Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32332e302f32342d3234203d3e203631383537.roa
File:                     3137302e3233332e32332e302f32342d3234203d3e203631383537.roa (raw, json)
Hash identifier:          gi6Us+E2SFpupdYO6nFm3NfoCYWbVmHgFSwDIzA4THo=
Subject key identifier:   50:AC:95:DE:E2:F8:C9:17:2B:95:2B:52:A8:FD:D5:4F:B1:27:A9:E0
Certificate issuer:       /CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Certificate serial:       4C9FE26E6306149C9A573DE7CAC3A64665CA1A7E
Authority key identifier: 38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32332e302f32342d3234203d3e203631383537.roa
Signing time:             Wed 17 May 2023 12:40:07 +0000
ROA not before:           Wed 17 May 2023 12:35:07 +0000
ROA not after:            Wed 15 May 2024 12:40:07 +0000
asID:                     61857
IP address blocks:        170.233.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9f:e2:6e:63:06:14:9c:9a:57:3d:e7:ca:c3:a6:46:65:ca:1a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
        Validity
            Not Before: May 17 12:35:07 2023 GMT
            Not After : May 15 12:40:07 2024 GMT
        Subject: CN=50AC95DEE2F8C9172B952B52A8FDD54FB127A9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:81:44:40:0b:49:25:00:43:48:a7:07:cb:
                    79:f8:f2:27:29:38:53:86:cf:63:a6:74:e3:28:95:
                    92:7d:e1:bb:c2:23:f5:dd:cb:76:74:01:4e:98:2a:
                    11:99:67:d1:55:19:1a:94:a1:66:ab:d7:04:21:42:
                    b2:84:c3:35:16:ee:37:c5:87:3b:50:13:6e:e0:51:
                    2e:6b:da:9c:69:00:9f:4c:38:2d:10:80:9b:a5:24:
                    b0:81:95:51:b8:2a:05:8f:1c:cc:33:a7:0f:d0:bd:
                    8c:a8:d1:fe:68:e1:b5:e8:b9:76:cb:38:45:65:49:
                    17:e7:0f:ec:2d:12:34:fa:50:71:b6:5b:ff:4f:36:
                    e9:fc:f6:e8:49:c5:e6:19:fd:78:0b:26:7b:40:be:
                    41:98:00:1f:d4:f2:22:ed:a3:67:99:38:d0:2d:88:
                    30:84:87:17:09:82:4b:3e:70:86:6a:a7:d5:8e:bc:
                    3c:d6:31:dc:7d:2c:ef:7c:5f:04:9a:2c:7b:ca:c3:
                    2e:28:b5:ad:26:b9:e3:ff:89:23:81:eb:2b:1a:7b:
                    ba:b0:03:ad:2e:07:fe:71:6a:4d:ae:20:b4:49:f6:
                    58:2e:d6:48:72:82:20:16:0f:d4:3e:33:b5:32:1c:
                    37:47:f1:1e:13:6a:e7:37:f8:ae:2d:85:96:8d:a5:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:95:DE:E2:F8:C9:17:2B:95:2B:52:A8:FD:D5:4F:B1:27:A9:E0
            X509v3 Authority Key Identifier:
                keyid:38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32332e302f32342d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:cf:bf:3a:ab:34:2b:fb:95:2e:77:21:64:05:80:8d:23:
         97:c6:36:e1:0b:7e:66:e9:99:ef:8a:75:d3:90:cd:0d:57:48:
         31:32:4f:16:e2:66:52:1d:7c:6b:ef:19:c5:19:03:73:3e:47:
         a4:f8:16:e6:99:13:66:4f:1d:9f:5f:6a:ce:61:6a:b0:24:90:
         ca:06:12:18:43:92:75:9a:b8:0d:a5:82:f5:46:69:c9:d1:b7:
         82:4a:c7:64:93:40:b9:50:ea:21:5d:7b:d6:8e:dd:b8:87:c4:
         72:25:c9:36:bc:87:a0:19:0e:32:ce:9c:a1:1c:63:49:b3:95:
         f5:90:8a:2b:43:62:e7:38:ff:fb:a6:b0:98:4b:fc:ea:86:9c:
         58:d9:b1:ae:40:68:dd:65:ae:c8:d9:85:92:80:e5:c0:b9:d9:
         b0:0f:47:4d:83:f6:70:ac:df:d5:97:22:ff:c0:7c:00:d8:20:
         3e:98:b3:10:c1:60:91:57:19:29:68:de:56:e5:12:15:8d:45:
         d5:0d:88:ff:be:5c:23:32:b6:e4:74:4c:2d:2b:7b:e4:7b:d1:
         a6:5a:fb:cb:a6:9b:80:f4:b2:b5:fb:8f:9e:da:96:f9:58:63:
         d2:26:48:d9:29:8f:d1:d2:a4:b1:eb:14:87:99:71:8e:12:c2:
         27:bf:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org