Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa
File:                     3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa (raw, json)
Hash identifier:          vXEkaHdbjzlVyk9h0wHqa2YVD7ufgZnGgRFsvWvNL6s=
Subject key identifier:   64:34:F3:51:62:3E:E7:23:A8:73:F3:B0:26:89:B2:7C:B3:31:F4:87
Certificate issuer:       /CN=471E19468CAF849656C487F645F16A3E85C981EC
Certificate serial:       3F2ADE84BBABED7AAB8F67482F668A51E26ED51F
Authority key identifier: 47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471E19468CAF849656C487F645F16A3E85C981EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa
Signing time:             Mon 09 Oct 2023 22:00:00 +0000
ROA not before:           Mon 09 Oct 2023 21:55:00 +0000
ROA not after:            Mon 07 Oct 2024 22:00:00 +0000
asID:                     270630
IP address blocks:        177.70.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:de:84:bb:ab:ed:7a:ab:8f:67:48:2f:66:8a:51:e2:6e:d5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471E19468CAF849656C487F645F16A3E85C981EC
        Validity
            Not Before: Oct  9 21:55:00 2023 GMT
            Not After : Oct  7 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:4a:2d:2b:6a:52:48:10:34:93:cf:df:62:
                    ea:c3:4e:b9:68:ca:5d:c9:48:cf:47:ef:1a:24:4b:
                    9c:60:90:bc:ca:67:61:02:c2:bd:0a:e6:82:bc:24:
                    1a:38:c6:c6:4c:20:c8:c2:46:9f:76:ba:7e:f0:dd:
                    11:2b:28:08:e5:e3:2f:75:f2:3f:fb:48:06:36:23:
                    7e:c1:5f:96:51:04:02:b6:05:40:db:6c:73:83:dd:
                    85:5a:65:27:c6:68:81:17:50:20:63:97:bb:b2:5b:
                    f6:3f:81:0b:7e:dd:53:4a:eb:da:6f:fa:d2:67:38:
                    80:89:44:22:40:34:34:21:8d:bd:e8:dd:66:fe:27:
                    41:bc:22:ee:0e:6d:e3:70:e2:4b:87:25:0f:02:82:
                    1f:ce:e7:20:69:6c:34:3d:89:49:82:b0:ef:0d:b7:
                    82:d4:a3:83:0f:f2:af:b0:ad:1e:d1:36:48:51:77:
                    c5:f8:9d:d1:1c:94:c0:79:80:63:54:8d:7f:9a:b2:
                    e5:fd:14:c9:80:fd:ec:28:09:2a:b2:eb:dd:4a:82:
                    92:46:ce:16:23:c9:56:ae:b8:c5:c9:e1:62:ee:7f:
                    32:4c:fe:6a:f4:be:84:67:98:e8:cf:54:d4:9a:98:
                    61:d6:95:18:3a:6e:e3:24:a7:c7:7b:f1:a0:82:8f:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:F3:51:62:3E:E7:23:A8:73:F3:B0:26:89:B2:7C:B3:31:F4:87
            X509v3 Authority Key Identifier:
                keyid:47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/471E19468CAF849656C487F645F16A3E85C981EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471E19468CAF849656C487F645F16A3E85C981EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:5d:4f:8d:4b:73:77:38:18:28:96:6e:dc:d9:04:16:43:46:
         c8:0d:47:6d:e6:91:07:2a:4e:9a:e4:b5:d6:9b:bb:44:31:61:
         c0:be:5e:18:84:cb:3e:fe:2e:98:14:91:41:35:11:82:01:e1:
         32:ca:8c:bf:7e:86:a7:dc:9a:81:4d:87:01:b1:b0:eb:0e:d5:
         8a:5f:ea:63:6b:7b:a2:83:c4:85:81:ad:5f:e7:f9:b9:42:6f:
         87:ec:81:d2:39:78:73:b1:5a:e4:a9:75:14:e7:a7:ff:d3:f2:
         d7:d3:f0:74:33:ce:ff:ea:13:83:1e:41:8a:c0:c6:85:7b:db:
         c9:c8:41:bb:4a:e1:37:fb:5a:72:f4:c4:d0:ea:3a:df:59:21:
         e2:5c:ed:08:b9:69:bd:3e:30:f6:cb:1b:07:7e:14:15:e3:38:
         28:c7:11:c7:e4:b8:94:77:9f:51:3d:f6:77:3c:2c:c5:81:17:
         7e:35:a1:40:2f:e3:71:21:cb:e7:c8:b7:cc:06:13:ff:07:eb:
         47:dd:ac:40:7f:49:c6:57:da:fb:51:b5:35:93:ce:90:8c:fd:
         87:fa:17:3c:b2:8b:8b:75:12:b6:93:15:7b:c0:43:86:2e:04:
         a1:dd:5e:63:45:72:24:40:fd:af:bb:b1:da:08:72:45:fc:71:
         9a:96:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org