Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa
File:                     3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          IND6sr1AcLJJSwwAOfRCgwa4noF8FOCbJ9A26aeBFfM=
Subject key identifier:   E0:79:A2:93:A9:6D:41:62:63:F0:FE:43:1F:40:FD:81:96:53:88:16
Certificate issuer:       /CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Certificate serial:       3CB1A62715E490B61B20FC19BAA0AEC309E66567
Authority key identifier: 3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa
Signing time:             Tue 13 Sep 2022 20:14:35 +0000
ROA not before:           Tue 13 Sep 2022 20:09:35 +0000
ROA not after:            Tue 12 Sep 2023 20:14:35 +0000
asID:                     61588
IP address blocks:        170.233.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b1:a6:27:15:e4:90:b6:1b:20:fc:19:ba:a0:ae:c3:09:e6:65:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
        Validity
            Not Before: Sep 13 20:09:35 2022 GMT
            Not After : Sep 12 20:14:35 2023 GMT
        Subject: CN=E079A293A96D416263F0FE431F40FD8196538816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:67:04:b6:98:d0:6b:16:01:49:c7:22:b3:
                    c2:9a:e0:d7:40:c0:4a:b2:f2:2f:8a:ff:1e:28:29:
                    47:ea:19:a3:e7:d2:e9:82:50:bd:7d:cb:68:6a:5b:
                    52:eb:ae:2d:a8:6b:0e:a6:5a:76:5f:2a:33:45:5d:
                    34:d9:07:0c:a5:cf:81:aa:bb:92:d6:f9:da:ee:ca:
                    79:52:24:fb:0e:a0:7d:07:0e:27:63:b3:4b:7b:c4:
                    23:3e:80:74:97:98:6c:43:84:b0:e4:54:03:59:8c:
                    40:d2:73:e9:8f:f7:13:1e:39:3a:7e:9d:dd:2c:cb:
                    f8:60:3f:e8:13:fc:c3:0b:b8:25:f9:e6:d8:64:0f:
                    57:98:9c:1d:e7:63:10:7d:c5:28:ac:e7:5f:67:80:
                    0d:08:df:0c:38:8f:14:15:a8:7f:f0:21:87:57:16:
                    3a:a2:67:90:d3:49:70:7a:c0:2e:fe:0a:4e:bf:1b:
                    7b:90:4d:c2:ad:f3:e7:1b:51:9e:e8:50:dd:c3:37:
                    41:1e:ef:c8:d7:56:20:17:e3:4e:44:e1:d3:58:78:
                    09:00:d6:4f:94:cd:41:f0:ed:56:6e:a6:36:e3:3c:
                    3e:57:3f:1e:44:ac:49:6c:66:c0:ef:29:c2:45:d3:
                    57:7e:8c:31:24:09:ec:86:9c:94:53:ba:9b:bb:4c:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:A2:93:A9:6D:41:62:63:F0:FE:43:1F:40:FD:81:96:53:88:16
            X509v3 Authority Key Identifier:
                keyid:3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:2c:2a:9b:13:d5:89:51:c4:eb:7b:01:0b:0f:bc:f3:4c:02:
         39:b2:3c:44:65:c1:24:14:13:65:3c:fe:fe:98:a0:24:8c:b1:
         ce:d8:38:6e:96:ed:f1:8e:bf:ba:d5:01:d7:f1:f3:2b:77:71:
         35:86:4e:03:f8:1a:13:2f:fc:00:b8:98:97:18:bf:a6:9f:08:
         85:3a:08:1e:c7:aa:0c:d9:ee:b0:14:60:b5:68:d8:ec:eb:bf:
         98:83:a9:8d:00:1c:25:67:46:6c:b9:d6:05:3b:f7:4c:7e:3a:
         3e:67:eb:4f:6b:75:4d:3e:58:0d:62:ab:a5:b2:b6:75:f6:50:
         db:47:2b:7d:80:d0:5f:94:d7:4c:d6:4c:63:cd:62:55:18:65:
         6f:96:a4:ea:56:7a:a3:e6:68:b0:e7:98:bf:c5:a3:d4:17:80:
         9b:42:d4:3d:41:c5:b0:21:fb:8a:c5:b9:19:fe:05:e3:fb:9e:
         b2:09:20:87:1a:ea:75:73:4f:14:f1:a5:33:81:ef:96:9d:ca:
         5e:ae:3d:29:45:99:8f:83:26:10:a0:f9:f0:6b:fd:a3:a1:03:
         61:1b:f5:b8:81:c4:e3:e3:0b:87:48:59:c2:39:58:57:13:13:
         fc:bd:bc:bf:e5:c0:5a:63:9c:59:d0:a0:4c:f1:3d:d8:77:f1:
         dc:c6:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org