Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32332d3233203d3e20323635303137.roa
File:                     3137302e38342e3134302e302f32332d3233203d3e20323635303137.roa (raw, json)
Hash identifier:          IVULnc0bJ/1ySEomYulWmhUi7Qo+J3TqG4nnJBe3Kic=
Subject key identifier:   04:E6:8A:C6:F5:1C:F2:4D:84:58:05:57:7E:93:8B:B9:23:AF:54:6B
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       194B47B96F34658223F73D30E3641F9F928E23D4
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32332d3233203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:54 +0000
ROA not before:           Wed 03 Apr 2024 22:05:54 +0000
ROA not after:            Wed 02 Apr 2025 22:10:54 +0000
asID:                     265017
IP address blocks:        170.84.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4b:47:b9:6f:34:65:82:23:f7:3d:30:e3:64:1f:9f:92:8e:23:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:54 2024 GMT
            Not After : Apr  2 22:10:54 2025 GMT
        Subject: CN=04E68AC6F51CF24D845805577E938BB923AF546B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:70:3d:99:61:57:68:39:ca:b1:f0:2b:d2:
                    05:e1:68:a9:51:a8:77:71:57:e9:78:a6:b6:46:34:
                    d8:70:ca:54:18:d5:97:c7:cb:f1:b4:b8:6f:23:80:
                    98:6b:8a:0d:6a:6c:0d:a0:5f:50:e2:ff:0b:5d:7a:
                    7e:5e:8f:4c:af:1c:a3:c1:94:fd:9e:4c:90:23:2f:
                    2f:68:4f:88:8e:5d:88:c0:58:b1:19:f2:69:bc:ad:
                    cc:2c:fb:7e:ba:84:19:40:1b:bb:0f:a3:e1:b0:d2:
                    34:77:e5:d1:78:af:f5:c0:6c:f5:d0:88:e0:91:3e:
                    ed:85:14:a3:73:57:53:a5:e5:72:bf:28:44:69:be:
                    12:70:4c:53:d9:33:84:b8:fd:3b:17:99:16:05:b8:
                    b2:fe:10:ad:79:ee:06:60:ad:f9:64:00:ee:19:cd:
                    ce:b3:08:f2:37:a2:f6:ee:b2:25:a8:1c:68:7e:a9:
                    7f:e3:e5:76:7f:8e:a0:d8:cf:61:46:dd:95:b1:58:
                    73:c0:46:02:af:f1:ce:d1:21:d6:8b:58:fb:2e:96:
                    fe:8c:19:b3:c0:98:52:b1:51:13:f4:07:45:02:d8:
                    69:6d:27:e3:70:cb:0d:b1:62:7f:cd:0a:15:c5:b8:
                    47:22:03:b2:2d:df:9e:87:26:d6:b3:51:66:94:85:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E6:8A:C6:F5:1C:F2:4D:84:58:05:57:7E:93:8B:B9:23:AF:54:6B
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32332d3233203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:28:9a:ff:97:c7:ae:a9:71:b9:9d:30:74:8e:27:13:cf:68:
         ae:b8:57:c9:c2:e8:38:3d:a4:d9:7e:7b:56:43:49:63:0f:c6:
         f9:6c:33:99:12:f8:d5:a8:f5:6b:fe:1c:32:2b:84:fa:97:ad:
         a7:1e:64:05:cb:2a:9a:42:8e:27:2f:82:2c:45:16:01:a0:3b:
         e9:f2:19:be:41:ca:59:b0:ab:f4:fe:f0:f6:7d:b9:05:a3:fc:
         ac:1a:36:c4:7c:c0:55:f2:ea:0f:be:a6:2c:a8:28:a8:17:aa:
         bf:db:09:09:e1:e7:62:a2:16:80:db:7c:f1:5b:2d:a3:67:02:
         4c:80:72:6d:35:01:05:01:62:5a:d6:2f:c2:f1:93:ba:84:c0:
         ab:7f:2f:4a:45:55:2b:22:9e:4c:f9:a5:80:55:df:6a:9c:d0:
         ba:11:12:16:25:fc:87:f3:e9:c9:3e:38:fc:4c:e8:20:2e:84:
         8c:ea:11:0c:33:de:a8:60:82:7b:3e:2b:99:b4:c6:48:08:dd:
         ac:1c:41:c5:53:42:ed:4b:ed:80:f5:4b:aa:45:2d:2e:8f:9d:
         4f:1f:f2:b0:0a:fc:ac:94:cd:77:4c:cd:74:03:6b:72:32:b0:
         fa:d9:21:92:30:2c:a6:c9:27:c4:35:d6:ef:30:ff:66:68:ec:
         5d:f6:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org