Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          NixXB5RHYqnoRNiNbbyFLLP6Fc8MDbT6nNSdkdNu0oM=
Subject key identifier:   76:09:93:C8:C0:4B:BA:D1:10:CD:6E:D6:CD:38:CF:13:B8:E7:D3:3B
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       5D5B01E9E8A060D46DEB010BD1E4513381AE28F0
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:24:00 +0000
ROA not before:           Thu 08 Feb 2024 20:19:00 +0000
ROA not after:            Thu 06 Feb 2025 20:24:00 +0000
asID:                     265078
IP address blocks:        170.233.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5b:01:e9:e8:a0:60:d4:6d:eb:01:0b:d1:e4:51:33:81:ae:28:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:19:00 2024 GMT
            Not After : Feb  6 20:24:00 2025 GMT
        Subject: CN=760993C8C04BBAD110CD6ED6CD38CF13B8E7D33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:a1:de:32:f3:e7:4d:4d:41:71:15:83:37:
                    d3:74:a5:66:5d:23:9b:26:a1:12:64:69:64:da:2c:
                    76:99:7b:25:db:58:40:5a:0c:8c:e2:2e:a1:12:b6:
                    96:55:90:9d:a3:58:d4:16:c1:03:ca:d2:62:46:c4:
                    bf:08:33:7a:82:b8:38:1a:c6:62:60:ea:da:48:08:
                    0b:c2:b5:8c:d7:75:47:2b:4b:8c:4e:ee:8a:a0:38:
                    80:ae:d8:bc:fb:92:ba:dd:06:c7:ce:e7:08:e3:6e:
                    48:d2:67:9c:97:7a:f4:79:e8:18:3a:82:20:c7:3c:
                    1c:cf:92:c6:a3:3f:8b:b5:29:14:11:4e:6f:ee:19:
                    d1:d3:90:a9:db:4e:9f:ab:2c:ac:de:97:c6:c1:c3:
                    40:d3:a6:90:fb:4e:61:8d:59:87:1b:8c:9f:d8:34:
                    31:cc:c3:b4:88:b9:e1:b2:c9:c2:d2:23:7a:7a:bc:
                    c7:e5:b7:1d:5f:13:49:51:dd:da:8a:96:fb:35:77:
                    94:55:d2:4a:dc:ef:00:f6:50:8c:35:9a:a4:61:b5:
                    76:55:03:86:29:6b:d6:c6:ea:bd:1f:99:23:cb:c8:
                    88:67:4d:72:d7:08:7c:f6:36:e4:37:60:b8:4b:cd:
                    85:1e:14:ae:ba:88:7d:76:ed:da:a4:14:79:4c:b5:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:93:C8:C0:4B:BA:D1:10:CD:6E:D6:CD:38:CF:13:B8:E7:D3:3B
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:0f:60:a7:e0:5d:fd:2a:b3:5c:d1:e0:7c:d4:7f:f8:84:
         81:d7:6a:20:2e:1c:b4:d5:97:1b:8b:a4:e7:5e:09:b2:6b:ef:
         fc:86:a9:99:b6:ac:ae:a1:a0:62:89:20:de:b5:11:c8:d0:21:
         d6:c5:92:39:ab:a4:d5:50:13:2c:c0:c8:a9:2b:58:b3:c0:92:
         c7:ee:22:fd:0e:2a:89:8a:b7:38:fa:6d:45:8d:9a:f0:59:a7:
         e6:b9:21:66:9f:32:97:05:38:1b:88:dc:d8:0e:8d:73:08:2c:
         d4:1c:e2:36:3f:af:a4:94:58:e2:ef:57:37:70:5a:98:97:2f:
         c6:35:23:5c:6d:46:7e:8a:52:2b:61:7b:9d:d6:dc:ee:3e:a4:
         40:6e:20:bd:a9:7d:9b:b6:3b:81:ff:02:d9:4a:72:dc:bc:46:
         b7:42:8b:2d:ca:07:41:bd:51:c0:9b:97:24:d1:04:41:02:4a:
         55:7a:18:93:d5:57:2d:45:5b:4c:d9:9c:c6:67:79:0f:2c:cf:
         d0:89:eb:8e:7a:00:33:33:98:8d:c5:33:d3:79:30:68:83:06:
         80:6d:30:3f:05:ad:16:4b:a0:0f:46:61:26:95:b9:d1:a8:1b:
         fb:77:94:32:f1:af:d0:0f:c0:f4:9d:30:bb:21:2d:dc:8b:bd:
         88:35:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org