Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa
File:                     3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          rxIRzbeKm7l9Kozk3QvgGGimY/J2XL+6cPasMEtRNOo=
Subject key identifier:   59:B1:08:49:DA:12:DB:3E:D9:C0:B9:8C:22:A8:3F:D3:13:43:7B:16
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       73CD3A2B0F1C9564419852F96309A339590D03E5
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:03 +0000
ROA not before:           Wed 30 Aug 2023 16:55:03 +0000
ROA not after:            Wed 28 Aug 2024 17:00:03 +0000
asID:                     263913
IP address blocks:        170.231.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cd:3a:2b:0f:1c:95:64:41:98:52:f9:63:09:a3:39:59:0d:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:03 2023 GMT
            Not After : Aug 28 17:00:03 2024 GMT
        Subject: CN=3082010A0282010100A6779B5EE87411E28DC096647CCCB73405977B9B6FCB489DC793DD45DD24754F8F9BDCF131130D05215B77B681B82AE84D68FC95A0B3432D2F5C1D240189B471073334A8C0797BB3F7B8938748C916664D8D07AF90231C22E4251D3A757764D48C0575EE938FEB82B99406CAFA63B727B0480DB7FD26E5D6870A6BB559BD17927AE24911431035652C57B65B1E9C08987183FD6CC752D4F48FD793417D13EC50BA96126281DBB11CC360E44F583913525743D4097CD61B8F8F6F649A6CA0C02305D3F358BA7E02AAB8DEBBA87993F83BF57001C270DBFFC6D2C3C34FFF4ED093B1A48CE93701570CE52883FA2D87DB4523A66845364AED5DA8B8E431478888D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:9b:5e:e8:74:11:e2:8d:c0:96:64:7c:cc:
                    b7:34:05:97:7b:9b:6f:cb:48:9d:c7:93:dd:45:dd:
                    24:75:4f:8f:9b:dc:f1:31:13:0d:05:21:5b:77:b6:
                    81:b8:2a:e8:4d:68:fc:95:a0:b3:43:2d:2f:5c:1d:
                    24:01:89:b4:71:07:33:34:a8:c0:79:7b:b3:f7:b8:
                    93:87:48:c9:16:66:4d:8d:07:af:90:23:1c:22:e4:
                    25:1d:3a:75:77:64:d4:8c:05:75:ee:93:8f:eb:82:
                    b9:94:06:ca:fa:63:b7:27:b0:48:0d:b7:fd:26:e5:
                    d6:87:0a:6b:b5:59:bd:17:92:7a:e2:49:11:43:10:
                    35:65:2c:57:b6:5b:1e:9c:08:98:71:83:fd:6c:c7:
                    52:d4:f4:8f:d7:93:41:7d:13:ec:50:ba:96:12:62:
                    81:db:b1:1c:c3:60:e4:4f:58:39:13:52:57:43:d4:
                    09:7c:d6:1b:8f:8f:6f:64:9a:6c:a0:c0:23:05:d3:
                    f3:58:ba:7e:02:aa:b8:de:bb:a8:79:93:f8:3b:f5:
                    70:01:c2:70:db:ff:c6:d2:c3:c3:4f:ff:4e:d0:93:
                    b1:a4:8c:e9:37:01:57:0c:e5:28:83:fa:2d:87:db:
                    45:23:a6:68:45:36:4a:ed:5d:a8:b8:e4:31:47:88:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:08:49:DA:12:DB:3E:D9:C0:B9:8C:22:A8:3F:D3:13:43:7B:16
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:df:27:82:c0:4e:b8:83:63:be:d3:14:84:ae:90:0a:62:
         48:47:26:a4:74:03:41:97:56:9d:27:ba:df:8d:06:72:95:14:
         6a:7e:39:c3:46:b8:b9:f8:c9:11:f1:e5:33:d1:67:fc:37:e0:
         b2:a1:e1:25:7a:43:7c:13:9e:91:de:fc:48:68:5f:24:b1:32:
         06:d0:26:89:df:2d:2b:2c:54:bb:0f:55:0d:35:aa:80:d6:a4:
         49:9b:ee:c5:43:b7:24:b9:84:d0:f3:d7:17:d2:fd:54:7a:47:
         b8:66:1b:64:f5:b9:4a:e7:7e:9e:1e:89:d1:81:9a:a5:d7:b9:
         79:11:9f:44:28:da:de:b3:7e:d5:b8:10:66:16:72:94:39:17:
         cb:cb:04:c3:f8:d7:1d:87:47:59:53:74:db:7b:e2:4c:82:0a:
         28:ba:08:a0:a9:45:c3:17:81:07:52:09:cd:ae:2e:24:5b:ad:
         ea:b6:a6:24:ee:ef:52:10:53:92:e4:56:af:2b:de:f5:18:c0:
         19:71:73:84:05:e4:db:b4:61:c4:37:83:01:ed:39:11:b7:e7:
         4a:2e:d9:49:e2:84:41:33:40:a9:5e:cd:13:51:e1:20:28:82:
         59:29:e2:61:40:ac:8a:87:54:68:3e:d0:85:7e:7f:2c:be:54:
         7f:c8:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:27:37 2023 by rpki-client on console-fra.rpki-client.org