Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
File:                     3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          pjwZDHphfmRbIeEEOyPJ7/yFo05/FH2rV1N754FH5Bk=
Subject key identifier:   80:96:65:FA:36:B2:91:C3:4E:71:38:AB:F4:35:12:A7:73:11:8B:FB
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       22E97FCB503D3BBF6674C9CEEF6F36F61E2C9473
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        170.231.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e9:7f:cb:50:3d:3b:bf:66:74:c9:ce:ef:6f:36:f6:1e:2c:94:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=809665FA36B291C34E7138ABF43512A773118BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:14:a8:17:bb:3b:95:79:63:d1:50:3f:79:
                    16:17:d4:8f:82:9a:4d:8b:8a:c1:74:80:df:14:be:
                    75:fd:48:91:45:91:46:b7:4e:8e:ad:09:aa:c8:9f:
                    58:85:69:e6:ab:d7:0b:ad:00:bf:8a:89:4b:63:7f:
                    2e:64:38:49:92:06:72:f1:52:d3:16:8d:d2:ae:cf:
                    18:ea:6f:06:4f:d0:fb:b7:15:bb:87:99:3b:b8:2b:
                    eb:b0:f0:9c:dc:3a:a5:86:8f:de:a4:88:f1:bb:07:
                    46:a1:f8:b8:72:7d:bb:dc:78:c8:00:d4:5e:d3:bd:
                    9d:cd:07:f6:40:ff:f6:ed:f2:31:1b:9f:7f:6e:1a:
                    cf:ec:21:41:40:ba:15:eb:3b:5d:3e:2f:3a:38:3c:
                    d5:c0:2e:de:f0:de:5c:5d:60:51:d3:0f:29:9d:e5:
                    3b:15:d8:02:4a:64:6b:1f:81:f4:58:c7:d8:78:4d:
                    84:e9:5c:ac:a6:58:f6:5f:ad:4f:c7:7e:ae:da:19:
                    23:54:d6:b4:a1:2d:37:2b:7a:11:33:9c:60:9c:f4:
                    df:eb:c8:5e:53:c1:51:91:f8:0c:cd:4d:ce:8d:9f:
                    eb:65:d2:f7:e3:1c:01:b6:68:f1:55:5b:70:71:13:
                    12:2d:ec:54:ae:18:d1:eb:c8:39:18:cc:9e:ef:81:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:65:FA:36:B2:91:C3:4E:71:38:AB:F4:35:12:A7:73:11:8B:FB
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:36:b7:38:df:30:e3:22:7e:e0:e0:01:72:60:19:ef:2c:9b:
         ba:9b:ac:3c:ae:93:87:b6:58:8d:a4:42:21:8b:b1:f5:ca:60:
         95:b7:98:5d:30:af:d2:e2:03:0c:dd:aa:6c:a3:94:13:00:7b:
         71:a9:ba:bc:cc:35:15:05:2c:b6:fc:0d:dd:9d:d3:7f:9d:4a:
         e6:45:85:db:28:9f:d8:f2:d4:7c:e9:b4:a0:ba:bb:0f:6b:b1:
         fc:11:f3:bf:d3:93:27:5a:76:47:18:5f:46:0d:58:cc:10:8e:
         70:b5:74:ff:9d:b1:e7:87:18:8b:8e:7c:4a:3e:a7:16:38:bc:
         b0:6f:d8:48:e0:78:20:be:0b:da:62:d9:9f:a0:65:dc:a6:db:
         09:3e:3a:75:ec:34:03:75:df:14:f2:7c:fa:31:60:1d:36:aa:
         36:92:82:4a:82:7e:34:9a:38:d3:ef:56:67:6e:eb:c6:e3:87:
         d6:91:c4:61:82:56:ed:45:93:3e:65:ef:ec:ba:c6:f5:a4:91:
         bd:1f:17:e4:34:5a:fd:08:c5:de:79:58:52:bc:9e:ce:1b:25:
         98:29:ab:cc:b7:1e:48:6c:24:0a:af:ce:ae:60:1c:c2:85:aa:
         97:6b:09:4c:21:29:59:cf:fc:d2:5a:98:cb:eb:73:28:55:45:
         57:42:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org