Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32332d3233203d3e20323634343931.roa
File:                     3137302e3234372e3235342e302f32332d3233203d3e20323634343931.roa (raw, json)
Hash identifier:          f8UrO0tcTx9s08VvYzZ2wf2TX/zDdYmojSnevPSTgCk=
Subject key identifier:   2B:3B:99:FF:2E:04:D3:AC:D9:79:2B:57:A6:00:10:0F:55:54:2B:1D
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       1431EA3D6BA2F544F8E27ADA1D7E653031345C53
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32332d3233203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:25 +0000
ROA not before:           Tue 10 Oct 2023 03:06:25 +0000
ROA not after:            Tue 08 Oct 2024 03:11:25 +0000
asID:                     264491
IP address blocks:        170.247.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:31:ea:3d:6b:a2:f5:44:f8:e2:7a:da:1d:7e:65:30:31:34:5c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:25 2023 GMT
            Not After : Oct  8 03:11:25 2024 GMT
        Subject: CN=2B3B99FF2E04D3ACD9792B57A600100F55542B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:ee:49:18:ea:49:9a:de:8a:1f:29:16:90:
                    9d:b0:48:c7:5b:e0:a1:82:50:fa:01:db:a8:e2:7b:
                    1c:9f:c1:25:a5:8f:c1:56:8f:a8:46:7c:a7:27:75:
                    76:7d:3a:bd:29:8e:c1:81:1c:b1:e2:8a:62:d6:0c:
                    d0:23:20:ca:77:64:b5:58:63:f8:17:4a:27:f3:27:
                    47:dd:d9:2a:76:ac:f7:50:33:d3:80:da:3e:b1:a8:
                    66:aa:13:4a:c7:ed:49:f2:97:57:f0:61:a0:d4:04:
                    1b:fa:41:b4:0a:e7:ea:1d:a0:9c:75:2b:5f:04:87:
                    a5:88:84:40:e5:9c:cc:d6:6e:8e:31:cb:ef:cc:26:
                    28:e9:bd:36:44:f4:1f:ec:47:ef:c6:ff:3a:13:ae:
                    4d:31:5c:48:7f:34:bc:aa:fd:f4:12:e0:f9:8b:18:
                    d8:22:e9:d2:1f:e6:69:f0:07:41:c4:50:8d:5d:e3:
                    a0:c2:be:82:5b:c5:df:01:f7:49:4e:77:b9:8e:79:
                    ec:0e:ed:e5:14:2e:e0:f2:f8:ab:eb:3d:ec:21:a5:
                    10:90:2f:55:c6:7a:e8:b1:27:dc:a1:06:44:06:39:
                    b8:49:27:65:33:f0:88:c6:cf:27:d7:67:29:f3:30:
                    d9:d4:4b:d8:77:95:61:d4:05:7a:75:70:eb:c0:ac:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:99:FF:2E:04:D3:AC:D9:79:2B:57:A6:00:10:0F:55:54:2B:1D
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32332d3233203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:28:78:f2:0a:7c:9c:f8:fa:d8:c1:e5:78:c9:c7:f0:25:b9:
         ee:45:4a:d1:78:8c:c9:1b:08:3c:6e:3b:58:1b:95:05:0b:04:
         d6:2b:12:4a:ee:59:b4:81:ef:83:fd:19:64:4c:37:ab:e5:07:
         a1:93:9d:1c:05:12:9d:18:ff:e4:23:c4:b0:34:e4:0d:75:a5:
         7c:6e:6b:72:9e:94:ca:13:1f:3c:a8:e8:25:0c:3f:a5:8a:8b:
         f9:f2:db:bd:9b:81:f5:00:cd:c9:79:8f:3b:34:00:5d:c2:a2:
         fb:3a:5f:99:d0:24:63:45:a8:48:e7:40:9a:5a:3d:cb:89:ba:
         0d:77:5b:9c:eb:f5:41:12:49:1e:29:11:2c:c5:fe:cd:3f:d9:
         fb:7a:aa:be:b9:88:b6:ef:b7:1a:ed:1f:80:59:99:1a:74:06:
         f0:85:31:7a:7e:4e:74:51:77:e1:fc:bd:81:d7:99:5b:e4:63:
         43:9f:c2:f0:36:1f:92:0c:66:1d:ba:60:6c:2a:6f:96:67:e4:
         fb:9d:75:51:47:97:0b:8b:e5:1a:22:52:22:9d:9e:ef:00:4c:
         e3:d8:77:dd:71:34:51:d5:ce:2d:83:5e:93:e4:be:bf:af:77:
         32:49:f3:8e:fb:21:fa:f8:0f:5e:81:2a:7a:61:d6:fb:61:06:
         e2:d4:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org