Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3232203d3e20323635303631.roa
File:                     3137302e3233312e35362e302f32322d3232203d3e20323635303631.roa (raw, json)
Hash identifier:          rP+kie8bPyCdAoqLExae3JOOCblidlgG0X+BmKuwxyU=
Subject key identifier:   A5:A7:CF:54:09:39:CB:C0:7A:A6:57:E6:3A:6B:54:6E:8F:DD:5C:C5
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       25AF10BDFECD874034B223FF395E4E2E7EB60B55
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3232203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:52 +0000
ROA not before:           Tue 28 Mar 2023 14:42:52 +0000
ROA not after:            Tue 26 Mar 2024 14:47:52 +0000
asID:                     265061
IP address blocks:        170.231.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:af:10:bd:fe:cd:87:40:34:b2:23:ff:39:5e:4e:2e:7e:b6:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:52 2023 GMT
            Not After : Mar 26 14:47:52 2024 GMT
        Subject: CN=A5A7CF540939CBC07AA657E63A6B546E8FDD5CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:9c:8c:5c:dd:b0:22:e4:a2:11:26:19:55:
                    19:74:45:a8:73:ff:cd:35:76:a0:25:a8:08:18:da:
                    7d:a1:66:ad:ac:32:9a:d9:a9:e8:41:d0:4d:fc:9f:
                    66:25:da:15:7e:f8:47:9b:ab:01:1e:1e:65:31:b2:
                    88:82:a0:ee:8a:8b:c6:66:69:bf:0f:2f:b2:84:20:
                    04:5b:59:2b:9c:3f:e2:3f:79:e6:d8:b7:74:4a:df:
                    b3:01:66:a9:eb:a5:54:ab:89:31:1d:bf:71:65:65:
                    f6:db:3a:d9:99:27:a3:6e:56:11:c5:2c:df:07:51:
                    99:6e:6b:94:e4:36:4a:49:e5:d5:f4:df:9f:4c:41:
                    48:6a:72:8b:1c:c9:d6:4d:63:7b:2d:ec:8a:1d:37:
                    c9:b4:3c:b5:dc:f6:5d:97:a7:ae:a2:42:92:12:66:
                    d3:46:be:f9:43:2a:73:e7:8b:4b:f6:89:3b:e7:58:
                    d8:37:a0:f0:6c:f1:96:43:2b:f8:b0:ea:c9:63:ec:
                    63:63:82:08:a8:0b:fb:04:8f:a3:e0:bc:ab:ed:3b:
                    8b:ec:77:34:a7:7e:de:ea:64:88:be:2b:98:05:80:
                    c0:64:3d:c7:0d:43:12:6a:6f:25:22:25:3e:61:2f:
                    4b:88:75:e0:76:0f:0c:c7:0f:f6:91:21:83:ce:ff:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:CF:54:09:39:CB:C0:7A:A6:57:E6:3A:6B:54:6E:8F:DD:5C:C5
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3232203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:fe:aa:93:a1:5e:b3:4a:c3:bc:df:3c:ff:ef:a4:8f:80:
         20:60:77:07:72:04:87:7c:d7:d2:a1:42:f6:a9:ae:2c:e0:2f:
         0b:2f:4e:39:57:a0:ca:e0:b1:e5:bc:58:9f:08:09:94:5a:54:
         d3:65:c4:7d:19:13:fd:fd:ae:e7:7b:38:58:ac:11:88:bb:ef:
         bf:7c:da:39:51:a3:5f:d2:8d:21:cd:78:25:a8:59:fd:34:e9:
         2f:1b:65:fc:01:55:1c:8e:b8:8f:79:d5:55:e3:57:2d:a7:7c:
         c1:d4:ac:4a:73:8f:ee:53:a3:d3:20:8c:b5:db:6d:3e:5e:94:
         82:ed:12:e9:92:d1:5e:69:1e:30:dd:cd:96:18:62:cb:b9:b7:
         36:cd:01:76:d8:5f:3f:fd:c3:84:ad:fe:8e:7b:60:4a:b2:86:
         b4:0d:2c:41:f9:90:0e:0b:c2:1e:4e:22:44:de:bc:d1:b3:44:
         8f:7d:ec:ef:16:35:d8:8a:28:2a:98:10:42:a9:b7:2e:0f:ec:
         bd:ca:ce:92:4b:20:ab:a1:7b:dc:b8:ab:a5:8f:52:18:12:a0:
         cc:3c:33:17:bc:73:db:05:e6:91:5a:2b:e8:1a:6a:71:12:a2:
         b6:de:58:bc:3c:96:a5:dd:f8:6f:33:f9:6f:75:81:32:26:fc:
         81:02:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org