Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32332d3233203d3e20323632363439.roa
File:                     3137302e3233382e39342e302f32332d3233203d3e20323632363439.roa (raw, json)
Hash identifier:          2b4MwzgvygPJYnknAphxgejMH1eQaRL2WS6KcxilMxg=
Subject key identifier:   A0:F1:8F:2E:24:13:8C:5B:A8:D4:66:E6:D9:12:D7:6F:6E:ED:88:93
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       3F83E040C83CE2A741CA611BD59B5C15692BA76F
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32332d3233203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:30 +0000
ROA not before:           Wed 16 Nov 2022 22:22:30 +0000
ROA not after:            Wed 15 Nov 2023 22:27:30 +0000
asID:                     262649
IP address blocks:        170.238.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:83:e0:40:c8:3c:e2:a7:41:ca:61:1b:d5:9b:5c:15:69:2b:a7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:30 2022 GMT
            Not After : Nov 15 22:27:30 2023 GMT
        Subject: CN=A0F18F2E24138C5BA8D466E6D912D76F6EED8893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:65:5d:1e:45:54:94:c3:3d:cd:5d:de:d1:
                    8d:b8:71:ec:86:7e:bf:89:9b:d4:3d:ae:f9:50:da:
                    d1:40:ed:e4:de:25:1b:2a:9b:c8:27:4d:33:dd:58:
                    e5:82:78:2c:b6:4e:dd:de:63:65:89:0a:50:1d:62:
                    05:cb:b8:aa:d0:98:40:65:05:a2:eb:75:52:37:55:
                    bb:27:1c:04:40:b3:6b:08:4b:a7:2a:ea:dd:5d:1c:
                    d1:b3:69:ee:28:97:62:fa:75:d8:7b:d0:40:78:7a:
                    a7:98:70:0e:02:fe:24:ef:0f:6e:5c:4d:64:bc:9b:
                    70:cb:16:e1:d0:92:17:6a:6c:1c:3b:b0:cc:2c:a0:
                    d8:8c:a2:b4:22:92:ec:1d:ea:84:e4:2f:77:4b:82:
                    a2:34:d1:8c:ae:66:f4:67:29:c9:c8:a6:be:d7:89:
                    da:32:7a:1c:47:0b:40:ea:c3:48:71:19:e3:d0:fc:
                    dd:c3:a0:d7:78:42:b2:11:50:db:a9:e3:74:75:23:
                    ee:60:34:ea:01:eb:55:58:a8:7a:50:0b:ec:d8:56:
                    e9:46:df:66:8d:b2:90:9a:bd:62:b2:fd:f8:ec:68:
                    ac:c8:b1:05:f4:3a:75:ab:c0:08:8e:5d:66:d6:e5:
                    a8:5b:50:1e:6f:e4:37:66:02:37:9d:67:3e:fb:5a:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F1:8F:2E:24:13:8C:5B:A8:D4:66:E6:D9:12:D7:6F:6E:ED:88:93
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32332d3233203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:92:71:86:5c:6e:b1:c8:48:31:22:f9:d2:10:42:99:a9:a0:
         04:8b:3a:38:ed:dc:64:13:a9:64:c4:87:71:fa:1a:52:47:97:
         41:28:95:85:96:cb:dc:43:eb:fc:77:bc:51:6a:f2:ff:c5:89:
         eb:a1:cf:09:96:33:b8:14:32:f0:68:a7:de:64:2f:af:a1:e8:
         1a:cb:1a:f6:2a:6b:b1:17:57:5d:9b:18:df:b7:a4:63:bd:3d:
         e0:17:27:0b:fc:c8:30:c1:dc:5a:76:16:94:f4:4f:1e:52:9f:
         97:fe:56:cf:e1:98:63:8f:71:2c:fc:59:5f:3f:f5:84:45:46:
         d5:81:39:ec:fa:35:73:f6:c0:4f:79:b3:06:41:71:0d:2b:98:
         2b:ac:d6:ed:10:2a:6b:2b:69:ee:80:f2:8a:bc:b2:bc:ea:39:
         6d:76:e0:d0:9e:3d:fc:9d:12:66:1e:7f:e8:44:67:7b:45:94:
         7b:86:4b:eb:c9:ba:3d:5c:4e:ea:bb:3c:05:34:b6:10:23:44:
         1c:1a:b9:55:8d:64:c8:ed:2e:c4:7a:46:0c:c7:4e:c4:cd:9b:
         9b:dd:95:ac:66:79:af:d1:15:e3:05:bf:1d:37:44:9e:5e:3f:
         c6:64:c1:30:32:42:e2:5f:f8:ad:33:3d:50:07:35:2b:f3:d6:
         19:46:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org