Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133312e302f32342d3234203d3e20323636333139.roa
File:                     3137302e3233382e3133312e302f32342d3234203d3e20323636333139.roa (raw, json)
Hash identifier:          6uDjBLhPHZaxrCK+/zpZ19MzWYrIzhIIaRixKmHdILU=
Subject key identifier:   02:4C:C5:58:84:CB:BB:63:9A:FF:23:5D:6E:1A:D3:30:0F:1F:B9:BC
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       7FBF138063EBB0EAFBEAD448F206B86E1CF90238
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133312e302f32342d3234203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 20:00:01 +0000
ROA not before:           Fri 26 May 2023 19:55:01 +0000
ROA not after:            Fri 24 May 2024 20:00:01 +0000
asID:                     266319
IP address blocks:        170.238.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bf:13:80:63:eb:b0:ea:fb:ea:d4:48:f2:06:b8:6e:1c:f9:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 19:55:01 2023 GMT
            Not After : May 24 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:10:de:45:ff:1d:49:da:8e:87:98:15:fa:
                    e3:d0:53:f3:4b:14:a0:09:4d:69:2a:27:2e:c1:27:
                    a6:57:5b:b9:d0:68:80:a1:47:37:06:cc:47:db:06:
                    2d:98:25:e7:bb:b6:3b:3c:aa:25:94:da:ce:df:e2:
                    20:6e:88:77:f3:03:b0:07:da:a3:24:c0:84:d1:cb:
                    b2:98:cf:9f:df:4d:a4:d5:0a:fb:0c:17:65:fd:38:
                    bf:3f:c7:2d:a5:13:8a:64:aa:ac:b9:4b:9e:3a:64:
                    09:88:da:36:f9:cc:63:25:4f:40:6c:d9:87:79:b4:
                    84:db:bc:3c:f9:86:7d:aa:91:c8:d2:bb:44:3a:aa:
                    c0:f1:c7:74:f4:8e:91:30:b3:bd:3d:98:a8:03:e9:
                    92:af:5b:b5:94:fd:4c:96:bb:16:a1:cd:f6:52:bc:
                    d9:3b:db:75:fa:86:49:39:92:e0:45:ee:07:f9:30:
                    be:6c:3d:fa:59:48:9f:b9:76:7b:7b:b3:dc:94:02:
                    7f:af:26:09:32:ef:88:46:64:c0:6f:0f:a8:49:78:
                    94:ad:b2:3e:84:f5:4d:01:7f:d6:38:da:1d:ce:f1:
                    2e:5b:dd:89:61:d0:17:2d:ff:fe:6a:17:1b:cb:c9:
                    ed:f8:23:02:1a:3f:4a:7c:ec:1c:05:e6:ea:36:4f:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:C5:58:84:CB:BB:63:9A:FF:23:5D:6E:1A:D3:30:0F:1F:B9:BC
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133312e302f32342d3234203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:4b:d4:3d:57:84:1b:85:4d:3e:93:f6:ac:b3:ef:87:8a:96:
         55:da:bd:a3:0c:8b:4b:d8:86:fa:36:16:eb:7e:24:6a:fc:45:
         21:75:2c:be:ae:53:9f:aa:68:a7:fd:fd:d7:43:2e:16:09:b7:
         58:62:5c:0c:d7:65:1a:9b:0d:54:e1:71:69:15:ce:b3:82:35:
         d7:62:09:1d:ea:8e:d7:a9:0c:95:ba:14:44:da:77:b2:92:1f:
         67:f3:ab:8c:4c:b5:92:36:08:a3:89:69:a6:9f:a9:0e:87:cd:
         0d:1b:e3:49:23:68:2e:ed:3c:05:aa:d2:54:21:38:2a:56:3c:
         b8:64:d4:07:d3:8b:c8:ca:37:6b:b8:2e:07:06:58:d4:ed:c2:
         5c:f5:f9:b5:6a:4d:e7:0c:74:e0:ad:ea:a1:ab:42:fc:27:44:
         c7:f8:a5:05:d6:45:53:99:73:89:03:90:75:84:f3:e3:69:dd:
         46:0e:03:b0:78:23:6f:ee:6d:e3:e3:8c:25:12:11:16:5e:82:
         6a:65:af:99:97:ee:9a:8e:02:fe:6a:19:a6:2f:5c:7d:75:1b:
         50:c9:d6:d3:1e:9c:02:00:65:08:94:91:9c:bf:09:7d:19:3c:
         7d:b3:aa:79:1c:f9:dc:6f:38:d2:14:6c:ca:9b:7e:13:a9:a1:
         e5:44:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org