Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          E8c1+yaI4J1fO6AvrXpH3vhIASX1xiri8cdDd2f7T+Q=
Subject key identifier:   8D:94:8C:AD:7F:4D:FF:6B:C3:50:79:F6:15:A0:6D:AD:27:00:E1:BD
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       179DE8C63B25AB732B58A1C91B03E1B19708B87C
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:40 +0000
ROA not before:           Fri 02 Feb 2024 00:11:40 +0000
ROA not after:            Fri 31 Jan 2025 00:16:40 +0000
asID:                     265181
IP address blocks:        170.233.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:e8:c6:3b:25:ab:73:2b:58:a1:c9:1b:03:e1:b1:97:08:b8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:40 2024 GMT
            Not After : Jan 31 00:16:40 2025 GMT
        Subject: CN=8D948CAD7F4DFF6BC35079F615A06DAD2700E1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:dd:df:65:01:c2:ea:2c:41:31:a0:e0:06:
                    8a:74:37:b1:7e:b2:f6:3a:15:f3:b4:8b:8a:f9:9c:
                    3e:53:3e:62:bc:51:47:9a:be:07:b7:8a:cd:60:bb:
                    c9:0e:87:8c:4d:cb:51:97:8e:94:82:d5:be:08:37:
                    15:ac:82:6f:1f:75:a7:ac:4c:4b:fb:f2:3a:07:a1:
                    8c:b5:4f:26:25:cb:b3:79:d1:f6:29:d9:b4:6d:95:
                    a5:d8:89:ea:aa:28:4a:4e:75:54:18:35:62:7b:c0:
                    e8:05:c3:29:06:dc:c4:9d:17:b2:bd:de:da:b1:cb:
                    7e:0c:ad:77:fb:35:24:a5:5f:ec:60:92:64:2e:94:
                    3d:74:c4:29:cb:0c:db:8b:40:59:a2:81:65:16:ce:
                    71:c1:fb:44:da:00:96:34:a9:61:cd:cd:c7:79:3a:
                    d8:b2:a2:a7:e0:fa:9d:ab:2d:d6:26:fc:fa:f3:a7:
                    b0:20:f8:12:30:4a:14:0e:66:71:64:f7:58:09:a8:
                    53:dc:78:01:a9:30:b8:fd:00:7f:32:2b:74:42:de:
                    8e:39:de:36:64:a9:b1:0a:e6:3e:2f:6b:41:d0:b6:
                    3d:1a:b0:c5:d0:cb:95:de:02:fb:fd:46:60:21:c3:
                    53:9b:7c:b0:ce:ef:16:f4:f0:34:d1:18:32:07:4f:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:8C:AD:7F:4D:FF:6B:C3:50:79:F6:15:A0:6D:AD:27:00:E1:BD
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:af:b6:99:bc:90:d6:26:53:af:fc:6b:3a:16:7d:da:e6:2d:
         24:6c:82:39:84:26:5c:65:78:d5:a1:93:68:3f:07:2c:bf:7c:
         90:15:e7:74:94:13:b3:8a:4e:e5:55:3c:d0:63:ff:09:20:39:
         45:63:b4:76:dd:07:6e:58:ba:b1:fb:a0:59:32:28:13:39:2b:
         a5:db:15:79:1b:2b:c8:21:57:44:e0:53:d3:e6:db:ea:d0:78:
         1a:67:4c:d7:b4:f6:6a:21:8c:ef:78:76:59:bb:b1:5d:f9:4d:
         54:69:80:f6:14:21:35:c9:89:7c:fd:83:f5:e6:bd:18:a2:8b:
         02:50:f6:7f:bf:fc:43:7c:23:f1:10:9c:c1:f4:c7:3c:d0:c8:
         37:f4:15:92:ef:e0:fd:44:05:52:c1:2a:3a:08:73:a8:a5:4f:
         8e:71:04:11:65:a5:6b:0a:be:04:62:0b:13:6c:52:f1:da:28:
         b2:73:5f:d4:87:e1:76:76:76:b7:31:b0:2f:00:a0:4a:fc:7f:
         7d:a8:6d:75:58:4d:16:c7:ae:b9:cd:97:5d:a8:b8:9e:2f:d4:
         fd:b2:c1:b4:64:a7:cf:cc:c9:23:92:c8:21:4e:8d:e5:16:1c:
         b7:4c:c0:73:a8:65:f6:df:fd:cd:8e:ee:46:59:cc:5a:d5:e3:
         8a:b0:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org