Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          Z1CQ2nv/dOZZah7ZGRUgwIrj6iIbOr5jDmQ9yIwhC0Q=
Subject key identifier:   BE:70:69:47:63:46:BF:35:08:6C:7A:E2:24:26:5A:4A:34:9E:6C:59
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       26BD2E3EB339257B6D17363B1CE6F946C3503C2F
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:54 +0000
ROA not before:           Wed 03 Apr 2024 22:05:54 +0000
ROA not after:            Wed 02 Apr 2025 22:10:54 +0000
asID:                     265017
IP address blocks:        170.84.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:2e:3e:b3:39:25:7b:6d:17:36:3b:1c:e6:f9:46:c3:50:3c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:54 2024 GMT
            Not After : Apr  2 22:10:54 2025 GMT
        Subject: CN=BE7069476346BF35086C7AE224265A4A349E6C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:df:80:ee:6e:96:b6:9c:ab:d1:74:3b:a6:
                    3b:51:c2:4a:4c:e8:7e:4b:ea:80:2b:ac:0d:c5:aa:
                    8b:fd:d6:36:9c:f8:5e:43:00:ad:91:7a:e4:b2:35:
                    80:4a:c9:ca:bc:48:61:82:99:fb:4c:bd:90:ed:06:
                    34:6b:b2:15:ef:6e:d0:a2:16:c1:58:6e:dd:c3:62:
                    54:c2:b6:1c:9d:67:ef:e2:9b:a5:45:32:5b:7d:d8:
                    c7:71:5a:4c:fa:10:21:9d:e2:05:48:2a:74:d0:d0:
                    a7:42:21:3c:23:65:9e:10:f6:83:46:00:ef:da:1a:
                    65:8d:c7:cb:c7:0c:08:87:c9:6d:dc:ca:89:93:64:
                    f6:8d:50:db:d9:4b:74:0b:f9:97:a6:c3:40:90:03:
                    25:98:56:7d:38:34:00:26:44:22:25:c0:88:24:a5:
                    9d:fe:50:b7:1a:59:cb:5a:97:b0:58:f3:aa:c9:95:
                    5a:f4:bc:1b:23:7f:eb:0b:60:ce:8a:b2:e5:3a:1b:
                    68:c8:be:f3:f1:e1:c3:82:8f:bd:9c:3a:64:15:bc:
                    70:74:b5:d1:8b:e6:fc:d0:fa:83:59:0a:e8:94:07:
                    e9:0c:13:e0:8e:3a:32:42:79:a4:a6:69:dd:13:20:
                    77:ca:32:08:7f:dd:2f:df:7a:4e:c2:ac:2f:fa:65:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:69:47:63:46:BF:35:08:6C:7A:E2:24:26:5A:4A:34:9E:6C:59
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:0c:8e:36:c5:84:07:89:b2:e9:ca:d3:5c:a3:6d:1a:47:
         08:19:0c:85:17:e7:eb:13:7c:49:96:b1:82:4d:94:8e:8a:ef:
         5c:b8:58:9d:f3:ba:0b:fc:31:91:f3:3f:82:6d:68:95:df:01:
         4b:79:63:54:d0:c4:41:f7:1e:f8:80:4a:46:c7:71:02:56:3e:
         64:9e:72:33:54:46:c8:d7:62:95:21:cd:db:3d:ba:49:a0:6e:
         46:ed:cb:d8:63:c5:7a:70:c2:c0:f1:77:c2:46:4d:1f:6d:38:
         22:25:25:a5:c9:32:f9:ea:89:fc:24:4b:57:ef:32:0f:50:6e:
         da:9c:c0:2d:f9:33:f5:1f:d9:9f:40:51:3c:e8:72:e3:a4:e6:
         55:0d:ed:94:10:3a:19:03:f4:ac:ac:c1:f9:92:69:14:b8:b3:
         3c:fe:6a:db:f1:fe:d1:3b:a6:cb:38:26:d3:dd:bd:c2:a3:e3:
         4a:f0:a4:ee:94:a6:b8:c0:83:95:ab:23:29:5a:df:4d:81:40:
         25:8d:a8:51:ce:4f:61:1a:67:18:8f:67:90:16:04:09:39:76:
         d9:80:f9:53:16:c2:50:6a:18:f4:55:82:2f:6a:69:3d:07:89:
         ef:9a:97:b9:e2:6f:7d:6e:d5:c1:02:73:98:a3:4a:24:a0:90:
         c6:ed:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org