Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa
File:                     3137302e302e3231362e302f32322d3232203d3e20323635313431.roa (raw, json)
Hash identifier:          f8eSKwCbGgFIpOCUAByk/tbLyVkDW4iVChRhdhHfg7c=
Subject key identifier:   06:06:A9:D7:0E:DB:F1:49:F9:DB:3F:DD:6A:01:E7:EF:B5:DA:30:E9
Certificate issuer:       /CN=47C18131B7D329782CEBCA1510BDB6291781E507
Certificate serial:       1F603E2E3F748104071C64B1D829E5DC80BFB262
Authority key identifier: 47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa
Signing time:             Thu 04 Apr 2024 12:04:27 +0000
ROA not before:           Thu 04 Apr 2024 11:59:27 +0000
ROA not after:            Thu 03 Apr 2025 12:04:27 +0000
asID:                     265141
IP address blocks:        170.0.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:60:3e:2e:3f:74:81:04:07:1c:64:b1:d8:29:e5:dc:80:bf:b2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C18131B7D329782CEBCA1510BDB6291781E507
        Validity
            Not Before: Apr  4 11:59:27 2024 GMT
            Not After : Apr  3 12:04:27 2025 GMT
        Subject: CN=0606A9D70EDBF149F9DB3FDD6A01E7EFB5DA30E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:7b:ea:19:6a:a0:43:59:b3:d3:22:fe:da:
                    bd:21:5d:b8:c3:2b:e6:4d:6a:8b:08:c0:46:53:f7:
                    80:19:8b:f0:21:04:fd:a1:8e:4b:f5:5c:13:54:10:
                    2d:f3:94:a6:7f:e6:54:c8:ee:85:c1:25:cf:d6:c3:
                    e3:f2:24:3f:88:49:c3:de:b1:f2:6e:0b:01:71:56:
                    d2:f9:71:e8:6f:aa:d7:ea:9b:c7:99:ba:70:36:f1:
                    e0:94:a0:45:2c:fe:a9:3f:0e:68:bd:cd:92:5c:7c:
                    b3:02:7c:0a:65:8c:ad:d8:ae:5c:b7:68:7f:17:af:
                    1b:51:e8:00:15:79:7a:f5:b9:09:a2:3c:bb:68:ef:
                    31:2b:42:b3:78:0f:07:4e:10:b0:fd:ac:7a:77:95:
                    16:4a:1e:44:e5:c0:02:ec:3d:04:e6:c2:3d:f0:b8:
                    14:48:84:f9:a8:c0:1d:fa:df:b3:b6:0c:bc:58:72:
                    db:18:8e:df:52:29:73:ae:75:1c:73:fd:cf:99:f4:
                    76:a7:ff:c1:42:46:f0:aa:f0:7c:5a:d8:74:1d:1d:
                    b9:68:04:6f:e0:9d:71:25:55:ea:12:2e:6b:f4:e3:
                    5e:8e:11:e6:42:4a:c4:1b:d5:58:48:39:6f:75:a0:
                    f9:36:c8:5e:ab:89:3d:9b:e0:4e:71:6d:da:35:00:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:06:A9:D7:0E:DB:F1:49:F9:DB:3F:DD:6A:01:E7:EF:B5:DA:30:E9
            X509v3 Authority Key Identifier:
                keyid:47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/47C18131B7D329782CEBCA1510BDB6291781E507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:45:b4:b0:48:b6:38:db:86:33:31:90:08:a5:27:38:65:
         83:c9:ae:e1:41:16:dc:d7:ca:4b:3c:6f:63:3f:ab:c6:6b:88:
         3a:fa:ea:b8:a8:94:d6:a5:1e:17:db:55:d8:95:d2:b3:36:71:
         83:26:60:44:93:f7:04:91:11:53:86:cc:64:c8:dc:0b:76:a7:
         c3:51:9d:8a:51:3d:78:88:99:2d:57:5f:61:4c:81:b7:af:a9:
         13:13:ec:b2:10:46:2e:16:2c:28:5b:bb:37:df:b7:dd:c2:8a:
         b1:0b:f1:5a:f7:0e:2f:98:75:e2:cf:20:a9:06:65:6e:ec:77:
         ee:75:f8:6e:b4:74:da:5d:d0:1e:e2:be:f9:ff:7b:8d:d4:6a:
         d0:fd:08:14:ce:da:cc:4a:0d:3a:2b:87:7f:69:b0:0e:dc:a3:
         4d:12:13:52:86:bd:bf:35:d1:48:cd:00:e8:45:a6:7a:f2:39:
         d5:b6:25:4f:e2:07:ba:15:07:7c:c2:a4:13:b4:b9:91:29:35:
         17:6c:b2:06:cb:f1:2a:1f:66:87:f5:c4:bb:d5:9a:61:b7:d0:
         45:47:73:6a:bd:d5:d8:e0:f7:79:74:d1:69:e1:f8:f5:73:7e:
         e2:9c:21:38:45:ad:f2:ed:cf:05:82:07:79:bf:4f:19:c1:24:
         a0:aa:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org