Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
File:                     3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa (raw, json)
Hash identifier:          N+kM0lWGqrLt746vqLZUs3WUskBVzezgwtThgnLTn0o=
Subject key identifier:   5D:B3:CF:A8:49:E2:DC:96:FD:46:0F:3F:4E:18:87:B3:02:74:1B:59
Certificate issuer:       /CN=DF4056594C79E710ED473E96AAF3A32B0E263C13
Certificate serial:       56A0D169A942F560F11F7CF247D9B178A23FC852
Authority key identifier: DF:40:56:59:4C:79:E7:10:ED:47:3E:96:AA:F3:A3:2B:0E:26:3C:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
Signing time:             Thu 04 Apr 2024 19:13:27 +0000
ROA not before:           Thu 04 Apr 2024 19:08:27 +0000
ROA not after:            Thu 03 Apr 2025 19:13:27 +0000
asID:                     267429
IP address blocks:        181.191.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:d1:69:a9:42:f5:60:f1:1f:7c:f2:47:d9:b1:78:a2:3f:c8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4056594C79E710ED473E96AAF3A32B0E263C13
        Validity
            Not Before: Apr  4 19:08:27 2024 GMT
            Not After : Apr  3 19:13:27 2025 GMT
        Subject: CN=5DB3CFA849E2DC96FD460F3F4E1887B302741B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:eb:3f:27:c5:d0:26:00:39:0e:d2:07:a7:
                    a8:0b:8e:2c:51:59:83:0e:59:ca:98:0c:64:58:07:
                    c9:7f:27:c5:31:eb:e2:c2:36:8a:d6:41:32:b6:cc:
                    df:d0:45:c9:a1:5b:13:15:b5:a0:c0:d9:46:ce:7d:
                    7e:d6:ac:36:f0:0e:3d:50:f6:96:ec:c5:a0:0f:bf:
                    c2:58:e7:d6:9b:1c:f3:a8:98:e5:b8:fe:01:37:a1:
                    37:0c:5e:f6:cd:4c:f4:4f:9b:06:dc:6c:bd:46:81:
                    96:d3:ef:9f:c9:01:dd:2f:16:33:b8:70:2b:c9:46:
                    4d:c5:32:a0:7b:28:55:f5:41:5c:3b:e8:26:62:e3:
                    08:b0:13:66:a2:05:dd:b3:70:0c:4f:57:6b:d4:3d:
                    19:c8:87:c7:1f:a1:9e:d2:0d:32:39:e5:cf:4f:2e:
                    d7:57:7c:a9:8d:f2:d8:da:1c:37:28:b2:90:46:d8:
                    e1:1c:57:da:3c:7d:12:6a:85:af:16:d1:4d:a2:a4:
                    5f:af:01:d7:3a:01:13:a5:7f:6b:ec:0d:21:9d:6b:
                    32:11:13:51:3e:f5:b0:42:ec:82:56:97:cd:26:b6:
                    7b:cc:c8:91:5d:65:d3:8b:86:69:a3:63:d6:4d:f0:
                    a2:1a:13:a4:11:6d:ea:16:b3:33:53:35:ec:da:9a:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:CF:A8:49:E2:DC:96:FD:46:0F:3F:4E:18:87:B3:02:74:1B:59
            X509v3 Authority Key Identifier:
                keyid:DF:40:56:59:4C:79:E7:10:ED:47:3E:96:AA:F3:A3:2B:0E:26:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF4056594C79E710ED473E96AAF3A32B0E263C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/1/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:84:dc:a1:e0:aa:f5:8a:cd:9e:c7:c7:64:3f:83:21:1a:8a:
         0b:bd:4c:8e:ed:36:20:c1:ea:a1:95:55:1e:b0:6e:e3:18:03:
         76:09:2d:8b:86:dc:2e:2b:db:df:b5:55:65:35:1f:eb:2d:a0:
         71:d6:8b:ab:36:b7:1e:ae:b8:b2:65:72:96:85:c5:ed:62:48:
         0d:1d:7e:84:e9:3a:0d:0e:c7:1c:b7:d5:4f:a8:d1:ba:57:34:
         05:aa:52:9d:40:a0:73:70:dd:9a:75:9c:90:1b:cd:5e:47:9e:
         71:15:c7:20:8b:07:d2:3f:0e:ba:6b:f3:f8:80:16:46:fe:fe:
         dd:cf:04:70:db:71:11:ed:b7:6a:16:32:fc:07:87:4c:c5:02:
         e6:fd:ea:71:bc:44:2a:f1:1d:c7:aa:8b:12:dd:66:a7:e6:1f:
         9f:cc:bd:5f:bd:1c:b4:88:c8:8a:89:35:fc:8c:2a:f9:a4:01:
         88:df:3c:a2:f0:18:dc:b2:a6:c7:92:99:49:94:de:97:a1:e3:
         78:d7:e8:ae:eb:6d:89:e7:c0:d8:76:02:1b:03:c4:11:ca:b4:
         57:7f:b2:8a:60:20:77:54:b3:c3:61:0e:fa:1d:10:ee:92:25:
         82:47:ca:92:9d:71:82:d8:9b:e6:66:ec:1e:2e:6a:f8:f0:50:
         c1:6e:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org