Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          MD4qh5lP8gxPuBiQh4bv6s/FGparxtq73QKf0Xzxnnc=
Subject key identifier:   23:FC:BB:0A:04:0D:E2:7D:31:47:20:62:A1:48:F7:9A:22:7B:89:2B
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       1062003411DF69F2FD5F9D82166FB634FA584180
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 05 Apr 2024 00:55:42 +0000
ROA not before:           Fri 05 Apr 2024 00:50:42 +0000
ROA not after:            Fri 04 Apr 2025 00:55:42 +0000
asID:                     264022
IP address blocks:        170.245.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:62:00:34:11:df:69:f2:fd:5f:9d:82:16:6f:b6:34:fa:58:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr  5 00:50:42 2024 GMT
            Not After : Apr  4 00:55:42 2025 GMT
        Subject: CN=23FCBB0A040DE27D31472062A148F79A227B892B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:4e:08:d6:9f:43:4e:d7:5f:8c:54:4c:b4:
                    9b:ee:9b:0c:b7:ed:4a:ec:bd:3c:69:d5:78:55:51:
                    63:18:47:84:03:39:e5:ad:22:c3:03:99:a5:c1:46:
                    5d:8a:93:f5:73:e9:e9:ff:53:a8:bb:f9:09:fe:89:
                    ce:0f:bb:d8:dd:67:86:9a:00:eb:2f:e5:9b:94:b6:
                    27:14:be:6f:0e:f4:ec:13:d4:48:f3:97:88:50:25:
                    c3:48:79:45:34:35:0b:90:ad:86:cb:43:7a:9a:a3:
                    23:cf:97:b6:9a:a8:31:14:06:dd:86:8a:2c:ce:85:
                    2e:f5:e5:18:59:71:05:45:1b:12:4a:dc:11:e2:bc:
                    42:2e:a0:78:d5:01:a1:ec:c0:31:00:09:2d:f8:fa:
                    ef:b7:29:96:9d:59:b3:c1:2d:f5:41:c7:63:93:fe:
                    0f:33:d7:13:14:5f:ae:ba:86:57:e0:07:a0:d3:34:
                    9d:ea:78:05:a5:d6:74:a4:32:2c:8c:86:2e:d5:7c:
                    56:0a:01:81:bd:ea:26:10:0a:dd:f0:55:08:51:6a:
                    4a:a7:ed:13:af:06:77:4c:d7:03:90:04:3d:50:d3:
                    87:a1:d5:90:48:6e:47:78:9a:db:b9:7d:a7:94:af:
                    9b:89:64:4e:7e:a3:4c:72:59:a3:3d:c4:0b:66:e2:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:BB:0A:04:0D:E2:7D:31:47:20:62:A1:48:F7:9A:22:7B:89:2B
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:11:98:99:84:6c:4d:cb:4b:d0:63:7c:9e:f9:55:2e:21:c5:
         b2:31:8d:4d:91:c5:a9:d1:7f:31:eb:cd:99:88:d4:7b:be:09:
         ae:07:11:a3:e1:57:ab:99:88:0c:7b:8e:ca:02:c9:08:7a:09:
         0a:76:0a:59:b7:a2:43:b6:63:04:f3:77:5f:aa:f8:12:f9:b8:
         d3:26:85:66:0f:11:32:17:ac:81:ad:13:6e:c8:8a:18:4a:18:
         47:e2:cf:11:26:92:2c:47:0c:6c:7b:35:bb:cd:76:58:6d:4c:
         84:fe:4b:fc:af:11:c8:01:d5:d5:3e:d5:08:b1:e3:24:57:8e:
         5f:7f:2b:93:22:73:12:ca:47:9b:df:87:b1:eb:7c:4b:28:e7:
         0e:1d:6c:70:42:87:23:2c:3b:50:fb:21:1b:1b:17:af:00:82:
         1f:c1:8f:88:88:8d:f1:7a:11:42:0b:f1:6a:23:f0:eb:d6:aa:
         66:dd:4f:57:96:bd:92:e6:4c:99:f2:f1:ab:f9:0f:fd:c2:31:
         78:b4:49:ff:49:dc:9d:07:fc:c8:a3:17:12:2d:98:5c:fc:49:
         62:a7:89:ce:30:01:ca:07:b6:8d:fb:de:d8:eb:10:c9:ef:2d:
         aa:71:a1:da:91:2a:2b:43:3b:73:47:26:6c:6a:e8:05:ec:0e:
         38:fd:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org