Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130372e302f32342d3234203d3e20323635303233.roa
File:                     3137302e38342e3130372e302f32342d3234203d3e20323635303233.roa (raw, json)
Hash identifier:          sqAw2GnOJ3hf/7qhr0Mf88eg3KnUJzla9z4JBfK7yeg=
Subject key identifier:   5A:FB:B7:44:40:11:9F:0C:F9:72:CF:0B:E9:02:71:A7:73:3C:4E:B4
Certificate issuer:       /CN=38955979C264791E7D2D4649EF8D839B1E81393A
Certificate serial:       57AEF82587BAA2A1647EC5A4F53DF65E7CC33779
Authority key identifier: 38:95:59:79:C2:64:79:1E:7D:2D:46:49:EF:8D:83:9B:1E:81:39:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38955979C264791E7D2D4649EF8D839B1E81393A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130372e302f32342d3234203d3e20323635303233.roa
Signing time:             Tue 23 Aug 2022 18:47:19 +0000
ROA not before:           Tue 23 Aug 2022 18:42:19 +0000
ROA not after:            Tue 22 Aug 2023 18:47:19 +0000
asID:                     265023
IP address blocks:        170.84.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ae:f8:25:87:ba:a2:a1:64:7e:c5:a4:f5:3d:f6:5e:7c:c3:37:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38955979C264791E7D2D4649EF8D839B1E81393A
        Validity
            Not Before: Aug 23 18:42:19 2022 GMT
            Not After : Aug 22 18:47:19 2023 GMT
        Subject: CN=5AFBB74440119F0CF972CF0BE90271A7733C4EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:aa:55:d1:11:fe:6c:b5:14:cc:9a:de:1a:
                    42:91:d1:b1:54:98:1e:73:cb:99:08:e4:3d:b1:76:
                    d8:2b:ae:da:52:96:cf:86:36:b1:32:7a:68:fc:88:
                    69:e9:0f:52:da:c8:82:53:34:ae:52:9f:b0:22:3a:
                    7f:d3:58:56:10:41:70:3f:3a:6e:90:fa:8f:73:ef:
                    ff:10:c9:04:c9:71:54:99:cf:dc:71:f8:e7:1f:94:
                    1c:01:ba:77:b6:ac:cc:93:99:d0:ed:a6:56:2b:d0:
                    3a:cd:66:d1:ab:81:95:a8:b5:1a:a4:22:05:4e:12:
                    a2:36:7d:38:24:96:fc:60:c5:d1:f5:e7:c0:ed:2b:
                    99:0e:b3:18:c6:4f:9a:5a:1c:93:7c:dd:88:61:e3:
                    6f:a6:f6:43:ed:51:7f:43:20:ae:45:5b:ee:56:8c:
                    d1:8f:c0:22:fe:74:3c:ba:dd:4d:ce:9f:84:23:c9:
                    b0:8e:69:6d:83:05:6a:cf:81:e0:75:1f:a9:b2:3d:
                    eb:f6:92:ac:a2:48:a0:21:ae:72:8c:2f:de:35:f0:
                    50:5c:cb:0b:43:41:72:6a:4c:99:a6:b1:d9:e4:ee:
                    16:87:c1:6c:82:d1:ff:fc:70:f0:f9:ea:cb:b0:ed:
                    35:36:7f:5f:44:f9:71:bb:a8:8c:d6:a2:90:f5:26:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:B7:44:40:11:9F:0C:F9:72:CF:0B:E9:02:71:A7:73:3C:4E:B4
            X509v3 Authority Key Identifier:
                keyid:38:95:59:79:C2:64:79:1E:7D:2D:46:49:EF:8D:83:9B:1E:81:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/38955979C264791E7D2D4649EF8D839B1E81393A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38955979C264791E7D2D4649EF8D839B1E81393A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dKXGhCmGRhtTKZCsTUVbmcCS4Y3Fs1TN1U6vg2Rzdsp/0/3137302e38342e3130372e302f32342d3234203d3e20323635303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:b4:47:98:12:10:c4:fd:53:c6:6d:9a:da:78:c4:0d:2e:
         c7:c9:87:77:f5:cd:dc:a7:38:56:89:b4:2a:5b:25:90:f3:a2:
         ae:3b:58:2c:2c:df:3e:ef:73:40:79:30:3a:dd:cd:ab:15:41:
         4f:b2:b3:f0:d4:af:f2:44:9e:b6:10:4f:98:23:23:cb:e1:4a:
         e7:79:f8:48:1f:b2:0a:31:4d:68:bf:bb:9a:92:93:c0:80:bf:
         ba:31:d8:c7:c1:76:b9:7b:46:c8:db:a1:b1:7c:c2:34:85:d3:
         27:a0:22:c6:9c:5a:8e:78:15:70:05:cd:f5:30:4b:c2:16:82:
         ec:f7:06:ca:52:7c:a0:95:95:f6:36:3e:60:8d:b9:7f:12:69:
         d7:1d:65:94:83:40:7e:6c:f3:3b:3e:dc:d1:02:e0:54:c7:9f:
         cb:10:05:4f:92:72:d0:94:68:f3:7a:ce:d2:44:2e:ba:c7:1e:
         de:1b:6b:ec:99:e8:24:8d:ee:0b:9d:30:e8:19:b1:e3:2d:00:
         90:6d:c8:e8:bc:f9:42:be:86:f7:42:63:55:67:2f:79:f5:e0:
         c2:ae:07:05:dd:e6:5c:62:f6:6d:ee:97:47:e9:c4:19:f2:04:
         ce:d8:d7:a5:2b:d5:23:82:5e:8d:bf:2a:6f:c8:21:e6:b5:bf:
         15:24:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org