Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa
File:                     3137302e38312e3232372e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          Ek3zPEkMa1MYDLGtYsV9Rbc5in7kiJRc50Gyu7plveg=
Subject key identifier:   FC:4A:CF:70:C7:B3:D0:E6:F9:B4:FF:2F:DD:95:EC:E9:73:2A:59:2A
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       2833501635EC9C6946F224975075004531B93C59
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:54 +0000
ROA not before:           Thu 14 Dec 2023 13:15:54 +0000
ROA not after:            Thu 12 Dec 2024 13:20:54 +0000
asID:                     61666
IP address blocks:        170.81.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:33:50:16:35:ec:9c:69:46:f2:24:97:50:75:00:45:31:b9:3c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:54 2023 GMT
            Not After : Dec 12 13:20:54 2024 GMT
        Subject: CN=FC4ACF70C7B3D0E6F9B4FF2FDD95ECE9732A592A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:59:0f:1e:d1:6e:d5:38:fa:d9:b5:9c:6c:
                    3d:cb:db:79:4f:95:15:de:a9:c1:49:f5:36:86:1f:
                    78:86:39:15:65:a4:bb:86:cd:48:c4:2c:b1:93:a6:
                    9d:1b:32:4b:3d:cf:d3:91:83:a5:fa:2c:18:bc:7a:
                    c8:00:38:51:f1:70:c4:26:d9:0e:18:f9:1d:c4:a9:
                    84:03:46:ac:a2:9e:e5:7e:01:51:eb:e3:97:15:ed:
                    b9:3d:a8:f5:67:f3:74:34:d7:4f:bb:60:dd:8b:14:
                    d6:01:d0:7c:90:d9:69:49:73:07:94:32:8f:78:65:
                    f0:de:d3:43:fc:7d:03:cc:10:19:03:86:bc:8e:01:
                    49:37:36:c2:4f:f5:3e:7b:5d:9d:4d:b0:e3:a6:65:
                    d3:21:96:0f:9e:37:17:dc:3a:42:e4:d4:fc:87:8c:
                    35:04:ac:30:46:6c:59:5b:c0:06:bc:22:39:45:24:
                    a1:be:30:47:b5:88:84:37:0a:32:79:c0:d7:2a:9f:
                    32:9d:01:f8:fa:7f:e3:40:f6:d5:9b:d6:1f:c6:0b:
                    76:55:f1:23:14:68:6a:19:69:d2:b8:f3:86:7e:c6:
                    4b:e2:77:54:44:9f:5b:00:8b:24:b0:cb:06:1c:b4:
                    4f:5e:38:9e:0a:0d:40:15:83:f6:d2:9f:5c:f7:11:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:CF:70:C7:B3:D0:E6:F9:B4:FF:2F:DD:95:EC:E9:73:2A:59:2A
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:00:da:7b:71:89:03:e7:f1:52:d8:a1:f5:00:55:76:cd:b4:
         72:a9:08:b2:37:4b:25:37:b3:5b:e8:96:f6:78:42:c2:f6:b1:
         ee:44:ac:ce:08:07:4b:b9:2c:78:b0:06:a0:7b:20:65:3e:ae:
         3e:0b:db:7f:35:e3:49:0c:c9:94:99:4c:5b:16:e6:54:9d:5c:
         11:ba:74:d8:d1:2b:46:5c:76:14:cc:25:fc:5f:d0:2e:7a:1b:
         88:cd:5e:0c:1d:05:88:bd:f1:f9:fe:cc:cd:f1:2a:6e:fe:f2:
         3c:98:43:fb:dc:8e:6d:59:7b:d1:3b:b7:0e:f7:37:e7:08:7d:
         15:a8:73:c5:b5:cd:35:f2:39:b4:76:9b:13:dd:ba:bb:bb:a0:
         5a:36:d7:af:e6:b1:63:01:92:ed:4c:1f:c8:42:80:df:33:e1:
         3b:cc:64:e2:9e:8a:e7:3a:c6:6f:bf:61:7e:89:46:25:7b:74:
         77:07:cf:67:9f:a7:44:a0:d6:ab:77:6f:01:11:b6:4a:70:a6:
         64:dd:48:1d:56:08:f7:26:47:b4:ee:1c:c1:9a:97:c8:00:38:
         73:61:eb:21:87:82:c2:6a:cc:6a:5e:91:19:48:9e:77:22:e7:
         98:c7:12:cd:74:2a:d6:05:03:28:25:bf:41:80:20:da:61:69:
         ff:5f:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org