Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3234203d3e203631373438.roa
File:                     3137302e3234352e39362e302f32322d3234203d3e203631373438.roa (raw, json)
Hash identifier:          mfHZUW3U1UvlpKMDGm7LVgOD6Tp7s4ViCyt7dqLZZzc=
Subject key identifier:   94:2E:E7:7B:45:12:58:AB:D3:54:EE:B0:72:53:79:DC:EE:51:16:5E
Certificate issuer:       /CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
Certificate serial:       5644373A9822C191B6808D9C0E4B3EFE21D03D6E
Authority key identifier: E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3234203d3e203631373438.roa
Signing time:             Tue 20 Jun 2023 18:32:00 +0000
ROA not before:           Tue 20 Jun 2023 18:27:00 +0000
ROA not after:            Tue 18 Jun 2024 18:32:00 +0000
asID:                     61748
IP address blocks:        170.245.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:44:37:3a:98:22:c1:91:b6:80:8d:9c:0e:4b:3e:fe:21:d0:3d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
        Validity
            Not Before: Jun 20 18:27:00 2023 GMT
            Not After : Jun 18 18:32:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:59:54:7d:f1:82:c0:1d:61:84:93:17:1b:
                    df:61:a6:24:8a:85:6b:7c:c8:e8:49:15:5b:15:dc:
                    41:5b:07:b5:c6:b4:e5:5e:19:71:9b:32:95:1c:f3:
                    4e:13:1c:f0:da:ce:cf:7b:17:47:7f:df:11:62:77:
                    66:8e:62:fa:c2:7b:ca:bb:da:c5:6c:35:32:d3:1b:
                    ea:89:9d:57:25:7b:a8:a0:96:cc:c9:d9:4c:95:ec:
                    bb:05:d4:5c:87:76:25:77:c4:5e:72:a2:cb:28:75:
                    27:9a:67:f5:5c:84:14:fe:ea:dd:9b:1d:75:89:2a:
                    10:aa:28:25:b8:9d:e7:a3:48:c2:77:85:90:b5:d6:
                    4c:8a:89:8b:47:70:05:71:8e:1e:1f:29:d0:ce:d6:
                    8d:8d:6a:6b:dc:36:1a:02:73:de:50:07:01:04:a9:
                    11:b0:77:61:a8:1e:b6:52:46:1b:b6:63:e6:3a:d9:
                    7e:58:e0:c7:1b:d0:dc:75:d3:81:ca:e1:c7:17:f1:
                    3f:2b:72:7f:ca:ee:01:23:6b:e3:e2:d9:a9:b0:7b:
                    6b:b0:83:85:1f:74:a4:b8:e6:eb:31:97:9d:9c:15:
                    09:ea:c5:97:14:8b:17:d2:51:f2:8b:76:4b:28:98:
                    d0:fb:58:e1:63:d6:97:4c:2d:4e:03:8b:41:81:43:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2E:E7:7B:45:12:58:AB:D3:54:EE:B0:72:53:79:DC:EE:51:16:5E
            X509v3 Authority Key Identifier:
                keyid:E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:96:b7:91:1f:b6:0a:26:e1:e6:d1:63:fa:35:e5:bd:c8:
         c1:2f:7b:9f:30:e7:e6:8f:e4:83:4d:32:af:41:75:5e:91:c4:
         8c:5d:09:29:1a:3e:5a:a2:b8:ac:83:fc:b3:f4:88:b8:44:e0:
         52:63:74:7f:2d:97:de:5a:a0:d4:9c:4f:05:1a:41:32:a4:60:
         12:d8:52:bb:b7:15:fa:09:cc:00:c4:35:d3:7a:74:06:da:c1:
         90:31:d2:7e:05:cb:b6:2c:53:98:67:b2:35:e3:30:fc:72:cd:
         b3:da:fc:19:21:a3:6d:ab:98:9e:39:05:13:ef:4e:93:6a:7d:
         ca:d0:72:7d:b6:1d:2b:bd:c8:54:41:e6:8d:2f:9d:f7:f6:d2:
         9a:44:52:cb:c6:2d:bb:1a:bd:2e:e0:0a:08:35:bc:79:11:c3:
         e8:66:1b:d9:87:ed:f5:bb:ed:dc:6f:4e:f4:d4:53:fd:9e:5f:
         9a:11:70:ae:4f:0d:89:88:c5:09:07:3d:7f:f4:07:f3:2c:af:
         2e:79:38:ae:59:2a:ac:00:78:b8:36:ea:b4:21:fc:2f:89:8f:
         b6:e8:6a:3b:e0:c7:43:64:74:e8:22:e9:35:52:b8:08:1c:aa:
         27:ac:db:ad:c5:09:cb:df:3f:d3:ce:e9:99:ce:a5:e9:24:da:
         b9:0e:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org