Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32342d3234203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          JbcOkOlv2wIr01PkIEiFHo0bmkEHlRqOdJIkBO3pZjg=
Subject key identifier:   84:9E:EF:96:0A:C0:8A:2D:B9:03:FB:78:C8:06:F0:25:F7:66:1C:E8
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       05E8C0C7B0FDD8B8A62C63F1472D157904BDF39E
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:00 +0000
ROA not before:           Wed 30 Aug 2023 16:55:00 +0000
ROA not after:            Wed 28 Aug 2024 17:00:00 +0000
asID:                     263913
IP address blocks:        170.231.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e8:c0:c7:b0:fd:d8:b8:a6:2c:63:f1:47:2d:15:79:04:bd:f3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:00 2023 GMT
            Not After : Aug 28 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:34:79:13:00:79:de:e3:49:2d:1d:48:0e:
                    f2:c7:70:8b:a1:0f:80:e6:04:6f:06:0e:fc:ec:d9:
                    67:8e:1a:73:cc:cf:25:f4:c3:85:6e:93:cc:2c:08:
                    e3:1f:28:af:40:54:52:49:85:78:2e:4f:77:e2:35:
                    00:ba:5b:15:8d:6e:5b:93:6f:5a:52:d7:2c:f0:d8:
                    c8:ab:3e:38:1b:7f:34:21:2c:5c:db:2e:30:7c:ae:
                    ca:6b:72:0f:2f:3f:5d:d6:a9:b3:21:90:a8:17:83:
                    5f:47:73:04:f8:1b:2b:97:15:dd:40:0f:5f:92:ae:
                    49:a8:2d:94:aa:e6:2b:e6:8f:23:c6:48:a7:2e:c3:
                    90:b7:02:16:b3:77:21:11:6c:3d:bb:23:c9:c2:83:
                    f4:65:16:94:96:0d:35:0b:10:8a:37:b9:7f:57:36:
                    3d:b0:5c:2e:3f:19:0c:da:78:e9:4c:dc:30:7f:38:
                    3a:2f:1e:54:21:94:fe:f4:7d:4e:96:f0:e3:43:68:
                    1a:02:d1:a2:e1:41:26:a9:c7:aa:ca:43:52:81:89:
                    e0:c3:2b:f1:c7:d6:3b:b9:c9:25:5c:65:78:a5:8e:
                    a6:34:16:b8:4e:37:b0:25:58:5a:7a:eb:bf:32:15:
                    8b:96:54:aa:4e:07:43:18:b2:45:9f:fa:fb:2a:5c:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:EF:96:0A:C0:8A:2D:B9:03:FB:78:C8:06:F0:25:F7:66:1C:E8
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:08:21:b9:26:6e:82:c6:58:d4:48:90:14:b5:b3:aa:f6:
         fd:e2:80:e8:cb:6c:e4:db:a4:bb:eb:c6:20:7c:87:e8:48:2c:
         0b:de:30:ef:dd:99:58:c4:b0:80:2d:3c:65:d1:0c:41:7b:fe:
         f8:9c:70:cd:e7:97:21:37:b3:f8:ba:87:14:44:e7:f5:3a:54:
         6b:1b:55:22:d4:eb:3e:55:0f:33:11:c6:6e:f3:b9:77:46:ba:
         e0:1c:c9:de:44:79:22:43:c6:76:1d:14:3f:ce:05:db:d5:a6:
         92:ec:70:f5:11:c4:b2:d3:24:8a:c8:72:8e:04:7e:6b:0c:3f:
         b4:b4:59:d9:96:ae:37:ec:58:30:3b:75:fa:0e:c6:88:30:6d:
         20:e7:ee:e8:49:62:8d:dd:92:f4:b6:7c:e7:99:fe:37:2a:1a:
         84:a9:52:bc:db:89:7c:d6:31:11:70:c0:db:6a:e5:a5:c8:0b:
         e9:e7:7f:1d:72:53:bd:56:03:a8:c4:72:8a:fd:db:58:29:9d:
         7f:31:bf:26:08:9e:1a:a5:bc:1f:da:fa:81:8e:09:27:bf:ea:
         bf:bf:7c:9f:54:b5:7c:00:36:66:03:fd:40:0c:b4:b5:be:ba:
         93:9a:c0:68:2b:19:6c:74:fc:70:fa:8c:90:1a:9b:83:42:3f:
         bb:ed:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:27:37 2023 by rpki-client on console-fra.rpki-client.org