Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32342d3234203d3e20323636343237.roa
File:                     3137302e38312e3134382e302f32342d3234203d3e20323636343237.roa (raw, json)
Hash identifier:          WoQolWgcmTdTuZ3MDnqiiNMClbDGQ73NM1L3nr115Uo=
Subject key identifier:   3D:84:F6:02:07:B1:6B:82:5D:91:57:51:66:B8:F5:BB:DD:AC:70:96
Certificate issuer:       /CN=721116431679FAB6BE0B0061F03C820E31FF5333
Certificate serial:       1EA6D136DECCC605F99F0931DBA0F07DD965AD7F
Authority key identifier: 72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32342d3234203d3e20323636343237.roa
Signing time:             Tue 07 Nov 2023 13:02:37 +0000
ROA not before:           Tue 07 Nov 2023 12:57:37 +0000
ROA not after:            Tue 05 Nov 2024 13:02:37 +0000
asID:                     266427
IP address blocks:        170.81.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a6:d1:36:de:cc:c6:05:f9:9f:09:31:db:a0:f0:7d:d9:65:ad:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721116431679FAB6BE0B0061F03C820E31FF5333
        Validity
            Not Before: Nov  7 12:57:37 2023 GMT
            Not After : Nov  5 13:02:37 2024 GMT
        Subject: CN=3D84F60207B16B825D91575166B8F5BBDDAC7096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:ad:8a:2a:1e:ac:13:bf:f4:f7:b4:cf:a6:
                    6c:fb:1e:86:e6:02:11:48:1f:21:12:97:c1:ce:3a:
                    06:68:27:9a:d8:15:67:0d:d4:74:62:36:14:a6:3d:
                    2f:c4:34:66:82:ca:0d:64:70:94:f9:dc:6b:a9:c3:
                    04:85:6f:31:a1:fd:54:89:1e:ff:44:8f:55:30:06:
                    44:13:19:a2:92:3e:e5:3b:73:83:0f:a0:5a:28:5a:
                    3d:a3:c8:a4:c6:1d:05:8c:cc:4a:c8:1b:7c:76:1a:
                    81:9e:db:69:e1:80:46:30:8d:1f:c1:d7:ca:54:89:
                    a0:64:01:da:7f:3c:f5:9e:18:f8:5b:dc:b6:f0:1b:
                    28:2d:05:af:51:d7:64:3f:8a:72:27:a6:6f:48:db:
                    d7:cc:e7:de:99:00:bf:bf:e6:bb:fe:6f:e3:88:18:
                    a7:0e:03:ef:03:11:8c:d3:e3:7a:3e:3e:83:16:33:
                    66:b4:a2:b4:11:a1:9e:43:50:ca:2c:44:ca:18:8f:
                    68:72:93:63:15:1d:fc:d5:fd:ad:f2:b8:8a:ed:48:
                    3d:3e:df:61:18:c6:f2:67:a2:71:44:f2:5e:f6:28:
                    62:c8:9b:df:12:e8:1d:ec:27:16:c1:ee:93:af:63:
                    d4:a0:eb:b8:d1:cb:1e:c0:f5:f0:0b:5a:b1:40:2a:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:F6:02:07:B1:6B:82:5D:91:57:51:66:B8:F5:BB:DD:AC:70:96
            X509v3 Authority Key Identifier:
                keyid:72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/721116431679FAB6BE0B0061F03C820E31FF5333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32342d3234203d3e20323636343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:83:ff:33:4c:29:9c:6e:cc:ce:11:fd:a6:d2:6c:0d:3d:dd:
         f9:46:4e:6a:06:b1:eb:a5:84:7b:61:3d:b8:93:20:05:cc:d4:
         b3:20:46:d9:a5:69:6a:a7:a5:72:0a:f9:92:3e:74:c5:f4:a3:
         76:da:5f:06:49:3f:c7:f0:81:21:37:05:bc:47:53:35:32:de:
         0c:65:bf:19:7e:01:ef:05:00:37:b8:82:00:7d:21:e6:c3:5c:
         ac:bf:4a:71:ae:1a:92:c6:c0:95:d9:e9:0e:89:28:1d:a4:57:
         36:95:15:85:3f:21:e4:bf:28:9e:44:46:32:08:ba:31:35:ce:
         f4:25:9d:8e:78:e5:79:4d:b5:f3:4f:30:7a:f9:64:d5:d2:d4:
         7e:00:09:35:7c:37:20:8c:d8:c3:d8:e9:fb:11:82:a7:30:0f:
         9a:c2:5e:91:47:be:a7:72:da:b3:2f:71:0f:b4:08:46:e2:f4:
         0b:fe:e4:c2:ae:5a:02:49:6f:d8:85:01:7f:b2:c2:a5:43:b8:
         7d:f0:9f:10:2b:2d:5a:2c:29:58:f7:aa:2d:db:44:70:17:91:
         4a:74:7a:04:be:f1:d2:bd:09:fb:0f:4d:2b:3b:81:f0:38:70:
         8b:33:87:77:28:f7:ce:15:7f:d6:ba:bf:6f:79:97:d5:48:71:
         b3:46:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org