Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
File:                     3137302e302e3130322e302f32332d3233203d3e20323634393637.roa (raw, json)
Hash identifier:          7U0Ug/iqrwyKuA3Owtvv0vt1Gl53Z+0DrwaR/34ujkc=
Subject key identifier:   1A:37:C8:60:DD:FA:E9:89:38:0D:12:C9:71:2E:65:50:A8:15:9B:7F
Certificate issuer:       /CN=12A563E6CB281950568A88ACEA43BC4A417021A9
Certificate serial:       123673D8D41EFA1F88C83A73449CBACAA4543699
Authority key identifier: 12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
Signing time:             Thu 21 Jul 2022 20:21:31 +0000
ROA not before:           Thu 21 Jul 2022 20:16:31 +0000
ROA not after:            Thu 20 Jul 2023 20:21:31 +0000
asID:                     264967
IP address blocks:        170.0.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:36:73:d8:d4:1e:fa:1f:88:c8:3a:73:44:9c:ba:ca:a4:54:36:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A563E6CB281950568A88ACEA43BC4A417021A9
        Validity
            Not Before: Jul 21 20:16:31 2022 GMT
            Not After : Jul 20 20:21:31 2023 GMT
        Subject: CN=1A37C860DDFAE989380D12C9712E6550A8159B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:1e:a9:06:2a:9c:32:f5:63:4b:96:71:72:
                    57:df:59:9e:00:0e:00:be:2d:e6:69:9d:c3:c2:e7:
                    a5:cc:18:77:65:5e:78:5b:77:85:06:c4:f7:57:71:
                    f4:56:be:94:f1:1e:a0:9e:ed:b0:98:75:e8:ab:62:
                    bf:ff:39:a9:0c:13:90:f3:42:66:96:a6:f3:dd:f8:
                    af:8e:00:41:f5:9c:83:76:84:ad:83:cc:41:75:be:
                    b8:9d:e6:be:c4:2f:1c:57:db:43:b9:21:a3:3a:59:
                    19:04:9e:08:f2:04:6c:c9:4b:7a:6b:19:22:29:26:
                    cc:5b:e0:68:05:fa:11:7b:c8:c2:52:51:55:7a:52:
                    e1:75:4c:b6:d5:3d:ab:c1:db:49:e9:81:32:cd:86:
                    24:0f:7e:4f:ed:a0:d5:91:b9:08:24:88:40:f0:1d:
                    57:a9:ad:d4:af:be:79:19:c6:b1:15:fc:04:35:8c:
                    9d:dd:c1:ce:3a:c1:94:19:46:cf:04:53:5c:3e:d4:
                    4e:ad:0f:f1:28:d0:8e:68:b7:8a:7a:81:e1:21:85:
                    ac:a7:e4:c3:05:3c:80:f2:9a:61:cc:c2:7d:92:b7:
                    ee:42:f9:1f:3f:0f:7e:7e:94:02:10:54:e4:1d:14:
                    90:5a:95:d7:cb:f0:d6:99:83:c0:3e:6b:70:24:2c:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:C8:60:DD:FA:E9:89:38:0D:12:C9:71:2E:65:50:A8:15:9B:7F
            X509v3 Authority Key Identifier:
                keyid:12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:46:14:6d:0e:b9:0e:25:a4:12:b8:5e:44:a0:71:15:da:
         fc:7c:95:7a:d9:16:b1:e8:97:4f:05:88:fa:6f:f6:24:55:6c:
         0f:10:93:91:32:2d:07:60:ad:06:e9:89:72:89:6d:14:20:d7:
         9f:7f:81:5a:6c:06:90:11:5b:4c:9e:64:f0:d3:52:ae:a9:2e:
         86:2a:d8:91:27:e2:6a:57:fd:05:e0:1e:be:ed:cb:5c:aa:a1:
         da:ea:6c:34:0c:dd:56:29:a5:b2:b3:05:b2:76:c7:ba:04:8f:
         19:7c:28:b0:e7:3c:62:21:65:aa:e6:3b:b9:52:b9:1b:a9:79:
         82:f7:59:b3:aa:ad:b4:50:8c:79:b7:7c:44:59:32:d0:a4:3d:
         24:9b:d5:27:f3:21:fa:07:63:b8:75:20:7f:b8:11:fb:b7:f5:
         91:5f:59:5d:e9:ab:7d:88:9c:a8:53:23:28:2a:23:b0:b6:d9:
         e6:d2:f6:0e:76:ec:29:40:00:95:0c:4c:62:5f:ca:e3:57:c1:
         aa:f4:fe:75:78:0c:0f:9e:6f:fc:f9:0f:1c:85:e6:b0:6e:78:
         e8:e8:ca:f3:0d:81:98:9a:9f:a4:ea:d6:f4:21:ce:f3:6b:f1:
         bf:bc:f5:6d:84:6c:f3:75:44:b8:02:51:10:f8:5a:8f:bd:47:
         10:de:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org