Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32332d3233203d3e20323634393639.roa
File:                     3137302e302e3131322e302f32332d3233203d3e20323634393639.roa (raw, json)
Hash identifier:          5JZi+kS3/DHeDV9OKsc0wct/p6rbJr3o/GsIcFK4FhU=
Subject key identifier:   5A:A7:DC:5C:09:D7:29:54:CC:6B:F2:09:ED:9C:73:8D:B9:3C:AF:0A
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       30FC2F1B4AD2BAF1900256974E8A4B4D2B7E8F75
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32332d3233203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:06:01 +0000
ROA not before:           Tue 31 Oct 2023 16:01:01 +0000
ROA not after:            Tue 29 Oct 2024 16:06:01 +0000
asID:                     264969
IP address blocks:        170.0.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fc:2f:1b:4a:d2:ba:f1:90:02:56:97:4e:8a:4b:4d:2b:7e:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 16:01:01 2023 GMT
            Not After : Oct 29 16:06:01 2024 GMT
        Subject: CN=3082010A0282010100B7B95A4F9540A13B12B47B64E8AA942071155F6A471EB1960400C78E90612BBE52B6B291EB328E379A224209A3B449FAEF13AD62C42119F6869353784224DB855555D65395D318BE40A510F30E8B530B86B7250CD7C56B4785BB1C8FF8FD5BC8E986901E0BBBFF4EAD584C27C8098CDB196571DFD830E2CC92673DB67142EF3A9A5E908FB80355E010C6543CF122690AD9598B3BDD20A8B884CF3B4AC4267C8C28C4A4E48B83A46B7534D96F1A8861FD1E217ED74F11D7950624994D14556EA15A6D09937807D31D340AD2130E891BEDA16EF9EBB3F1A572F963107C817AA0AA60719EFCBDFF45E53615466797D0E576302FAA2252A4C464132EC630C92E723D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:5a:4f:95:40:a1:3b:12:b4:7b:64:e8:aa:
                    94:20:71:15:5f:6a:47:1e:b1:96:04:00:c7:8e:90:
                    61:2b:be:52:b6:b2:91:eb:32:8e:37:9a:22:42:09:
                    a3:b4:49:fa:ef:13:ad:62:c4:21:19:f6:86:93:53:
                    78:42:24:db:85:55:55:d6:53:95:d3:18:be:40:a5:
                    10:f3:0e:8b:53:0b:86:b7:25:0c:d7:c5:6b:47:85:
                    bb:1c:8f:f8:fd:5b:c8:e9:86:90:1e:0b:bb:ff:4e:
                    ad:58:4c:27:c8:09:8c:db:19:65:71:df:d8:30:e2:
                    cc:92:67:3d:b6:71:42:ef:3a:9a:5e:90:8f:b8:03:
                    55:e0:10:c6:54:3c:f1:22:69:0a:d9:59:8b:3b:dd:
                    20:a8:b8:84:cf:3b:4a:c4:26:7c:8c:28:c4:a4:e4:
                    8b:83:a4:6b:75:34:d9:6f:1a:88:61:fd:1e:21:7e:
                    d7:4f:11:d7:95:06:24:99:4d:14:55:6e:a1:5a:6d:
                    09:93:78:07:d3:1d:34:0a:d2:13:0e:89:1b:ed:a1:
                    6e:f9:eb:b3:f1:a5:72:f9:63:10:7c:81:7a:a0:aa:
                    60:71:9e:fc:bd:ff:45:e5:36:15:46:67:97:d0:e5:
                    76:30:2f:aa:22:52:a4:c4:64:13:2e:c6:30:c9:2e:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:DC:5C:09:D7:29:54:CC:6B:F2:09:ED:9C:73:8D:B9:3C:AF:0A
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32332d3233203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:c4:55:63:86:d1:07:ee:21:3e:ba:74:b6:64:83:4f:3e:
         2d:d1:5e:3c:7c:aa:15:bb:3f:8f:7f:2a:94:cf:92:42:f2:22:
         72:63:08:ae:56:68:09:e6:01:a0:af:ba:2a:84:a6:ec:f9:91:
         7b:3f:90:43:fc:f0:7f:13:8c:fd:3e:96:a9:c0:02:37:81:97:
         75:f6:ad:d3:a4:4f:42:7f:fa:71:3f:87:88:da:45:19:03:ca:
         8f:ca:31:fa:39:fd:d3:4e:d3:f6:14:a1:33:d5:d7:c6:60:fa:
         64:87:57:10:ff:aa:52:7a:41:4a:9f:0f:d2:55:ca:61:cf:ee:
         2a:7a:9a:07:51:96:6e:07:06:69:d5:fe:29:6a:8c:ed:ac:bd:
         b7:6f:37:6e:dc:18:a9:6c:cc:75:4c:b4:3c:b4:4d:78:3f:14:
         1a:55:05:48:85:c9:2d:05:77:a4:3f:b4:70:3d:7c:ab:9b:6a:
         33:9e:c4:2c:7c:32:6e:9c:23:2f:41:d8:58:ce:d7:4a:36:e3:
         b2:12:5a:42:97:41:2b:73:02:d9:d6:85:10:ca:df:c7:08:a4:
         1a:98:ac:13:ac:0c:ef:46:35:20:1b:1a:fd:91:c8:96:b7:01:
         b5:fd:fe:85:0f:d8:53:9b:e8:1b:d8:95:78:8c:37:7b:ce:5d:
         4e:72:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org