Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa
File:                     3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa (raw, json)
Hash identifier:          vBgWEtg0jMwoWWWMFufV5PeyW8g8Gu0XxI1UWRKLTsI=
Subject key identifier:   83:6E:CF:C4:90:29:74:63:8C:50:7F:84:8F:6A:59:E6:C6:09:27:AD
Certificate issuer:       /CN=6573B1E0DDF388B6C28D5404F9423D243A3AAC2A
Certificate serial:       68707FE9655B3078E695C45D067A0A3541A28394
Authority key identifier: 65:73:B1:E0:DD:F3:88:B6:C2:8D:54:04:F9:42:3D:24:3A:3A:AC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa
Signing time:             Wed 10 Apr 2024 12:55:37 +0000
ROA not before:           Wed 10 Apr 2024 12:50:37 +0000
ROA not after:            Wed 09 Apr 2025 12:55:37 +0000
asID:                     266314
IP address blocks:        170.238.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:7f:e9:65:5b:30:78:e6:95:c4:5d:06:7a:0a:35:41:a2:83:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6573B1E0DDF388B6C28D5404F9423D243A3AAC2A
        Validity
            Not Before: Apr 10 12:50:37 2024 GMT
            Not After : Apr  9 12:55:37 2025 GMT
        Subject: CN=836ECFC4902974638C507F848F6A59E6C60927AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:01:56:c8:85:fd:b0:32:90:28:95:07:7c:
                    6b:2a:ed:59:97:1a:96:15:4d:fe:a4:b7:f9:3a:b0:
                    2c:81:37:db:5e:c0:29:41:14:cf:1e:91:10:1e:8c:
                    6c:9d:79:79:24:8c:12:cc:fe:32:76:93:36:7d:54:
                    b0:ea:5d:c6:38:49:4a:63:02:ad:42:66:0b:1a:9c:
                    c3:d7:a8:d3:58:44:24:d8:b3:24:1b:1c:2a:5c:82:
                    ee:79:4d:f5:45:eb:ef:66:d2:c0:e4:36:0e:ee:b2:
                    c4:68:89:3c:cd:d1:3c:3f:e4:0c:78:ee:4d:18:de:
                    36:67:b1:17:6f:5a:a5:df:c9:82:f5:2a:3f:b6:4d:
                    dc:da:6e:e0:73:9a:92:5f:68:ec:37:ef:83:b1:f9:
                    2f:6d:5a:6f:54:9e:35:93:2c:83:9b:0e:5e:8a:20:
                    27:b3:85:15:82:19:6b:70:5a:d9:4e:40:e1:87:77:
                    a4:4f:78:dc:45:55:5a:0c:bd:bf:70:89:18:82:7d:
                    8b:09:8a:fb:56:65:45:c5:48:15:65:b4:b6:57:df:
                    f7:c7:d3:bd:9a:02:a1:a6:cb:1b:b1:df:df:54:34:
                    06:79:02:f0:46:4c:59:0a:47:9d:3c:9f:71:33:c9:
                    c7:03:f3:1e:4e:8a:17:14:93:45:8f:c8:c3:43:a7:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:CF:C4:90:29:74:63:8C:50:7F:84:8F:6A:59:E6:C6:09:27:AD
            X509v3 Authority Key Identifier:
                keyid:65:73:B1:E0:DD:F3:88:B6:C2:8D:54:04:F9:42:3D:24:3A:3A:AC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6573B1E0DDF388B6C28D5404F9423D243A3AAC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:f4:e2:64:37:61:33:ff:80:70:70:54:fa:65:51:16:a8:
         63:f9:70:e7:04:f7:db:2f:e1:7a:f1:d0:28:d5:b0:bc:0f:95:
         7a:bd:21:ae:35:27:db:19:a8:f7:47:ce:3a:98:20:92:57:95:
         fa:90:57:f6:67:2b:a4:6f:ed:b6:f1:37:1b:dd:d8:f0:76:33:
         e7:1d:bc:3f:c9:57:f8:6b:5f:71:54:09:35:9e:8c:5d:5b:b3:
         26:65:04:8f:02:1d:a1:60:e1:91:6a:47:78:0b:2d:a5:74:26:
         f0:f6:5d:c2:2e:61:8e:ff:34:ec:e6:0f:d8:9b:10:f7:b3:a4:
         9c:58:d1:20:16:7e:af:7a:db:3b:18:83:71:cb:0b:ce:b2:d3:
         1a:f9:7a:d9:71:39:76:ee:d5:76:7a:b1:92:44:1d:3f:e1:06:
         f8:6d:75:41:23:cf:26:06:3b:81:99:c6:18:4d:eb:be:0f:b1:
         91:74:fd:8e:23:9a:da:c7:f9:bd:36:0e:72:ad:af:36:02:f4:
         52:b5:42:cb:4e:64:09:96:7e:2c:47:ba:7d:d1:9a:8e:af:33:
         55:56:51:b6:be:78:ea:2b:d3:6e:b8:6d:ef:f6:58:4f:00:e7:
         f8:82:8c:ea:e3:94:33:1f:31:02:6b:63:64:57:9b:e2:af:d2:
         09:c8:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org