Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa
File:                     3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          hNcGfeGJ9EC7oD11+Zr2fwG13vWtTNnDBuNy3or834I=
Subject key identifier:   28:EC:3F:0A:C3:3C:BA:D0:05:E8:4C:9C:FB:7F:62:36:E1:CC:3E:DF
Certificate issuer:       /CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
Certificate serial:       742C936026CF63AF152BAFEE686940DF2CE021C8
Authority key identifier: 2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa
Signing time:             Mon 15 Jan 2024 21:00:00 +0000
ROA not before:           Mon 15 Jan 2024 20:55:00 +0000
ROA not after:            Wed 15 Jan 2025 21:00:00 +0000
asID:                     264426
IP address blocks:        170.239.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2c:93:60:26:cf:63:af:15:2b:af:ee:68:69:40:df:2c:e0:21:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
        Validity
            Not Before: Jan 15 20:55:00 2024 GMT
            Not After : Jan 15 21:00:00 2025 GMT
        Subject: CN=3082010A0282010100E449848DEB3BF6148FC9EBF5E691440C6935A84BD770DB71731BEEC2FA00970AC0026B721C364A3C4D1B15B4AC5999D6B1DBFDB39535C8C5D8D8C87D1D9E8751CB411942C82B29F97F3D2CC78D7EB2CF51FB5713F594BB5A9A6B779F4804CF9756813172FFB4520AB156C15707AD3748151DA89074EA56FEE796E593027FEE9874B5FC796CD4917C47CA33C2B813FDD71D25C22A54AB798B0C12CCCA929BF18CC435DCCFB422CBCC2D308F91F337AB78222EA099EA767641BC9646DB76D13B90D92138997C83287EC18B1490CF74BBEB33D3132378C3700D45D324ACD412CC075D37CE1F774188FA6F89AF5F769D8DDD5723C1668BDF2B61B67C8B95075EAAA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:84:8d:eb:3b:f6:14:8f:c9:eb:f5:e6:91:
                    44:0c:69:35:a8:4b:d7:70:db:71:73:1b:ee:c2:fa:
                    00:97:0a:c0:02:6b:72:1c:36:4a:3c:4d:1b:15:b4:
                    ac:59:99:d6:b1:db:fd:b3:95:35:c8:c5:d8:d8:c8:
                    7d:1d:9e:87:51:cb:41:19:42:c8:2b:29:f9:7f:3d:
                    2c:c7:8d:7e:b2:cf:51:fb:57:13:f5:94:bb:5a:9a:
                    6b:77:9f:48:04:cf:97:56:81:31:72:ff:b4:52:0a:
                    b1:56:c1:57:07:ad:37:48:15:1d:a8:90:74:ea:56:
                    fe:e7:96:e5:93:02:7f:ee:98:74:b5:fc:79:6c:d4:
                    91:7c:47:ca:33:c2:b8:13:fd:d7:1d:25:c2:2a:54:
                    ab:79:8b:0c:12:cc:ca:92:9b:f1:8c:c4:35:dc:cf:
                    b4:22:cb:cc:2d:30:8f:91:f3:37:ab:78:22:2e:a0:
                    99:ea:76:76:41:bc:96:46:db:76:d1:3b:90:d9:21:
                    38:99:7c:83:28:7e:c1:8b:14:90:cf:74:bb:eb:33:
                    d3:13:23:78:c3:70:0d:45:d3:24:ac:d4:12:cc:07:
                    5d:37:ce:1f:77:41:88:fa:6f:89:af:5f:76:9d:8d:
                    dd:57:23:c1:66:8b:df:2b:61:b6:7c:8b:95:07:5e:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:3F:0A:C3:3C:BA:D0:05:E8:4C:9C:FB:7F:62:36:E1:CC:3E:DF
            X509v3 Authority Key Identifier:
                keyid:2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:df:8d:da:cd:0c:2e:45:aa:d6:6d:97:32:0a:4f:3e:e0:bd:
         72:44:a6:7a:fd:e7:5a:82:6e:83:de:46:52:f8:c8:28:d4:e0:
         52:6a:6b:56:b8:2f:da:51:b2:ec:0c:b1:3c:8d:2b:e8:67:08:
         01:0c:58:e1:72:ac:fc:00:cc:36:92:ec:c8:08:a5:53:21:dd:
         d9:6a:97:eb:50:0a:24:c8:25:6c:0c:8f:91:34:92:f1:2c:ec:
         4c:9c:18:e3:30:6c:af:e3:80:7d:05:fe:8f:15:9e:60:79:53:
         38:85:f5:bb:bb:ab:e1:47:14:6d:f4:a8:fe:0f:5c:59:86:67:
         c4:8c:6b:cf:ad:1f:22:41:33:93:15:bc:42:21:3b:43:ca:ad:
         bf:9d:95:73:7d:00:54:00:3a:80:3b:c0:6b:a4:5e:7f:ad:c7:
         e5:4f:69:66:de:e5:a2:a3:85:5d:b4:01:4c:41:15:f6:74:3f:
         e0:55:c6:00:d3:82:06:f1:f8:c5:0d:30:96:4d:a9:1e:a9:c8:
         ad:ce:38:af:7b:79:e6:1c:cc:6d:b4:aa:13:ea:ae:2e:01:fd:
         22:e6:cc:d9:14:59:8d:9f:f4:14:3e:c2:7e:f9:df:27:2c:99:
         95:83:31:f0:92:a1:4f:9c:83:92:83:f1:aa:55:70:13:84:37:
         4c:28:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org