Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa
File:                     3137302e302e3231382e302f32332d3233203d3e20323635313431.roa (raw, json)
Hash identifier:          Fdp4R48VsSh6hmihKsuLecS6GEBm/BSyWUSYA2EskzI=
Subject key identifier:   86:13:80:E9:0E:34:8F:C0:5E:93:67:17:1D:6E:0F:BC:04:17:F2:E9
Certificate issuer:       /CN=47C18131B7D329782CEBCA1510BDB6291781E507
Certificate serial:       495C119EABED28960054A22A989B0675644DDBA0
Authority key identifier: 47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa
Signing time:             Thu 04 Apr 2024 12:04:18 +0000
ROA not before:           Thu 04 Apr 2024 11:59:18 +0000
ROA not after:            Thu 03 Apr 2025 12:04:18 +0000
asID:                     265141
IP address blocks:        170.0.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5c:11:9e:ab:ed:28:96:00:54:a2:2a:98:9b:06:75:64:4d:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C18131B7D329782CEBCA1510BDB6291781E507
        Validity
            Not Before: Apr  4 11:59:18 2024 GMT
            Not After : Apr  3 12:04:18 2025 GMT
        Subject: CN=861380E90E348FC05E9367171D6E0FBC0417F2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:fd:6e:43:ff:7f:67:e8:cb:aa:1e:63:1a:
                    a2:54:b9:15:84:cb:99:a1:c6:23:80:c1:b2:b8:e6:
                    d2:fe:9e:86:de:34:7d:45:46:01:94:3e:f2:87:2e:
                    23:7b:a1:b3:17:a7:54:de:7a:95:43:97:67:ef:18:
                    f7:be:b9:83:d9:63:73:23:8e:69:ac:5a:f1:d3:04:
                    20:38:98:30:99:da:0c:63:8d:d8:73:38:77:8c:c6:
                    08:2c:b8:d0:90:a7:ed:c6:cc:51:b7:a3:d5:6d:33:
                    14:da:5d:51:4a:8a:27:d2:c9:3f:73:82:83:b2:30:
                    7c:0c:54:17:67:b9:e6:8f:c9:e9:c9:35:89:56:b6:
                    e0:c9:10:5c:38:b2:7e:1c:92:60:6f:eb:8b:c3:e4:
                    e9:9d:c1:e0:23:8b:b6:d9:67:0d:47:56:06:12:5c:
                    62:aa:5b:58:26:b9:97:9e:e5:2f:d8:20:89:c6:66:
                    eb:9d:5b:5b:00:3a:5c:60:5b:e1:67:71:27:34:6d:
                    6d:f8:db:fd:2d:04:62:6c:83:2e:27:af:a7:03:5f:
                    78:8c:60:af:79:1e:71:17:77:80:f7:80:e4:0e:56:
                    8f:2d:df:7a:36:d1:d2:b5:29:7b:ae:d7:af:4c:03:
                    63:81:34:64:03:bd:92:84:13:18:33:28:36:65:63:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:80:E9:0E:34:8F:C0:5E:93:67:17:1D:6E:0F:BC:04:17:F2:E9
            X509v3 Authority Key Identifier:
                keyid:47:C1:81:31:B7:D3:29:78:2C:EB:CA:15:10:BD:B6:29:17:81:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/47C18131B7D329782CEBCA1510BDB6291781E507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C18131B7D329782CEBCA1510BDB6291781E507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/1/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:eb:71:06:92:f6:68:f0:bd:89:c2:4d:47:a6:59:b5:30:21:
         6d:15:a2:83:ee:52:35:25:77:03:b8:e2:d2:7d:fb:74:b8:c4:
         91:39:a6:5d:27:80:ac:a0:d4:48:0d:5d:3d:60:b0:13:9b:b4:
         52:e8:dd:60:b9:5e:68:83:b1:6d:aa:9d:3f:58:4c:1b:70:0a:
         3c:28:2e:c4:66:ed:2b:36:40:26:19:05:76:44:6b:f0:7d:4d:
         ab:3f:f5:50:d0:ad:e6:28:e7:8d:ce:7b:c7:89:a7:49:e2:b4:
         a6:3e:46:b6:3a:b4:4e:52:d1:c5:24:c9:b8:70:71:f8:5f:5f:
         2e:44:6b:96:ba:0d:31:dd:4b:ed:82:84:2a:1e:1a:6e:fe:77:
         fc:0f:3d:70:90:a4:a4:9d:f8:03:5a:68:22:d4:dd:df:25:ff:
         bf:94:fc:bf:f8:14:a7:99:0e:40:be:ac:37:9e:4f:ea:3f:3a:
         09:d6:72:4c:12:b7:b1:15:f6:3c:af:cc:d7:5a:a3:b4:fa:1d:
         df:87:df:f2:eb:cc:de:70:8e:6d:92:c2:b4:fc:90:8b:03:ea:
         42:e6:1c:ed:4e:0c:a6:e5:84:10:18:1e:a5:3f:b8:28:e2:b6:
         78:8e:96:1f:0f:b6:ab:18:bd:d9:39:ce:62:f8:37:bb:80:35:
         b9:ea:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org