Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          djEXk8bX18j5o7E9+zXmZ32yZyWfpOzfFqkqZT0pVgA=
Subject key identifier:   F4:31:67:4A:D3:64:92:34:5F:F4:D7:02:0A:B5:11:9C:21:92:DC:D7
Certificate issuer:       /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial:       4F2B2BB63A1B5610193CE144DE97CFEF95EC6F89
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
Signing time:             Mon 25 Sep 2023 13:38:50 +0000
ROA not before:           Mon 25 Sep 2023 13:33:50 +0000
ROA not after:            Mon 23 Sep 2024 13:38:50 +0000
asID:                     266022
IP address blocks:        170.245.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:2b:b6:3a:1b:56:10:19:3c:e1:44:de:97:cf:ef:95:ec:6f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Validity
            Not Before: Sep 25 13:33:50 2023 GMT
            Not After : Sep 23 13:38:50 2024 GMT
        Subject: CN=F431674AD36492345FF4D7020AB5119C2192DCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c6:91:fb:4c:c4:c1:5f:57:f1:61:25:52:b9:
                    87:cc:f8:4c:64:a9:c7:0b:26:e1:77:f9:b6:f9:eb:
                    af:99:6f:b7:2b:55:3e:e4:54:13:ed:4e:0e:d0:4a:
                    c6:72:67:49:b7:48:86:9e:84:76:00:56:c1:13:06:
                    39:05:1e:da:fa:f0:80:5c:45:8f:08:a0:95:de:1c:
                    fd:1c:1b:c7:0c:9f:a3:d3:9f:95:b9:54:82:9a:46:
                    da:89:f1:e7:f0:6c:dc:da:9c:79:89:99:37:a5:8a:
                    a1:b5:4c:30:39:3f:cf:34:85:07:38:90:26:1a:10:
                    ad:33:de:5c:22:88:96:33:2e:81:65:8b:5b:45:47:
                    a8:44:eb:29:d5:fc:67:a1:e7:81:97:69:df:2e:6f:
                    a0:2e:88:b4:76:9a:ae:91:5a:58:c0:41:30:7e:d5:
                    53:f2:4d:e9:b7:b7:87:f3:72:63:6b:b4:51:72:c6:
                    d8:0b:08:9a:c9:20:3e:5c:89:98:1d:df:dc:d5:55:
                    8f:c9:31:c0:10:ce:4b:6d:20:79:f0:cc:af:83:e9:
                    fa:86:fe:a6:ba:c9:fd:66:fa:47:ca:d0:0a:83:e6:
                    dc:5b:8d:7e:b8:75:e0:0f:c7:66:41:57:d4:58:20:
                    6f:93:2b:01:46:ef:18:97:47:02:46:20:19:63:3e:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:31:67:4A:D3:64:92:34:5F:F4:D7:02:0A:B5:11:9C:21:92:DC:D7
            X509v3 Authority Key Identifier:
                keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:fe:0f:20:57:97:5b:19:38:ff:f0:7e:62:5f:c0:81:25:
         47:11:8c:3c:d9:a8:a7:de:bc:b5:21:a3:25:7a:09:c6:32:8b:
         68:8c:af:10:6a:a7:67:2f:82:c6:fe:ff:bb:e3:ce:a3:cd:f8:
         c5:e3:3d:38:ed:38:d8:2f:c0:f2:79:2d:3d:b6:93:5c:a1:1f:
         70:16:3a:2c:35:5f:f5:da:21:40:af:23:2d:ec:94:9a:dd:fa:
         cb:22:cd:6a:18:d6:33:18:1f:0a:4b:96:74:5d:3f:4d:a7:3c:
         9c:fc:7c:bb:58:78:0a:b8:d7:25:2a:29:a6:ee:f6:07:a1:7e:
         9b:e9:5a:95:f7:7f:91:b4:ed:3f:29:97:ef:d2:5b:fa:89:86:
         58:68:b6:df:4b:d0:f0:2c:d5:cb:1b:89:4f:e0:e3:3a:00:56:
         e5:5e:5d:b4:5b:e6:49:6c:9f:f6:32:9b:31:33:54:23:49:58:
         1a:e1:a6:9e:83:85:27:ba:7d:e1:2c:53:89:48:08:39:d6:95:
         b9:f5:9d:15:00:96:e3:77:47:58:ff:e2:07:8c:02:ee:1a:28:
         9b:dd:be:eb:b3:a0:3a:4d:09:de:8c:a3:26:2b:1c:08:e3:c0:
         0b:f0:12:90:c3:45:05:5f:65:fc:94:12:7a:25:ac:6d:b5:53:
         d8:48:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org