Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37352e302f32342d3234203d3e20323633383838.roa
File:                     3137302e3235342e37352e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          Q9tbC6KXTY+Z3CD1lm7S2v3AAgHKiJ6qmAl4oFhN+Xw=
Subject key identifier:   B4:A8:D7:97:13:36:C8:2B:0D:39:AF:CE:F0:DB:1A:AC:9A:0C:2E:85
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       1DD1233BF6EB67863AF74932965F60C766D3E254
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37352e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:00 +0000
ROA not before:           Tue 06 Sep 2022 14:55:00 +0000
ROA not after:            Tue 05 Sep 2023 15:00:00 +0000
asID:                     263888
IP address blocks:        170.254.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d1:23:3b:f6:eb:67:86:3a:f7:49:32:96:5f:60:c7:66:d3:e2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:00 2022 GMT
            Not After : Sep  5 15:00:00 2023 GMT
        Subject: CN=3082010A0282010100E378B7A4A5B5FF5E2D7571AE424211426AC77D4D9FBAFADEDD1E2B0CF09B0A7465FAF4F76D9E2024B89967AA51FFD91D004A1552959E3746FE40E16EA5C121F0419D6D8C0122D8B866335264276E199163E04E2808303270768B51C683F4EF252290CB9D4E7C9024E3D109DE2FE7D6139AF4F3CCFEB882628B798AD58AA16A092264CD5965BAD39E0EFE0421B656575733D8B6D3C7E5B0C7BE8C3D4D43F7D2AA2FF49628B524134F52B79A75406EC1F7F9CC5DAACBCADA25D4120B33A093053A0AC8B2C2D986CA06366F7BBD751DAA76A34741A0976AE541A05BD99B119FA950E0CD986B0BB32DDD7DCBE7F1063F2B40E77EC8CB902837FB5FC527C93D90346B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:b7:a4:a5:b5:ff:5e:2d:75:71:ae:42:42:
                    11:42:6a:c7:7d:4d:9f:ba:fa:de:dd:1e:2b:0c:f0:
                    9b:0a:74:65:fa:f4:f7:6d:9e:20:24:b8:99:67:aa:
                    51:ff:d9:1d:00:4a:15:52:95:9e:37:46:fe:40:e1:
                    6e:a5:c1:21:f0:41:9d:6d:8c:01:22:d8:b8:66:33:
                    52:64:27:6e:19:91:63:e0:4e:28:08:30:32:70:76:
                    8b:51:c6:83:f4:ef:25:22:90:cb:9d:4e:7c:90:24:
                    e3:d1:09:de:2f:e7:d6:13:9a:f4:f3:cc:fe:b8:82:
                    62:8b:79:8a:d5:8a:a1:6a:09:22:64:cd:59:65:ba:
                    d3:9e:0e:fe:04:21:b6:56:57:57:33:d8:b6:d3:c7:
                    e5:b0:c7:be:8c:3d:4d:43:f7:d2:aa:2f:f4:96:28:
                    b5:24:13:4f:52:b7:9a:75:40:6e:c1:f7:f9:cc:5d:
                    aa:cb:ca:da:25:d4:12:0b:33:a0:93:05:3a:0a:c8:
                    b2:c2:d9:86:ca:06:36:6f:7b:bd:75:1d:aa:76:a3:
                    47:41:a0:97:6a:e5:41:a0:5b:d9:9b:11:9f:a9:50:
                    e0:cd:98:6b:0b:b3:2d:dd:7d:cb:e7:f1:06:3f:2b:
                    40:e7:7e:c8:cb:90:28:37:fb:5f:c5:27:c9:3d:90:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:D7:97:13:36:C8:2B:0D:39:AF:CE:F0:DB:1A:AC:9A:0C:2E:85
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37352e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:98:dd:e3:de:e3:09:ed:f9:1e:9b:06:dd:76:0e:f7:59:
         11:62:f2:2f:95:10:06:05:46:80:00:8a:b2:5b:c4:b7:27:fb:
         2f:7f:b0:f6:76:71:11:f9:86:30:53:e9:9e:e8:e9:f7:02:0a:
         8a:9f:45:03:72:11:a2:84:e5:f2:57:40:e1:40:0a:3f:64:9b:
         0f:cf:46:34:fd:1e:ee:56:4c:7c:e0:b1:d9:ee:e9:92:7c:31:
         c5:f0:58:42:3a:d6:a0:3e:d0:bb:ef:39:fd:a7:a5:23:bc:a5:
         77:9f:a0:ce:8a:ce:73:97:3c:6a:93:1a:ee:6f:6c:e6:31:01:
         c2:8e:06:d5:39:d4:89:33:f4:96:d4:e1:cf:1c:bc:2d:3f:15:
         6d:f0:2e:1c:3f:d5:25:6f:e9:d2:a8:00:28:39:e6:41:27:c8:
         11:1c:be:10:65:3d:f0:e9:b5:40:a5:a7:70:ce:22:0a:0d:37:
         9b:24:c9:f3:64:aa:73:e5:9c:ba:fd:25:d8:b4:4f:76:38:79:
         c1:e6:34:6c:d4:be:33:98:ad:e6:b7:cd:eb:eb:4d:8d:2e:b1:
         3d:2e:53:9b:b8:d3:61:4e:2a:81:ad:c0:52:2b:26:54:62:7b:
         0c:7e:22:2c:8f:72:b5:14:48:b8:b8:ca:4d:bb:04:77:77:85:
         c2:b4:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org