Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          tudj1M/AjEfvtN3Q3lKXVVyf72sKOhS2YpAsNgvELCQ=
Subject key identifier:   5F:6A:E7:54:60:8D:5A:8C:87:42:7E:87:66:46:F4:81:F4:64:7E:5A
Certificate issuer:       /CN=3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50
Certificate serial:       65B9840C18BDBD0F8CCA5073526EA6EF6083FDAA
Authority key identifier: 3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
Signing time:             Thu 04 Apr 2024 03:29:33 +0000
ROA not before:           Thu 04 Apr 2024 03:24:33 +0000
ROA not after:            Thu 03 Apr 2025 03:29:33 +0000
asID:                     265093
IP address blocks:        170.233.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b9:84:0c:18:bd:bd:0f:8c:ca:50:73:52:6e:a6:ef:60:83:fd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50
        Validity
            Not Before: Apr  4 03:24:33 2024 GMT
            Not After : Apr  3 03:29:33 2025 GMT
        Subject: CN=5F6AE754608D5A8C87427E876646F481F4647E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:26:38:08:ec:5b:1f:9d:6b:fc:ae:55:05:
                    1c:65:de:34:15:43:74:94:83:14:e2:aa:e4:6e:42:
                    42:b7:0a:63:d1:60:d3:73:42:37:56:c2:34:81:08:
                    2f:8f:f4:f2:3f:3b:62:4b:8c:90:dc:7f:d1:87:0e:
                    0e:1a:0e:c8:19:18:da:1c:db:2d:32:da:98:cf:ef:
                    6d:88:e9:3d:ca:19:33:25:e0:d5:5b:c3:75:ed:28:
                    e5:e9:fb:76:df:9f:08:89:08:48:41:83:02:72:a6:
                    98:8c:5e:98:91:5c:05:00:df:eb:de:aa:76:9e:60:
                    46:52:17:e2:88:03:86:1d:27:17:81:ca:07:73:7f:
                    7a:81:e2:e2:74:01:0a:64:87:a8:59:75:90:d5:7f:
                    9c:42:f7:ad:cc:50:55:24:58:25:6b:4d:7d:1f:8f:
                    98:0d:99:46:da:a3:bf:dc:75:54:3d:5a:bf:73:fc:
                    e0:99:2f:da:e7:32:1d:6a:6c:b7:d4:a7:7f:33:75:
                    51:88:07:64:b0:b1:52:48:b6:0b:1d:d5:1b:99:60:
                    0a:bf:0d:39:e5:f9:ed:fc:9b:fc:a7:28:ae:55:13:
                    9e:5c:f2:ec:c2:aa:3f:08:3c:0c:53:9e:d2:f1:ed:
                    90:1a:d5:d7:f4:4e:24:ad:01:42:5f:80:4e:5a:36:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6A:E7:54:60:8D:5A:8C:87:42:7E:87:66:46:F4:81:F4:64:7E:5A
            X509v3 Authority Key Identifier:
                keyid:3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:ec:83:55:e7:66:d8:cf:1e:95:19:74:6a:91:b8:e8:34:
         e3:62:7a:d3:35:a7:bd:8e:05:3e:60:41:94:c5:4d:a0:dd:ee:
         b5:2b:bc:ed:6b:a9:6e:14:78:81:d4:fe:d6:12:aa:c6:25:5a:
         f6:c8:d4:62:b2:a8:d6:84:24:ce:fb:4c:3b:f6:47:c3:29:87:
         9a:f2:dc:7a:45:69:7a:8d:e0:6a:36:8b:fd:24:88:43:6e:f8:
         eb:40:d4:ea:2f:c1:6d:15:e7:7f:13:7a:ba:d6:3c:5d:4f:3a:
         1e:6a:fb:47:3e:a5:8f:e2:94:d5:70:fa:ed:f2:3e:8d:4e:8a:
         36:58:dc:ef:9e:5f:3b:e6:fc:68:b8:15:8c:ec:e6:f5:c5:aa:
         9c:f2:53:74:b8:4b:bb:05:0d:c7:67:56:c1:56:79:17:04:7e:
         76:7e:60:74:2c:e3:c4:40:1a:52:27:0f:c9:a3:f5:54:91:01:
         92:46:f3:24:ec:36:8e:d0:9e:c7:5f:2d:6c:5d:cd:35:60:84:
         ed:43:92:84:a6:2d:11:6e:a2:7d:52:da:de:af:ea:ef:c0:e8:
         b8:ab:2b:33:c1:54:fe:67:dd:7e:4a:fc:85:5c:0e:ed:c7:ad:
         92:c4:5c:a6:05:d6:2c:40:af:3e:9d:96:0b:68:e8:82:c3:d3:
         0f:55:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org