Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3137302e3233312e3134302e302f32322d3234203d3e203631353832.roa
File:                     3137302e3233312e3134302e302f32322d3234203d3e203631353832.roa (raw, json)
Hash identifier:          JChzJEY7IPn4U5tMI0I9rTEBCp4thtLJIOBVb5vAFlE=
Subject key identifier:   B5:AF:27:30:70:D3:DF:13:4C:0C:14:D5:E4:5F:37:2E:17:F8:B0:61
Certificate issuer:       /CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
Certificate serial:       554D9F28375CB36288A9E158E3791A7337B3216E
Authority key identifier: 2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3137302e3233312e3134302e302f32322d3234203d3e203631353832.roa
Signing time:             Thu 04 May 2023 14:24:00 +0000
ROA not before:           Thu 04 May 2023 14:19:00 +0000
ROA not after:            Thu 02 May 2024 14:24:00 +0000
asID:                     61582
IP address blocks:        170.231.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4d:9f:28:37:5c:b3:62:88:a9:e1:58:e3:79:1a:73:37:b3:21:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
        Validity
            Not Before: May  4 14:19:00 2023 GMT
            Not After : May  2 14:24:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:11:8c:12:68:ca:d2:c5:55:80:5b:b4:3e:
                    44:a0:2f:9b:0f:ef:b5:08:a1:3c:ea:9e:3d:84:89:
                    ee:60:b3:0f:fa:4a:64:c9:3d:20:28:81:57:46:1a:
                    69:bc:c2:e1:b5:82:f0:fb:4a:e9:f8:54:2e:98:17:
                    ef:90:5e:63:58:18:ac:fb:58:23:86:3c:c5:c4:fb:
                    11:1d:84:e8:cc:29:e5:eb:c5:80:10:16:03:72:23:
                    ec:ef:e9:d8:e0:68:83:ee:0c:70:8a:e8:d9:d2:be:
                    01:b4:29:c2:bb:3d:11:be:d0:de:69:0b:43:46:25:
                    a2:4b:53:f4:4e:dc:1c:10:1f:a1:c7:3a:67:a5:06:
                    c1:d1:9a:08:1f:ad:ac:79:6a:c0:3d:21:f3:8b:e8:
                    68:7a:f7:2d:d3:f0:97:47:2c:ea:bd:5d:a7:ed:cd:
                    58:f3:e3:60:d2:66:20:39:d5:71:12:46:46:34:1c:
                    26:9a:ad:95:f9:68:73:4e:52:11:e1:5b:20:7e:4c:
                    17:6b:5e:2b:e4:9c:02:72:a7:39:d3:13:a6:29:92:
                    73:b5:84:dd:69:21:d2:90:d3:e3:8f:9f:89:38:db:
                    40:93:ce:0f:ff:02:6e:d1:92:66:b4:31:19:6f:5b:
                    7d:3a:2e:71:10:e4:df:79:75:91:a8:bd:ec:1c:3b:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:27:30:70:D3:DF:13:4C:0C:14:D5:E4:5F:37:2E:17:F8:B0:61
            X509v3 Authority Key Identifier:
                keyid:2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3137302e3233312e3134302e302f32322d3234203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:17:52:a1:31:59:21:a0:ad:b3:95:0c:cc:cc:b3:bb:74:24:
         9f:5b:86:41:aa:15:59:49:38:93:d6:14:1f:69:39:e5:75:89:
         5e:8c:63:dc:33:7c:9d:99:c7:e8:ec:2a:28:21:03:4d:70:4f:
         da:3e:49:90:08:26:67:c9:48:88:d7:ba:aa:98:c6:71:5c:e4:
         c4:d3:70:07:8a:7b:70:9b:4f:6e:52:de:dc:29:67:a7:1c:ce:
         a7:9b:f9:ee:57:a2:cf:19:22:1f:10:7f:52:51:d1:4a:fc:f5:
         4d:ff:ee:08:82:e8:00:fe:f1:2b:31:83:cb:28:72:0c:e1:35:
         ca:43:2a:bd:f1:95:34:bc:ac:9a:e9:1d:3a:f5:cb:d1:cc:8e:
         bc:b6:ee:bd:7d:1c:6a:86:ad:f9:4d:33:dc:52:b9:8a:f2:57:
         2e:2c:d2:35:eb:d5:c7:95:8f:1d:7b:38:6d:0a:c0:81:49:73:
         ce:a9:26:5d:9c:ed:a4:b2:51:61:6c:11:e5:ad:20:d6:cb:1e:
         0d:3f:94:e5:82:09:3a:4a:bb:9b:45:32:d7:8a:48:e0:40:3b:
         d4:dc:c6:75:09:69:ab:09:63:07:fc:0a:65:5b:7e:ec:57:ad:
         55:9a:91:11:a2:c8:bb:2d:b1:ee:9b:a3:23:84:2c:92:81:37:
         15:3d:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org