Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
File:                     3133382e39392e37302e302f32332d3233203d3e20323634313630.roa (raw, json)
Hash identifier:          Y/OzEvRTtxl2C1RZvmtOr61IusGJnMtYB+ZNv+BNQck=
Subject key identifier:   A9:F8:78:6A:11:1D:0B:FA:3F:37:98:49:28:D2:04:B1:68:F9:1F:4F
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       58C06246247DCB838B1C64A9E0D71F9CB7CF7908
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
Signing time:             Fri 27 Oct 2023 21:31:20 +0000
ROA not before:           Fri 27 Oct 2023 21:26:20 +0000
ROA not after:            Fri 25 Oct 2024 21:31:20 +0000
asID:                     264160
IP address blocks:        138.99.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c0:62:46:24:7d:cb:83:8b:1c:64:a9:e0:d7:1f:9c:b7:cf:79:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Oct 27 21:26:20 2023 GMT
            Not After : Oct 25 21:31:20 2024 GMT
        Subject: CN=A9F8786A111D0BFA3F37984928D204B168F91F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:ce:6e:7b:24:6b:4a:d4:c8:29:dd:bc:3a:
                    0a:71:ae:0b:66:e4:98:2c:4b:b3:08:46:d6:69:4a:
                    b8:84:0e:8c:10:58:ef:80:36:8b:e3:a1:39:cc:c3:
                    a9:9d:14:b4:23:a3:38:de:e7:b0:88:67:22:f1:ec:
                    9f:44:ac:be:68:2a:fd:6d:72:f8:f3:5e:a2:bb:ef:
                    f4:fe:fc:26:bb:b2:2c:d6:e4:92:17:4a:e8:6f:08:
                    7c:d8:8f:00:48:b2:41:a2:d8:ed:c6:81:c3:5d:96:
                    20:d0:e6:a4:d7:42:90:b3:5e:28:25:f0:e8:30:7f:
                    5b:34:49:37:86:b4:77:e4:47:50:f1:5f:3e:23:8b:
                    bb:c6:d1:f5:62:2a:13:f2:dd:34:b2:51:0b:a9:0c:
                    1b:98:83:83:f3:a2:6f:f4:3e:26:42:e2:d3:5a:7b:
                    4d:c6:dc:c7:2e:0c:78:71:1e:d7:2c:9c:58:c8:e7:
                    df:ef:ec:87:59:45:2f:ad:ff:aa:c1:3d:6e:a7:c5:
                    81:05:6e:f2:31:df:df:5e:cb:40:06:b5:05:7b:03:
                    d9:9c:15:9e:85:b6:1f:f5:0d:5c:6a:39:4a:8d:df:
                    23:6e:7f:fb:fd:11:9c:9c:6a:ca:90:ff:bc:a4:e9:
                    2b:4e:a7:2c:3d:2e:b8:67:26:82:59:6d:94:41:f3:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:78:6A:11:1D:0B:FA:3F:37:98:49:28:D2:04:B1:68:F9:1F:4F
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:fa:4a:72:23:6c:26:13:34:64:a3:f5:15:67:85:ee:9a:7e:
         5a:99:83:04:0e:79:c8:04:5c:68:1e:d7:8a:e1:e5:06:aa:45:
         31:94:00:09:84:99:7c:92:c9:73:d1:4c:15:67:89:95:bd:4c:
         1f:39:f6:bc:37:18:ab:a3:d1:84:2c:30:c6:c2:2f:41:72:c3:
         b9:30:0b:a1:4a:d5:c0:de:30:cb:7b:85:3a:dd:cb:36:76:af:
         44:a3:c8:0d:9d:27:37:f0:7c:c0:aa:b9:34:14:91:6c:b6:65:
         5b:2f:1a:b2:76:aa:5a:03:18:34:3d:a1:3a:73:63:01:a7:c8:
         b4:a6:e8:9b:2d:fb:a8:4a:45:de:bf:e3:e5:71:b8:55:e9:13:
         e4:0a:fd:ec:35:df:e3:9f:df:e6:8a:d1:a7:4d:7d:86:ff:27:
         fc:d7:ef:67:c7:9e:99:ab:35:b6:ab:88:3f:ae:47:78:62:c0:
         c3:f6:ef:d5:5e:55:97:db:6f:04:57:71:d6:1a:dd:86:c6:d5:
         ef:a7:53:b2:39:57:1a:00:39:43:f7:37:dc:71:c9:1f:67:33:
         c7:30:24:ca:49:1c:b5:e9:60:0a:8f:f7:c8:51:19:17:48:f5:
         a5:8b:68:53:ad:b8:2a:3c:fd:6e:22:71:19:2b:72:70:9a:25:
         e3:32:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org