Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32342d3234203d3e20323632363439.roa
File:                     3137302e3233382e39342e302f32342d3234203d3e20323632363439.roa (raw, json)
Hash identifier:          MevwtK3rSD4qgRI4kEGePRvywhZPSxOorUikPYW7euM=
Subject key identifier:   52:1E:4C:DD:C1:6D:93:C6:D0:4B:5E:14:82:6B:77:5D:B3:80:49:C9
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       59F67054073E221A2E4A0ECDAED0993EE1BC004F
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32342d3234203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:30 +0000
ROA not before:           Wed 16 Nov 2022 22:22:30 +0000
ROA not after:            Wed 15 Nov 2023 22:27:30 +0000
asID:                     262649
IP address blocks:        170.238.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:70:54:07:3e:22:1a:2e:4a:0e:cd:ae:d0:99:3e:e1:bc:00:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:30 2022 GMT
            Not After : Nov 15 22:27:30 2023 GMT
        Subject: CN=521E4CDDC16D93C6D04B5E14826B775DB38049C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:0a:fd:0d:e8:d5:24:f3:37:87:2b:29:f0:
                    1e:5e:cf:a9:5e:91:72:50:43:c0:1c:0f:11:ce:77:
                    e9:96:d7:bf:b2:ed:5d:37:43:8c:bf:c6:9e:7e:4e:
                    20:3a:72:0f:07:6f:08:20:b8:e7:97:fb:78:5e:42:
                    44:18:11:2e:65:8f:38:e9:06:5a:fe:d2:e7:aa:dd:
                    21:2b:9d:26:bd:92:df:72:1d:57:76:1f:ba:4c:f0:
                    9f:4c:28:a6:bc:fe:79:eb:d8:1b:2a:72:47:4e:71:
                    dd:46:78:f8:e4:6e:06:c8:33:22:16:e7:63:e7:8a:
                    3c:6c:9a:f3:f4:7f:cc:8e:76:da:fb:10:8d:97:ab:
                    32:da:c7:cd:e4:17:92:06:4e:26:b7:6a:ba:ce:0c:
                    fd:c7:5e:f7:cb:1a:c5:b1:7e:aa:de:cf:24:ac:25:
                    3b:ee:c7:26:6a:ee:c9:5c:ef:51:36:f8:67:42:11:
                    56:d4:58:c2:9f:36:64:38:4f:31:9d:34:01:5a:e1:
                    65:be:bc:00:69:58:0e:33:a0:fb:dc:e6:32:b7:fe:
                    29:c0:3e:99:6f:49:09:14:4c:a0:d3:c2:80:e1:e5:
                    89:b3:f9:62:24:e6:2e:0c:63:7b:e1:cb:4b:8a:8d:
                    0a:e9:c0:19:92:3e:f2:bc:db:b3:0d:a9:a9:21:8f:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:4C:DD:C1:6D:93:C6:D0:4B:5E:14:82:6B:77:5D:B3:80:49:C9
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39342e302f32342d3234203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:1f:bc:1f:24:66:43:d8:5c:f0:09:37:8a:be:a8:ec:a6:
         3c:0f:24:8d:a4:35:98:3e:73:a2:17:a6:ce:9d:74:b5:20:a8:
         52:58:c1:a9:cd:1b:41:2b:79:0d:1a:26:d2:de:26:82:fd:2c:
         fc:4e:3f:46:d9:c8:a4:72:4c:30:83:0a:96:5d:d0:56:1f:b7:
         60:0f:b4:5f:b3:14:20:4c:2d:ca:f4:f5:e9:b7:5c:05:77:39:
         2b:85:55:05:01:d7:35:e2:91:83:54:e1:9d:ff:98:df:75:e1:
         75:7e:f4:70:85:50:16:1e:8e:fc:dd:07:be:a0:ff:25:eb:58:
         51:3b:fd:02:07:56:b3:66:48:1c:69:18:44:5f:d8:67:ab:51:
         93:e4:46:b8:1e:f4:63:00:31:25:c9:7b:5d:1b:94:21:ff:3d:
         95:7b:75:3c:ef:c8:23:59:a2:1b:3e:3b:fc:05:62:cf:00:af:
         b9:8f:4e:90:72:ab:f9:32:c6:97:6a:8a:9d:81:1c:5e:b9:68:
         a3:d0:4e:3d:59:b9:a9:dd:c5:f0:f2:d5:19:94:20:5b:a5:47:
         5d:9d:41:49:af:a0:7e:dc:2f:59:4a:2b:a6:1e:7a:a8:d7:c5:
         e8:ad:41:1b:b8:1e:60:47:19:b5:ce:13:17:f9:51:cd:1f:b8:
         a1:25:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org