Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          qeFAsdQ62zYOU6IHAq1jSCaz13PF3UizNbqZF8QfC8w=
Subject key identifier:   60:BA:C9:04:6A:BB:10:6D:76:CE:C3:FD:0F:83:38:36:82:3D:28:40
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       6343F15C91C9771424A4A5AC557C8D160148C2CC
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:19:12 +0000
ROA not before:           Wed 25 Oct 2023 19:14:12 +0000
ROA not after:            Wed 23 Oct 2024 19:19:12 +0000
asID:                     265041
IP address blocks:        170.150.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:43:f1:5c:91:c9:77:14:24:a4:a5:ac:55:7c:8d:16:01:48:c2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:14:12 2023 GMT
            Not After : Oct 23 19:19:12 2024 GMT
        Subject: CN=60BAC9046ABB106D76CEC3FD0F833836823D2840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:11:da:d9:ba:a2:8a:77:bd:0f:b8:e9:06:
                    21:de:43:46:8c:d4:5b:d9:72:61:1e:6f:6b:4d:88:
                    4b:94:18:bf:45:7e:55:55:a6:e7:b0:0b:91:2a:9c:
                    19:3b:8b:84:48:91:db:f3:bf:19:ed:6b:1a:34:c0:
                    19:4a:a1:c7:bc:e8:e7:df:b5:5d:a3:4b:9e:e1:33:
                    c9:1f:7d:fe:99:7d:17:89:d0:63:27:79:0d:b7:0b:
                    e2:cf:eb:65:88:a3:19:d0:c6:3c:55:be:24:89:86:
                    cf:a7:c4:8a:cc:51:75:81:51:b1:53:d3:5b:2e:ea:
                    9b:37:a9:e4:a3:cc:c3:71:1c:25:cc:5f:15:6b:dd:
                    8b:e7:2c:32:07:ee:a8:1f:b3:18:ae:b7:08:b7:15:
                    7c:a1:e8:95:75:d2:99:63:65:2a:05:63:d6:5c:c9:
                    b8:49:11:6b:ba:91:40:5b:89:04:74:4a:03:e9:94:
                    23:01:84:51:68:bf:70:3d:f4:fe:1a:7f:3b:4b:c1:
                    17:99:00:63:87:e3:12:5c:21:88:2c:84:27:db:26:
                    4d:95:99:e3:35:bd:b2:b8:5e:dc:f0:1a:f9:be:2a:
                    a7:cc:23:33:35:ae:06:ae:ae:a5:8d:c1:87:c2:98:
                    9e:9b:25:f0:0f:ae:bc:f8:ec:05:d2:ae:57:a8:70:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:C9:04:6A:BB:10:6D:76:CE:C3:FD:0F:83:38:36:82:3D:28:40
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:68:bf:08:0f:e6:a4:1b:e0:91:fd:5c:08:a8:b6:e1:69:
         ac:bb:72:27:e7:ce:86:89:f9:f2:84:73:5b:23:62:07:75:a8:
         27:69:91:92:c3:47:3f:a5:15:98:10:56:8d:f0:05:6c:06:59:
         e3:4c:9e:ed:65:9e:73:28:ff:7e:f2:b1:09:c5:89:ce:e8:dd:
         30:a3:82:f1:03:52:98:85:f7:c3:a8:52:3e:d6:5d:bd:10:0e:
         3f:5d:02:30:2a:53:52:b1:2f:f3:56:c8:07:38:46:8d:d9:e6:
         57:b0:ab:e0:61:2e:26:15:30:45:7a:df:46:b3:9c:ef:a4:68:
         d3:a0:df:30:36:19:82:d7:5e:16:92:9a:54:27:51:c9:05:17:
         f2:81:9c:41:f3:8a:2a:39:93:12:47:77:d9:18:6e:53:f8:a9:
         5d:86:6f:b4:6c:81:ef:96:a3:a7:86:18:01:46:33:cc:a9:08:
         17:0c:69:bf:7c:c4:aa:77:19:9d:b5:f6:ac:28:8a:9f:a5:4e:
         e9:c7:67:98:29:42:d0:8d:ed:65:e6:94:af:0e:f3:0e:05:3b:
         6f:21:95:20:19:89:8c:36:a2:15:0d:20:14:aa:e6:a4:2c:45:
         2e:96:69:84:c3:45:32:b6:23:bc:7d:66:0e:08:47:40:09:7c:
         bf:9e:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org