Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230322e302f32332d3233203d3e20323633393938.roa
File:                     3137302e3234352e3230322e302f32332d3233203d3e20323633393938.roa (raw, json)
Hash identifier:          KHKMVspd78vg0HBDo6sXvHSrboEuoHux0e2EPRxYkGY=
Subject key identifier:   29:40:71:09:C8:31:51:93:E3:0E:80:C4:D3:48:EF:70:F3:B6:A7:0C
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       6175A1A28EDDF39F9179949F0B2A190F763B5A31
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230322e302f32332d3233203d3e20323633393938.roa
Signing time:             Mon 24 Apr 2023 18:18:24 +0000
ROA not before:           Mon 24 Apr 2023 18:13:24 +0000
ROA not after:            Mon 22 Apr 2024 18:18:24 +0000
asID:                     263998
IP address blocks:        170.245.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:75:a1:a2:8e:dd:f3:9f:91:79:94:9f:0b:2a:19:0f:76:3b:5a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Apr 24 18:13:24 2023 GMT
            Not After : Apr 22 18:18:24 2024 GMT
        Subject: CN=29407109C8315193E30E80C4D348EF70F3B6A70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:6e:30:d8:6b:02:64:97:ff:8a:4d:c6:b9:
                    57:8b:b8:c6:e5:f6:58:47:80:11:37:6c:a5:9f:24:
                    6b:f2:1d:52:f2:9d:18:61:04:49:c1:ce:06:47:d4:
                    df:d7:d9:0f:44:cd:39:87:22:33:29:84:16:dc:af:
                    99:5b:1e:70:aa:7b:e4:5a:12:a5:69:0f:4e:fa:a8:
                    92:90:1d:84:35:2d:52:48:26:38:da:3e:c3:50:ac:
                    70:50:67:9f:68:f5:d4:55:7e:30:f7:4d:ed:e8:25:
                    f1:5e:df:b5:18:c6:74:ec:fc:f2:20:0c:82:df:49:
                    c5:a4:10:77:1f:51:a4:f8:5b:e9:b6:df:30:b8:90:
                    5d:70:0e:79:73:56:e5:65:47:04:ca:91:19:52:20:
                    ba:b9:a6:38:ec:f1:fc:70:18:33:3b:85:31:b3:e0:
                    2d:34:fc:c1:c6:f6:c6:e7:e3:98:2f:2f:40:06:d0:
                    13:40:15:46:f1:82:e2:fe:97:3a:72:f7:38:fb:e9:
                    e9:d0:03:29:36:75:40:c9:5f:4c:7a:b2:84:89:93:
                    c9:4b:c3:17:1e:d8:af:d2:92:df:6e:14:46:21:eb:
                    9e:a2:b0:0c:b7:9e:c7:be:bc:97:c6:5b:da:96:10:
                    e2:9d:fe:53:63:1b:2e:d3:af:c9:f8:a9:fe:93:1f:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:71:09:C8:31:51:93:E3:0E:80:C4:D3:48:EF:70:F3:B6:A7:0C
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230322e302f32332d3233203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:89:8e:80:50:4b:00:0a:25:ad:0e:1a:3c:22:77:10:9f:f6:
         59:e4:ff:bc:91:33:ce:31:62:7c:40:60:e8:f1:df:8e:67:5d:
         f1:f5:09:a7:f6:40:1f:7e:a9:4e:cd:4d:4e:f6:09:8f:41:0d:
         c4:e6:c2:a2:5d:cb:cf:5f:36:ec:61:45:87:a0:5a:d9:4e:bd:
         df:52:50:c1:c7:19:10:f5:af:d6:25:5a:52:8b:79:eb:d1:1f:
         91:4c:43:59:fe:51:97:1b:3c:a6:f4:27:0b:80:f2:cb:ad:93:
         64:83:92:88:08:18:f3:63:d4:ab:80:c3:bd:62:3f:d8:3a:81:
         5d:a9:ac:e5:3d:f6:f4:d5:42:9b:6d:d0:6b:71:79:71:99:29:
         15:44:08:fa:e3:8c:5f:ba:9e:7c:98:a7:cd:a8:c3:b0:7c:fc:
         63:a4:63:15:4b:5d:51:35:12:65:c7:07:76:6d:f9:d7:18:bc:
         6d:31:f2:65:0f:5d:4b:8d:ec:db:4c:8e:05:95:8d:80:7b:fd:
         37:a3:c4:1f:43:45:34:d6:15:1e:ab:98:7c:18:2c:30:18:4e:
         49:1e:75:11:ab:73:18:23:c5:f0:92:3c:ff:22:2a:a8:0c:89:
         36:19:f2:5b:96:60:89:0e:1f:59:20:f4:31:63:bd:2c:92:28:
         22:93:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org