Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32342d3234203d3e20323636333139.roa
File:                     3137302e3233382e3133302e302f32342d3234203d3e20323636333139.roa (raw, json)
Hash identifier:          P7mFOw0S/1OWtMdOoCgIX5aD+EXdaNABS3VbLlMndgA=
Subject key identifier:   7A:1F:12:F5:D0:72:0E:3C:4F:F3:2D:23:2A:76:AE:97:27:A6:7B:C4
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       17CC27E500219ECFE8CFA61F71BB0056DCC65400
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32342d3234203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 20:00:01 +0000
ROA not before:           Fri 26 May 2023 19:55:01 +0000
ROA not after:            Fri 24 May 2024 20:00:01 +0000
asID:                     266319
IP address blocks:        170.238.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:27:e5:00:21:9e:cf:e8:cf:a6:1f:71:bb:00:56:dc:c6:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 19:55:01 2023 GMT
            Not After : May 24 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:69:11:ca:0b:7c:a5:e7:aa:28:af:11:f5:
                    9f:cd:2c:77:41:84:ec:46:ca:2e:c8:9a:80:d7:29:
                    55:15:4f:b8:50:32:d0:c5:d2:33:c1:2d:a2:b1:bc:
                    8d:61:62:1d:73:e1:70:bc:68:47:a2:5b:96:79:73:
                    56:f7:4d:5d:30:fb:23:db:32:39:c0:0c:21:30:92:
                    87:fc:02:47:05:d6:ea:69:00:a0:dd:6c:0b:dc:b9:
                    fa:a8:7f:f7:68:a2:50:bb:eb:f4:d7:ad:7e:ce:68:
                    ce:a1:8c:69:29:58:dc:e0:9c:3b:1e:1e:80:c8:34:
                    b2:c1:39:20:79:50:97:5e:35:1c:b7:2a:9a:5d:8c:
                    68:c5:33:6a:b4:74:2c:51:f2:49:82:fc:41:1d:ef:
                    45:cf:a8:6a:72:fe:2b:8c:fc:fb:16:22:50:47:64:
                    c8:1f:0a:8f:2a:69:c2:9f:7d:a0:d7:b8:7d:66:ab:
                    b5:d3:f9:8d:81:85:35:08:53:b1:43:3a:c7:13:6b:
                    00:a7:d5:c8:86:4b:6c:93:97:f4:12:13:b3:3a:82:
                    6c:5d:ea:2d:1b:68:18:97:61:9f:01:61:a3:13:2d:
                    5e:04:42:dc:a3:e3:95:44:6a:a0:3a:df:bb:e2:f4:
                    20:45:44:36:28:0a:18:09:05:6d:f7:a6:74:4d:0f:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:12:F5:D0:72:0E:3C:4F:F3:2D:23:2A:76:AE:97:27:A6:7B:C4
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32342d3234203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:be:d7:ed:af:56:ea:69:2e:ae:de:d6:1f:02:27:8f:14:f8:
         6e:79:e3:bf:77:8e:3d:ef:b6:46:bc:8e:8f:42:0e:c1:70:61:
         8b:01:11:0d:76:e2:fe:79:50:d4:01:16:90:5e:29:c2:5d:d9:
         61:09:06:6a:ee:bb:99:a3:5e:40:18:17:ab:3f:57:78:cc:c2:
         b3:b4:71:56:a5:f9:d9:e6:cb:c6:14:54:dd:90:01:81:6b:01:
         1f:4e:a1:1f:41:87:32:0a:6b:f3:68:54:63:46:88:62:e5:45:
         64:df:74:fc:0b:0a:34:99:d6:13:85:fa:ab:b4:01:3b:16:2b:
         7e:43:88:0e:d2:ea:22:47:7d:6d:18:91:57:34:30:18:6a:ad:
         f9:af:d8:b7:65:4d:43:fc:01:f0:0c:be:ce:9a:20:4a:57:a0:
         85:82:f3:83:c6:74:9c:98:51:f3:d0:25:7c:36:a4:d1:5f:7c:
         0f:38:16:b2:2f:3c:fa:46:13:0d:ae:2a:49:7d:2f:a7:70:8e:
         cd:14:6b:51:e4:6f:a4:c0:7a:b1:8a:d3:86:fa:09:cb:74:ed:
         91:52:aa:c4:1c:09:69:35:b2:61:ba:8c:fc:19:72:e6:ed:4f:
         7e:98:56:23:6c:c1:f6:f9:ea:8b:5d:48:04:c7:57:84:4f:78:
         f2:68:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org