Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32332d3233203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32332d3233203d3e20323636303231.roa (raw, json)
Hash identifier:          YD1XYGDHYVvwwDTOMPJJlTQl67nj0jEVQHqvE+jY7o8=
Subject key identifier:   46:CD:74:19:C2:DA:06:E4:98:97:0D:C9:72:9E:4C:15:DB:E3:75:CF
Certificate issuer:       /CN=9768BDC37FF7E5159B4DABAF6DA723EC511778CB
Certificate serial:       1AB892E0F98751122C9FE23543609B3CB31907
Authority key identifier: 97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32332d3233203d3e20323636303231.roa
Signing time:             Thu 13 Apr 2023 18:58:58 +0000
ROA not before:           Thu 13 Apr 2023 18:53:58 +0000
ROA not after:            Thu 11 Apr 2024 18:58:58 +0000
asID:                     266021
IP address blocks:        170.245.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b8:92:e0:f9:87:51:12:2c:9f:e2:35:43:60:9b:3c:b3:19:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9768BDC37FF7E5159B4DABAF6DA723EC511778CB
        Validity
            Not Before: Apr 13 18:53:58 2023 GMT
            Not After : Apr 11 18:58:58 2024 GMT
        Subject: CN=46CD7419C2DA06E498970DC9729E4C15DBE375CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:11:06:6f:7b:67:d1:59:71:1b:7c:88:c3:
                    09:b4:cd:f2:ad:78:28:09:f9:a9:ab:30:c6:61:56:
                    e9:0c:c7:ce:e5:62:16:5a:01:db:e2:ba:7a:1c:d3:
                    1a:81:f4:e5:cc:2f:57:a5:d3:89:7b:30:9f:b4:9f:
                    f0:b8:88:55:6b:73:f0:d8:53:f5:c5:a9:4e:d2:b7:
                    25:23:d5:fa:0e:df:e3:64:55:50:8c:42:6a:fb:b9:
                    c6:91:c6:87:7f:c4:c3:c9:2c:d7:88:99:3c:6e:be:
                    79:ac:34:4f:70:6c:12:ec:2e:b1:30:9a:7d:27:68:
                    56:dc:48:9c:4e:ee:32:e3:7a:0b:e6:78:a8:bc:a3:
                    d9:47:d7:7f:6d:bc:91:75:40:9a:6d:5f:2d:52:f0:
                    d0:2f:3b:a0:ba:40:29:92:7f:21:2d:25:19:ba:06:
                    88:4a:58:4f:9f:2e:7f:42:56:df:5c:b2:e7:c9:95:
                    d8:c5:a1:f1:02:fd:ac:38:c7:8c:98:90:ae:ce:45:
                    c1:d9:cb:23:8c:2f:e7:93:2f:ba:5f:82:a6:c3:0b:
                    5a:1c:2c:fb:96:29:c8:8e:75:75:d8:e1:0e:91:1f:
                    c8:77:e9:4a:d5:cf:3b:47:5d:0c:71:2a:0e:f5:d2:
                    91:08:c1:92:bc:d3:49:31:65:88:c2:d4:43:81:a1:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:74:19:C2:DA:06:E4:98:97:0D:C9:72:9E:4C:15:DB:E3:75:CF
            X509v3 Authority Key Identifier:
                keyid:97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32332d3233203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:2d:74:34:f3:36:e2:08:5e:68:5b:c4:fe:34:18:ec:69:
         d9:a7:86:ce:79:07:be:6b:85:6d:ae:9e:8d:c0:98:a5:f9:97:
         68:83:40:ea:5c:c9:a6:51:05:ac:5a:3f:8a:53:f8:cb:86:25:
         93:4e:28:e1:52:4c:75:45:03:5e:ba:74:e1:8b:87:8f:db:c8:
         48:0d:46:53:d0:c3:e7:a6:aa:02:8c:0e:f1:62:88:81:3d:62:
         c8:f3:db:2c:7a:58:1b:c0:66:18:6b:3b:90:18:31:95:fe:0e:
         88:05:57:0c:11:6b:1e:4b:50:7f:cd:3e:95:71:95:90:7c:83:
         8e:31:ca:df:0e:31:1b:68:61:44:53:72:01:15:3b:c0:12:d2:
         fe:4d:e8:b1:60:e6:b6:33:3d:da:dc:46:0f:a2:13:5f:46:c7:
         f3:e3:a2:e7:53:c2:d1:a8:3e:13:dd:44:a8:30:7b:3f:cc:e1:
         a5:91:bf:53:24:f4:cf:c5:3f:8e:1a:18:aa:a4:9d:1b:07:5c:
         69:70:20:99:95:0c:ba:af:ac:12:c6:2a:34:ff:f3:5b:0d:7a:
         f3:1f:24:ef:07:16:0b:4c:97:e0:04:dc:17:aa:06:79:2b:4b:
         9d:67:4a:f8:a7:9b:59:86:61:9d:59:5f:9b:2b:fe:6f:c2:13:
         3b:53:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org