Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32312e302f32342d3234203d3e203631383537.roa
File:                     3137302e3233332e32312e302f32342d3234203d3e203631383537.roa (raw, json)
Hash identifier:          Wc1x8wAOny1EsfJAZEG4zde3R9uiOwIKrn3LtyBBNK4=
Subject key identifier:   2B:45:60:BD:DA:D6:54:94:27:6D:56:01:6B:43:22:4D:7E:CB:DF:37
Certificate issuer:       /CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Certificate serial:       6A8401CB4B80960A26ED2E139219F4C222D9CCA3
Authority key identifier: 38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32312e302f32342d3234203d3e203631383537.roa
Signing time:             Wed 17 May 2023 12:40:01 +0000
ROA not before:           Wed 17 May 2023 12:35:01 +0000
ROA not after:            Wed 15 May 2024 12:40:01 +0000
asID:                     61857
IP address blocks:        170.233.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:01:cb:4b:80:96:0a:26:ed:2e:13:92:19:f4:c2:22:d9:cc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
        Validity
            Not Before: May 17 12:35:01 2023 GMT
            Not After : May 15 12:40:01 2024 GMT
        Subject: CN=2B4560BDDAD65494276D56016B43224D7ECBDF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:f9:69:8a:58:c4:36:1f:98:18:85:9d:44:
                    77:84:20:bf:d7:6c:88:bb:8d:b1:c0:96:3d:51:49:
                    69:83:23:cf:23:b6:f7:0d:b7:6c:05:a7:c5:c8:0e:
                    fe:b3:7d:56:98:91:32:04:25:0f:95:8c:a6:df:5d:
                    00:2d:3d:6f:c2:4b:0a:dd:cd:6e:38:cd:63:81:fa:
                    0e:2d:f0:69:48:77:7b:52:f2:24:60:47:fd:03:be:
                    a6:04:88:0d:6b:63:e9:fe:f1:ad:3c:ae:ae:c4:e9:
                    42:db:40:2b:07:1f:19:e0:e5:bd:b9:c5:44:31:da:
                    df:2a:f9:50:e1:e0:76:ef:46:0b:2d:7b:b7:64:6e:
                    fb:67:69:23:43:98:89:ab:6c:bc:36:96:ae:63:f4:
                    fd:ef:12:c7:0a:be:25:2a:14:8e:26:de:0f:af:99:
                    f5:a8:ac:46:15:0b:8e:59:2c:8b:e3:16:8c:4d:e3:
                    c7:16:a2:2d:82:0d:60:cb:44:0d:4a:f5:bc:47:b1:
                    ea:0e:ff:bd:c9:ac:bb:08:a8:9a:50:63:0a:34:27:
                    56:36:6b:2e:19:98:a5:cd:25:3f:f1:fa:0a:5b:b7:
                    c5:5f:86:6d:a0:12:87:63:12:e6:90:34:14:30:05:
                    9a:e5:28:c8:d6:0b:f7:ff:c2:ac:59:cf:a8:9a:22:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:60:BD:DA:D6:54:94:27:6D:56:01:6B:43:22:4D:7E:CB:DF:37
            X509v3 Authority Key Identifier:
                keyid:38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32312e302f32342d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:15:57:ec:0e:d4:2f:3d:3e:90:97:3b:5e:06:44:49:19:
         91:27:77:39:c6:03:21:13:20:22:81:e8:cc:28:61:ba:1e:76:
         27:e6:15:16:b0:12:a1:bf:de:32:5d:5c:9b:55:15:bd:fb:c9:
         26:c4:30:56:3b:4a:71:7f:1b:8d:6f:ff:69:c4:e4:ad:9d:ef:
         ab:8b:6b:8d:3a:cc:8a:ec:9b:87:92:21:95:2a:79:9b:44:13:
         0f:d8:86:13:02:f9:d2:f8:b7:8d:d3:11:64:82:63:b6:54:97:
         79:96:0c:b0:39:2e:04:04:f7:58:bb:83:81:35:94:4b:29:3d:
         ba:cb:32:07:e0:56:c8:fb:f0:16:a0:34:75:48:f2:60:cb:4f:
         12:0b:0e:bd:55:a3:8d:80:74:76:ca:8c:48:c3:6a:ff:20:0a:
         a1:fd:d7:7c:41:9f:5b:0c:ef:1c:e1:cb:fc:21:ad:9f:f9:cb:
         25:ef:d1:d3:ad:01:0d:75:37:2e:8b:04:81:f7:5e:ea:f3:05:
         2a:76:10:78:ff:c1:fb:ec:b1:95:c1:18:28:b6:e6:64:96:e0:
         fe:f4:16:99:56:01:a9:34:d3:2b:5c:bc:52:43:3a:f0:2f:ab:
         5b:3e:38:d7:0c:e9:e2:35:8e:10:63:28:3b:2c:38:e2:4e:c7:
         82:82:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org