Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa
File:                     3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa (raw, json)
Hash identifier:          LSWBN1CDa4+9kvw9zwno3v/Ypd4fkxBer5XIe18eI3o=
Subject key identifier:   E7:45:96:EA:FE:71:11:02:5F:95:EA:C5:D3:F2:DA:59:B3:D9:28:E2
Certificate issuer:       /CN=9768BDC37FF7E5159B4DABAF6DA723EC511778CB
Certificate serial:       44C0A25EABEAE8EA5BD4FDD658944658B2BE239B
Authority key identifier: 97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa
Signing time:             Thu 13 Apr 2023 18:59:34 +0000
ROA not before:           Thu 13 Apr 2023 18:54:34 +0000
ROA not after:            Thu 11 Apr 2024 18:59:34 +0000
asID:                     266021
IP address blocks:        170.245.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c0:a2:5e:ab:ea:e8:ea:5b:d4:fd:d6:58:94:46:58:b2:be:23:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9768BDC37FF7E5159B4DABAF6DA723EC511778CB
        Validity
            Not Before: Apr 13 18:54:34 2023 GMT
            Not After : Apr 11 18:59:34 2024 GMT
        Subject: CN=E74596EAFE7111025F95EAC5D3F2DA59B3D928E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:b8:91:e3:43:35:cf:62:f1:1b:ff:38:64:
                    65:6f:e5:44:4e:d7:fc:06:59:be:f3:e8:a9:d0:43:
                    6e:b1:2c:fa:48:20:61:bc:95:bf:52:b5:93:8f:90:
                    aa:7d:77:9c:0a:48:7e:62:fc:57:06:38:30:b9:db:
                    2c:b0:a4:52:8a:31:e4:6b:88:ca:15:28:85:9b:37:
                    d7:b1:a0:f4:5d:1f:c9:01:38:d7:9c:f4:9e:5e:58:
                    f1:94:88:be:36:93:80:96:4b:44:8a:00:f6:2b:4d:
                    88:bf:9e:23:06:c6:e4:e5:e8:7c:e4:6e:6f:79:ac:
                    a0:b6:9a:b0:4d:74:99:2d:2a:0b:18:fe:b4:03:ed:
                    4d:de:ab:fc:c6:b9:17:73:06:3f:0a:9f:98:16:e1:
                    78:9c:ab:f3:95:c6:a0:e4:24:da:87:cf:24:f4:4f:
                    25:14:fc:26:18:16:8d:14:9a:3c:1f:83:78:d7:14:
                    2b:54:35:72:01:1e:f2:9a:a1:50:4f:96:a9:03:88:
                    b3:49:65:92:4a:93:68:d5:22:6c:3e:d9:d6:c3:66:
                    36:d7:41:c6:65:a4:81:e7:ba:b3:5f:fb:3b:b2:76:
                    b0:8c:c5:2c:e4:3b:04:15:e9:fd:bd:f1:80:da:14:
                    b6:b9:eb:72:42:d5:ab:0d:eb:8f:3e:6c:12:ac:d5:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:45:96:EA:FE:71:11:02:5F:95:EA:C5:D3:F2:DA:59:B3:D9:28:E2
            X509v3 Authority Key Identifier:
                keyid:97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32332d3233203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:58:72:6b:f9:3d:e0:95:c6:ae:3e:dd:d7:51:df:41:00:18:
         40:0a:a2:47:49:36:42:01:99:9a:cf:7f:16:e0:dc:54:78:25:
         a4:0d:6c:d7:66:53:4a:e1:62:a2:e4:da:1e:88:b6:8f:4b:96:
         04:0c:3f:c5:12:4e:05:70:10:e3:12:88:65:a2:91:24:88:dc:
         94:c4:65:a3:67:78:c7:d9:b6:51:47:1e:78:6e:e7:e6:19:17:
         7a:c4:fa:59:8c:a7:65:02:b9:b9:b7:44:d0:78:e1:27:6c:63:
         47:b0:5b:1b:37:cb:6b:4f:9a:56:02:70:c0:77:14:48:5b:3a:
         16:7f:76:5f:ca:88:52:85:73:a4:82:0a:db:40:ee:25:1f:a5:
         ff:f4:07:f4:55:70:0b:73:10:e1:18:ef:4c:4b:9b:83:af:01:
         51:02:09:6d:57:1a:cd:2c:36:98:f2:c2:19:75:d8:c7:24:20:
         43:d5:88:45:15:0f:35:bc:3a:9d:59:dc:70:35:4c:29:d2:5b:
         04:c6:b2:cf:53:ae:60:6e:f6:ba:e2:28:a5:4e:02:9a:8d:e8:
         26:4d:1e:d5:6c:8b:84:77:4b:46:e4:b2:6a:a0:32:52:67:51:
         78:22:b4:43:94:dd:d8:53:ed:73:b7:cf:92:e3:4d:8f:fc:3d:
         2a:6c:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org