:23:00:de:39:d9:5c:d1:
                    26:11:23:67:2b:40:13:8d:2a:3d:f0:f7:2c:cd:af:
                    2c:63:1f:38:06:9f:00:1d:fd:16:9d:5f:98:f2:28:
                    be:0a:7d:32:5f:c0:f1:1b:32:e9:05:a2:5e:c9:c6:
                    a7:c0:77:95:0c:db:52:92:2a:15:96:07:aa:6e:d7:
                    17:58:91:6b:d0:8e:31:ad:8f:93:fc:6b:c4:b2:25:
                    7b:92:ea:30:9d:29:15:2b:43:e0:71:0e:dd:89:59:
                    13:28:5d:3f:12:5f:78:7b:3f:36:90:54:42:92:f4:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:C8:24:AC:18:42:31:43:21:36:A5:8D:D1:3A:E9:18:A6:44:15
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:17:99:28:8c:c1:9c:38:b6:a8:06:d2:8e:8d:cb:6c:e4:b6:
         5a:21:69:27:90:42:7b:38:3e:da:5e:f2:f0:19:98:09:30:0f:
         21:39:aa:90:56:60:07:e3:5a:50:69:76:d8:86:84:f4:90:1d:
         02:24:8a:43:87:d2:45:b7:00:30:da:27:a8:5f:22:e2:12:24:
         d3:ba:eb:0e:35:56:86:16:73:7a:68:d6:f2:a0:84:3c:5e:36:
         3c:78:8c:08:e0:cf:03:0b:d9:d5:2e:15:0c:52:43:c1:39:30:
         1d:d3:39:0f:4a:30:90:d8:e2:61:17:ee:8b:cb:ad:e3:c1:75:
         74:63:39:b8:69:f6:67:a8:46:00:de:13:b5:8b:e5:ed:fc:b1:
         c2:20:84:25:c2:08:83:fb:b8:a1:d6:4a:c2:12:a9:91:ff:9d:
         4e:c9:1c:db:e4:d5:cd:5e:64:19:00:38:19:70:33:73:c7:4c:
         05:7e:1e:6f:f0:8c:d5:9c:1f:71:c2:22:05:ce:5d:22:1d:23:
         6b:e3:fe:ed:0a:93:8b:3f:5f:ca:64:dc:c3:f6:d5:1f:b9:7e:
         5a:54:5c:eb:b5:cd:c7:24:db:da:bb:d5:af:4a:df:e5:13:f9:
         9c:4b:a2:de:11:2c:57:7b:b3:1f:0e:82:5a:97:66:47:3e:fa:
         5c:22:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org