Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          YL4/q5N6RAF13uGz3wZWHkuDR+u+fCKoaCS1izvXjNI=
Subject key identifier:   8C:EC:15:7F:6D:AC:1F:89:7A:DF:DE:DA:E5:F5:27:B7:C5:15:A4:2D
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       23BCC08F30520A63C8AD9A7125DB747B366ED2AB
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:57 +0000
ROA not before:           Thu 10 Aug 2023 12:17:57 +0000
ROA not after:            Thu 08 Aug 2024 12:22:57 +0000
asID:                     61717
IP address blocks:        170.233.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bc:c0:8f:30:52:0a:63:c8:ad:9a:71:25:db:74:7b:36:6e:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:57 2023 GMT
            Not After : Aug  8 12:22:57 2024 GMT
        Subject: CN=8CEC157F6DAC1F897ADFDEDAE5F527B7C515A42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:9b:7c:b6:c7:f7:2e:80:d6:dd:d4:c6:2f:
                    2a:cf:fb:20:87:8d:ed:7e:14:e8:f4:43:bb:4b:78:
                    91:ca:c2:c4:1f:d1:dc:7a:38:07:c0:28:f8:69:a4:
                    8d:fe:d5:16:ab:02:e6:63:d8:7c:67:ad:79:f5:29:
                    b8:2e:ff:c6:a2:b6:f6:b2:a7:0b:08:be:0e:08:39:
                    f6:27:a9:13:27:7c:f9:95:35:e8:62:24:0d:f8:05:
                    bb:af:f8:27:f2:23:0c:e3:4c:30:8e:ea:6c:45:f2:
                    2a:d0:5a:9e:b4:f4:cd:d5:61:d0:fa:9b:f9:74:c0:
                    f1:15:66:7f:d2:d3:e9:12:05:3c:0b:a7:c5:a9:9e:
                    ea:da:41:3c:53:f5:d2:77:d8:c5:27:a3:45:4e:25:
                    78:77:56:2e:4c:f9:72:11:85:2b:14:70:19:70:5b:
                    1c:3e:0f:f7:91:71:ce:e5:cf:27:69:1b:6d:42:64:
                    8b:0d:9f:91:71:3e:14:7c:1a:33:68:9e:ed:5c:1c:
                    b3:e7:7b:34:cd:06:f0:f0:66:b5:72:f3:4a:13:ce:
                    78:0f:85:32:ad:8f:e1:c1:7c:33:30:58:bd:45:35:
                    81:2e:05:d7:d0:79:41:dc:16:75:08:76:6e:05:1c:
                    a3:31:bc:58:d8:eb:52:b3:74:1b:ee:d0:7c:ab:2a:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:15:7F:6D:AC:1F:89:7A:DF:DE:DA:E5:F5:27:B7:C5:15:A4:2D
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:bf:20:cf:c6:32:b9:96:a0:e4:f5:9d:ea:b2:f1:5c:2c:
         bc:6e:60:b2:2f:03:54:fd:df:34:aa:bd:09:2c:33:0f:3f:ae:
         ad:55:a1:a1:13:0e:ef:2d:9e:20:84:dd:ec:0b:8c:64:8d:6d:
         93:7f:2a:e3:86:bd:9c:0b:07:f6:df:9a:56:c1:31:1a:5d:5f:
         cd:63:44:0e:9a:15:49:3b:fe:90:1b:0d:12:e7:4b:35:3f:6c:
         97:53:85:b9:60:b2:87:e3:dc:df:1b:35:23:0f:d8:16:1a:f4:
         4d:97:43:ea:b9:45:d4:33:b1:f2:4c:68:ba:56:80:71:64:6c:
         41:ef:a4:a9:10:0a:02:9d:a5:a4:0a:1d:27:94:f5:d4:a4:27:
         32:78:25:cb:07:99:3c:39:97:e8:fc:7f:0d:9d:91:ff:0c:57:
         5d:c4:4e:a5:3a:23:d0:d8:79:03:83:dd:33:9d:c5:c9:99:20:
         8b:88:6c:72:c5:c3:bc:bb:12:6e:6a:df:56:e6:85:40:9c:87:
         74:29:e3:60:fd:ab:a0:43:81:3a:83:ab:de:e7:b1:96:8a:c2:
         c8:a6:70:d3:38:cc:39:2d:37:91:e9:8d:02:0f:f2:d2:ea:a6:
         3b:c8:11:b6:17:22:c4:29:8b:0e:47:ad:b7:0b:73:f6:0f:72:
         5d:ce:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org