Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32332d3233203d3e20323635303038.roa
File:                     3137302e302e36302e302f32332d3233203d3e20323635303038.roa (raw, json)
Hash identifier:          EXDwFUkxefyUamRwxQ/oalE1tgYIxZXKZ4wtLFFZUM0=
Subject key identifier:   82:1D:E0:B3:89:F9:03:8E:FD:5B:DC:8C:AA:7B:35:DE:EF:23:20:E9
Certificate issuer:       /CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
Certificate serial:       50181D759E99B6BDC1AFE942B8D38E392876F9D4
Authority key identifier: F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32332d3233203d3e20323635303038.roa
Signing time:             Fri 15 Mar 2024 17:58:50 +0000
ROA not before:           Fri 15 Mar 2024 17:53:50 +0000
ROA not after:            Fri 14 Mar 2025 17:58:50 +0000
asID:                     265008
IP address blocks:        170.0.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:1d:75:9e:99:b6:bd:c1:af:e9:42:b8:d3:8e:39:28:76:f9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
        Validity
            Not Before: Mar 15 17:53:50 2024 GMT
            Not After : Mar 14 17:58:50 2025 GMT
        Subject: CN=821DE0B389F9038EFD5BDC8CAA7B35DEEF2320E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:39:bf:72:8a:f6:55:ee:aa:10:65:82:2d:
                    3a:bd:22:c3:99:80:bf:3b:b1:6d:77:6c:c0:22:b1:
                    d3:8a:41:54:4a:99:7e:bf:24:39:96:4e:5b:84:b8:
                    d9:e2:aa:0f:e0:a0:92:f9:98:a4:1f:aa:56:18:a2:
                    6c:5b:e0:3c:a1:35:78:b5:ca:ae:c3:69:6f:c9:c1:
                    bf:74:02:b7:b1:f8:ab:2e:4e:6e:08:e6:cf:fb:4c:
                    21:43:fe:32:0b:01:0b:4e:33:8c:49:ee:5d:6b:d7:
                    92:8d:3a:96:79:7c:55:63:28:55:27:de:05:63:dc:
                    ec:c4:b9:d2:90:48:df:cb:ac:92:03:11:96:3d:25:
                    53:fd:01:3d:ba:5c:a5:5e:fb:61:38:8d:55:fa:bf:
                    f4:e3:dc:24:58:b1:3f:66:06:54:85:5e:12:a6:d9:
                    28:8c:22:9b:31:e7:0b:62:30:c5:21:d8:22:f9:9d:
                    04:34:cc:26:da:16:73:61:2a:a0:96:9a:b6:fe:f1:
                    df:7a:6d:b0:21:19:a2:ad:34:08:e6:0d:eb:b0:56:
                    0b:8c:de:d2:71:26:0d:62:04:5e:23:53:ac:4b:85:
                    44:54:09:93:5e:f8:5c:1a:80:17:d2:a0:75:21:c5:
                    65:14:f3:a2:f5:f4:d2:85:21:63:b4:e2:be:0d:98:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:E0:B3:89:F9:03:8E:FD:5B:DC:8C:AA:7B:35:DE:EF:23:20:E9
            X509v3 Authority Key Identifier:
                keyid:F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32332d3233203d3e20323635303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:87:5a:51:62:69:ca:fc:eb:db:dc:dc:eb:26:a1:e2:dc:
         7b:c0:bc:4a:e1:8a:57:35:dd:03:67:67:3e:71:01:38:f3:1c:
         14:61:ab:e1:9e:8b:b8:18:f4:1f:55:20:fd:10:1a:89:7a:eb:
         9c:30:0a:07:d3:fa:74:b8:85:2f:44:cc:2b:0a:2a:c3:c4:b5:
         d7:6e:6a:82:3b:05:d8:a6:50:7a:46:c9:23:ce:ea:b3:ec:20:
         0a:85:0d:e9:69:b3:41:f6:a5:a9:a4:6c:20:0b:e1:4e:95:08:
         b6:b7:2a:44:5b:2c:ff:a6:85:4e:d4:67:5b:60:6c:73:ee:25:
         d1:21:71:57:e2:ca:dd:23:1e:8d:e1:9f:55:fd:b2:74:ff:eb:
         11:aa:3c:18:39:59:2b:fa:d9:b8:6a:1c:89:3c:b1:a0:f3:f8:
         fd:6f:86:68:8e:5b:6f:eb:d0:a1:b7:ac:2e:bd:c1:45:fe:e7:
         2c:dd:64:8f:73:01:f3:20:1c:88:1b:21:6a:73:1b:62:e8:5a:
         5e:36:c9:3a:83:78:f7:95:f5:42:42:81:56:37:26:fa:0a:a0:
         9d:4a:1e:cc:6f:ed:e0:99:94:0d:3b:e0:16:60:86:dc:b5:11:
         3e:97:99:55:a8:e9:f3:bb:d5:7e:0e:8e:e4:cc:a9:37:ce:7c:
         44:15:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org