Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32342d3234203d3e20323635303932.roa
File:                     3137302e3233332e3130302e302f32342d3234203d3e20323635303932.roa (raw, json)
Hash identifier:          016hwyn+ELKo2KrI137eSAX6M9C6TLcegYuJBlhZKiI=
Subject key identifier:   79:41:BB:14:BB:9F:3C:CC:6F:C3:C0:B9:0F:4A:5D:F7:6E:1A:97:9A
Certificate issuer:       /CN=280B5BA12BA201DB8232DCA902FFBEFEF58CAA93
Certificate serial:       25BBD2DA4A3DBB0E6F7CF16AA31562E4A61E875F
Authority key identifier: 28:0B:5B:A1:2B:A2:01:DB:82:32:DC:A9:02:FF:BE:FE:F5:8C:AA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32342d3234203d3e20323635303932.roa
Signing time:             Tue 02 Aug 2022 17:36:24 +0000
ROA not before:           Tue 02 Aug 2022 17:31:24 +0000
ROA not after:            Tue 01 Aug 2023 17:36:24 +0000
asID:                     265092
IP address blocks:        170.233.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bb:d2:da:4a:3d:bb:0e:6f:7c:f1:6a:a3:15:62:e4:a6:1e:87:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280B5BA12BA201DB8232DCA902FFBEFEF58CAA93
        Validity
            Not Before: Aug  2 17:31:24 2022 GMT
            Not After : Aug  1 17:36:24 2023 GMT
        Subject: CN=7941BB14BB9F3CCC6FC3C0B90F4A5DF76E1A979A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:ce:ad:a7:45:2b:91:c0:f3:7e:80:e2:c0:
                    99:e8:a0:85:c0:79:a5:e3:ca:ad:14:47:d4:43:b1:
                    b0:5c:1e:34:9c:9a:9d:73:04:1e:0a:ec:f8:41:ed:
                    26:8b:f2:30:91:e2:93:8e:48:0a:7b:fd:3a:bc:c2:
                    8a:58:70:4f:14:ae:a2:05:99:da:63:f2:9f:b2:fd:
                    e3:96:38:d5:64:0c:48:4a:c6:f9:0f:b0:3e:24:3c:
                    e1:b5:53:5a:e2:ae:00:63:fa:fb:9e:7f:f1:6a:87:
                    97:b8:68:98:0b:47:10:d2:93:93:69:06:06:09:3e:
                    99:ed:a7:92:ab:2f:6e:3f:f7:b1:7e:73:34:3c:78:
                    9e:d9:c4:bd:e9:19:f2:8c:f4:3a:aa:af:78:65:ac:
                    c8:ed:ac:67:ed:9c:b6:cf:45:31:7d:e6:81:ff:14:
                    0f:21:f9:d7:ec:6b:2a:e7:d6:8e:e3:19:ac:c0:02:
                    86:f8:40:0d:85:cf:61:aa:01:d3:6e:52:9f:cd:fb:
                    a9:2f:6b:cf:31:53:ea:6c:86:4e:82:3f:75:e7:ca:
                    8e:15:bb:98:ba:ad:f5:c0:04:61:cc:a4:fd:66:a7:
                    c7:03:de:96:7c:29:db:f1:87:42:53:15:e2:0f:e6:
                    65:33:d7:71:e2:3d:44:76:36:a8:a9:6b:57:26:87:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:BB:14:BB:9F:3C:CC:6F:C3:C0:B9:0F:4A:5D:F7:6E:1A:97:9A
            X509v3 Authority Key Identifier:
                keyid:28:0B:5B:A1:2B:A2:01:DB:82:32:DC:A9:02:FF:BE:FE:F5:8C:AA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32342d3234203d3e20323635303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:25:1a:33:fe:ba:3c:3c:a2:b8:5f:7d:cd:42:30:7e:2a:f0:
         86:47:a9:a2:a0:a1:62:bf:51:0d:fb:b1:f1:8e:7c:1f:31:58:
         d1:42:7b:2e:06:fb:36:64:06:3e:87:63:d0:2c:50:db:95:e0:
         34:d2:3b:19:1e:48:f2:e1:9f:a9:84:0e:cf:35:eb:fa:1f:73:
         bb:64:99:7f:76:76:3c:e9:87:b4:0c:7d:5e:15:05:0b:49:1c:
         ca:f7:6f:57:f5:ad:ed:2f:ac:1e:30:d5:58:b8:7f:c9:d7:e1:
         9d:07:40:71:ed:00:91:c6:db:0c:00:ee:78:30:7a:46:d2:3e:
         53:89:cb:dd:a7:26:61:01:e0:83:a2:62:96:f8:54:3a:6b:ca:
         44:f5:51:dd:8a:1f:34:15:ee:aa:25:49:54:eb:a8:71:00:b8:
         c0:c7:1e:17:a3:ff:e0:cc:f5:41:1d:42:91:d6:09:8a:63:01:
         2c:1f:4e:29:79:99:10:ca:d4:7a:16:3d:b4:17:dc:81:da:b0:
         40:ff:62:c5:15:03:f4:9a:ea:24:f5:21:7e:0a:f7:60:e1:3f:
         36:f1:24:a7:bc:53:3b:6d:75:41:da:79:53:3e:63:65:0e:0e:
         e3:2f:89:3f:17:00:b3:52:33:2c:70:05:da:b0:58:94:ca:81:
         19:cf:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org