Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa
File:                     3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa (raw, json)
Hash identifier:          3wv5rd0mHkAezZFyYlQ/2jQrVEQj8EjgSe9rktf3zV8=
Subject key identifier:   CA:66:99:AF:B9:35:88:91:3F:36:30:43:C8:44:00:7D:90:07:E3:74
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       251E18CB65A0E4C41A6CB2E3D05B3888CFDA8FAF
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:50 +0000
ROA not before:           Wed 03 Apr 2024 22:05:50 +0000
ROA not after:            Wed 02 Apr 2025 22:10:50 +0000
asID:                     265017
IP address blocks:        170.84.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:18:cb:65:a0:e4:c4:1a:6c:b2:e3:d0:5b:38:88:cf:da:8f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:50 2024 GMT
            Not After : Apr  2 22:10:50 2025 GMT
        Subject: CN=CA6699AFB93588913F363043C844007D9007E374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:c1:57:45:10:0f:2f:f9:53:12:6a:49:50:
                    19:00:4f:30:e6:62:30:69:5a:d1:8e:e7:6a:a1:64:
                    80:ef:73:fb:d8:57:a3:6f:ad:b4:52:d4:41:69:00:
                    3b:e0:92:19:34:3f:d6:09:8b:ab:fd:fd:72:59:c2:
                    8d:54:fe:5b:78:7e:81:a2:9b:a7:ed:f2:71:1c:14:
                    92:47:28:88:5c:90:90:9d:01:56:cd:50:a1:b8:d2:
                    e3:93:87:11:3b:f6:96:9d:73:5b:dc:9a:e2:4f:35:
                    e4:fd:15:17:88:da:32:f5:e7:3b:d7:18:6a:f5:3f:
                    5d:59:51:ad:0d:5b:3c:f8:b6:1b:2f:c6:6b:86:7c:
                    32:90:a3:16:eb:de:de:b9:bb:19:98:2e:fc:5e:66:
                    74:f2:70:83:d3:5f:34:a0:0c:dc:1b:06:32:73:a2:
                    7d:02:c1:19:de:ee:fc:dd:48:fe:94:41:29:16:0c:
                    62:55:d1:fa:e9:81:7a:4e:b4:aa:a8:13:67:46:b6:
                    b6:38:30:c2:aa:b8:4f:79:4f:fa:4e:73:29:fc:e5:
                    36:5b:21:c2:fe:2b:02:f5:6b:14:b2:9b:dc:12:7a:
                    c4:a2:a4:e9:51:77:e0:0c:16:ea:e3:b3:77:fd:d5:
                    a8:67:da:d4:4c:5f:15:40:f4:40:f9:47:0d:a8:60:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:99:AF:B9:35:88:91:3F:36:30:43:C8:44:00:7D:90:07:E3:74
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:5e:5d:4b:08:14:ec:22:27:8c:1d:c3:9f:9a:e1:cf:6c:
         23:c3:2d:1d:d2:c6:7a:1a:16:19:23:94:f5:29:d5:64:89:a7:
         f2:09:ad:ca:ae:26:3d:97:3a:11:83:0c:87:f1:13:98:1e:27:
         23:cf:a9:9e:3f:42:c9:f9:45:c8:27:19:fb:2d:7f:3f:f0:dc:
         d4:08:b0:51:bd:ac:8b:74:06:97:f3:33:00:d3:f5:10:ff:9d:
         cc:ca:1e:92:47:41:94:1b:aa:a5:f7:7b:52:7c:43:4b:4b:dc:
         63:d4:44:50:df:fa:ee:f3:0d:5b:55:0d:9c:b8:72:1c:3f:0a:
         ed:44:35:bf:bb:4a:ef:34:c8:4c:91:62:75:ee:8f:ef:71:7a:
         04:50:84:cf:a7:ae:5a:30:ba:00:12:f2:8f:20:df:be:b7:59:
         57:41:b5:31:0d:ff:b1:07:83:0f:5f:7e:c6:98:ff:3b:86:bc:
         73:05:54:ae:45:55:69:ba:5b:74:30:03:74:f8:1f:9b:c3:2e:
         4a:05:48:1b:4f:b4:0d:12:29:dd:93:63:2b:34:c2:f8:a1:d6:
         53:79:6a:cf:95:48:95:37:7b:a7:2c:2f:be:78:46:4a:59:87:
         d5:4e:26:7b:96:8a:8b:2c:d4:94:b6:35:6c:9e:10:9f:4a:a5:
         94:c9:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org