Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/3138392e38342e36342e302f32302d3234203d3e20323633323630.roa
File:                     3138392e38342e36342e302f32302d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          mwngYBpqJ9bgTmltjAsEFMru/ChdWJsP1/5G216woKg=
Subject key identifier:   35:71:0D:DD:31:A7:55:0A:2C:E8:03:3C:A7:CB:F3:5F:B2:03:A6:E8
Certificate issuer:       /CN=174A9029B48A456DA6EB93EC88CBB00378817B71
Certificate serial:       19A1D6C4B93C3405C2449C94794417156D9D61A3
Authority key identifier: 17:4A:90:29:B4:8A:45:6D:A6:EB:93:EC:88:CB:B0:03:78:81:7B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/174A9029B48A456DA6EB93EC88CBB00378817B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/3138392e38342e36342e302f32302d3234203d3e20323633323630.roa
Signing time:             Mon 30 Jan 2023 16:10:34 +0000
ROA not before:           Mon 30 Jan 2023 16:05:34 +0000
ROA not after:            Mon 29 Jan 2024 16:10:34 +0000
asID:                     263260
IP address blocks:        189.84.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a1:d6:c4:b9:3c:34:05:c2:44:9c:94:79:44:17:15:6d:9d:61:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174A9029B48A456DA6EB93EC88CBB00378817B71
        Validity
            Not Before: Jan 30 16:05:34 2023 GMT
            Not After : Jan 29 16:10:34 2024 GMT
        Subject: CN=35710DDD31A7550A2CE8033CA7CBF35FB203A6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:b7:09:60:00:56:d3:f4:de:55:36:04:71:
                    3a:c7:a8:9f:46:e8:cd:61:08:d4:62:4c:f8:05:19:
                    75:08:8a:2c:6d:46:19:97:24:89:4e:99:32:56:b9:
                    6c:20:c3:e9:63:9b:32:18:63:a6:7d:4c:d1:f1:cb:
                    17:ca:9e:ca:af:cc:93:1f:d9:ff:ce:de:2f:8d:cb:
                    43:b0:46:27:5c:e6:96:2a:f6:e3:d9:6c:01:dc:73:
                    81:78:3b:e8:6c:fd:db:54:a2:76:54:82:9e:91:df:
                    1e:38:e3:50:ba:f9:22:5f:9f:4d:9e:0d:f0:93:75:
                    fb:df:f7:2e:f1:eb:dd:2c:b3:5b:9c:f8:b6:2b:0f:
                    6b:05:21:5b:7c:90:ff:9e:17:b9:6c:53:e8:09:fd:
                    be:d7:9d:14:7f:83:57:2f:12:3d:e0:82:13:f1:71:
                    ee:90:0d:57:81:c7:e0:6e:67:dd:c6:dd:32:36:c2:
                    1b:30:16:eb:cd:16:9a:7f:d4:df:a5:36:6c:23:c3:
                    8c:11:af:d4:33:73:f2:97:92:a7:a5:e1:09:77:a2:
                    c1:c4:0a:e7:93:d8:d6:ed:02:84:82:8c:e7:ef:58:
                    ad:35:7c:b0:5c:d1:d6:d4:17:09:9c:0c:c7:01:c6:
                    83:71:f8:ef:22:3e:d6:be:1f:82:c3:3c:51:36:72:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:0D:DD:31:A7:55:0A:2C:E8:03:3C:A7:CB:F3:5F:B2:03:A6:E8
            X509v3 Authority Key Identifier:
                keyid:17:4A:90:29:B4:8A:45:6D:A6:EB:93:EC:88:CB:B0:03:78:81:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/174A9029B48A456DA6EB93EC88CBB00378817B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/174A9029B48A456DA6EB93EC88CBB00378817B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/3138392e38342e36342e302f32302d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:21:82:ee:75:01:8d:cc:9f:d8:64:01:81:f0:45:ab:c4:d3:
         db:f4:99:ba:5d:b9:d3:70:93:c9:1e:ed:b9:a3:e1:13:49:48:
         93:6d:70:2e:41:d0:57:21:db:f0:8d:0e:dc:95:1e:72:ca:52:
         e2:68:da:ac:32:8c:26:79:90:40:82:1d:27:53:0e:12:70:b9:
         41:9f:df:e2:de:c6:da:a7:0c:ca:7c:ae:e1:6f:29:bf:2d:6f:
         2b:58:bd:0b:f2:c2:5d:81:d4:64:bf:5a:7c:b0:73:58:53:d8:
         a3:5b:8e:28:c8:79:c6:bf:ab:ac:3f:3e:c0:af:36:66:c9:26:
         61:fc:32:1c:dd:21:5e:a9:c9:b1:76:7a:56:f3:4e:1e:40:a3:
         d3:6f:b8:85:bd:94:9e:12:e8:7e:10:74:5d:07:2c:55:a9:99:
         0a:05:86:d5:25:e4:79:66:db:55:d1:3f:18:80:47:98:e5:6e:
         65:47:97:69:2b:88:8f:c1:40:27:99:b3:56:40:b2:20:6e:6b:
         04:dc:4e:53:f9:a3:c5:3f:3f:b9:f5:89:92:09:23:a2:31:a7:
         d1:29:0b:f4:39:42:b8:0d:b6:db:f1:21:f5:47:ef:79:7f:71:
         d6:74:20:8f:08:80:cf:5b:de:65:65:10:5e:20:80:b3:fe:aa:
         49:67:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org