Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          NnSJ3UW3lbSxSW9qb9YJ3PIU5GrNyXKPHuN2SyN/Zzk=
Subject key identifier:   00:C2:90:93:DC:13:7F:0F:28:72:D0:7C:77:CF:2C:00:91:A6:E7:8A
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       671AFA162AEAF45A2805B7946268CC00B96735DC
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:19:35 +0000
ROA not before:           Wed 25 Oct 2023 19:14:35 +0000
ROA not after:            Wed 23 Oct 2024 19:19:35 +0000
asID:                     265041
IP address blocks:        170.150.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:fa:16:2a:ea:f4:5a:28:05:b7:94:62:68:cc:00:b9:67:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:14:35 2023 GMT
            Not After : Oct 23 19:19:35 2024 GMT
        Subject: CN=00C29093DC137F0F2872D07C77CF2C0091A6E78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:de:95:0e:6f:ed:20:68:2f:08:4f:fc:54:
                    bb:c6:e7:1f:a4:68:90:59:a1:47:9b:67:cc:d6:4d:
                    ca:17:e0:75:11:bc:a1:2c:0a:e6:32:62:12:e2:c3:
                    52:4d:84:dc:52:cb:1d:c8:38:e6:f1:cd:2a:45:cb:
                    fe:66:69:b8:17:40:1e:08:5d:ec:59:e8:dc:67:21:
                    89:5d:70:47:db:0d:a3:c7:48:16:8c:f2:a4:b2:a5:
                    16:76:7c:b3:00:fa:f5:49:73:7e:67:bd:45:9a:aa:
                    8d:e1:d2:7b:ff:43:3a:5c:7d:31:2b:01:95:69:f9:
                    a3:3a:69:b9:9e:56:f6:6b:86:7e:ec:44:5b:51:b9:
                    51:44:3c:02:4e:5c:1c:02:95:80:c2:90:bf:8b:e6:
                    ab:3f:a7:8f:39:1f:cd:59:99:ad:0e:48:da:63:7c:
                    91:18:ee:5d:49:1d:95:ed:6a:ad:7e:79:ad:74:55:
                    34:73:4e:1a:b1:67:c0:bf:dc:84:ae:16:1f:d6:f4:
                    b3:78:df:96:ad:f6:f0:61:b3:9e:8c:12:5e:0c:da:
                    08:c2:e5:65:c4:5c:1e:15:3e:bf:5b:89:59:d1:26:
                    3a:93:9e:1c:ac:2e:b6:9e:7c:57:d7:2b:3c:db:f9:
                    57:89:57:33:ca:cf:63:4a:13:52:c8:7a:60:83:03:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:90:93:DC:13:7F:0F:28:72:D0:7C:77:CF:2C:00:91:A6:E7:8A
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:81:90:d2:35:00:3e:6e:53:8d:a1:9d:a0:20:47:0e:67:3b:
         0d:14:59:db:d3:64:ff:8f:3e:4e:5c:0d:7c:51:6b:90:b2:24:
         2e:09:17:b6:4f:38:cc:81:13:5e:b9:9f:76:18:e5:11:33:26:
         ce:db:85:7e:10:06:9c:e1:22:ab:fc:4f:de:c9:6a:17:0c:51:
         71:e3:19:88:49:25:ed:54:68:5f:66:a0:66:36:73:30:0d:03:
         95:3c:15:df:7e:4e:65:a8:f7:6a:9f:94:92:24:8d:11:d7:b3:
         19:3d:8a:e1:9b:3e:87:89:ea:36:54:c9:2e:2e:18:59:e2:dd:
         8d:07:63:7a:1c:80:f4:1f:c8:dc:e9:ba:21:bb:50:13:53:dd:
         ff:d3:15:86:64:56:f4:a4:6b:19:3b:c6:f4:c8:64:ee:1b:ba:
         0b:39:64:36:6d:1f:fe:30:f2:c1:23:9e:e0:80:85:4a:29:1f:
         ef:ae:9c:53:39:17:b5:eb:f8:94:05:e2:bf:e1:20:b9:e6:d9:
         df:d5:95:62:5b:3a:78:3d:3c:38:bf:35:e7:71:db:81:ac:9d:
         6c:13:12:3f:be:f6:e4:10:e2:37:9e:85:df:c7:37:24:5d:0d:
         af:bc:7c:89:af:eb:f7:2e:58:59:46:95:97:89:4d:95:35:d3:
         ff:0b:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org