Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa
File:                     3137302e3234352e39362e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier:          WQuRVo3R4s2pCGCLQo5qzs8MGDxhUhM27yUi4Qa/1Fo=
Subject key identifier:   3C:E6:CF:FB:96:66:F9:E2:4D:C2:13:38:61:12:0D:A3:58:2D:5E:6D
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       269DA736E270261B2336F09129CC7DEB86B16AD5
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:48 +0000
ROA not before:           Wed 10 Apr 2024 19:14:48 +0000
ROA not after:            Wed 09 Apr 2025 19:19:48 +0000
asID:                     61748
IP address blocks:        170.245.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9d:a7:36:e2:70:26:1b:23:36:f0:91:29:cc:7d:eb:86:b1:6a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:14:48 2024 GMT
            Not After : Apr  9 19:19:48 2025 GMT
        Subject: CN=3CE6CFFB9666F9E24DC2133861120DA3582D5E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:85:39:02:53:34:cc:3e:c4:9e:2f:12:69:
                    30:95:31:ee:38:13:f0:94:f3:cf:96:fc:8f:7a:9f:
                    02:16:83:2f:06:2d:b0:14:ba:17:eb:e7:86:38:53:
                    55:d0:70:0a:75:e1:23:d9:70:e7:28:6f:9d:e8:45:
                    50:c0:35:1c:8b:e3:0e:d9:34:95:2f:30:e8:d2:40:
                    ae:ab:1a:ec:53:64:45:fc:b1:13:3f:19:e4:1a:90:
                    4f:cf:71:7e:a5:76:b3:78:a6:ef:f8:2e:f9:7f:17:
                    e9:cd:5c:93:7b:98:0e:83:f5:a9:91:00:14:6f:74:
                    6d:71:cd:ed:58:4d:b0:a2:25:66:ae:b3:fe:b0:ee:
                    b5:9b:de:a9:1c:31:b0:72:b0:8c:6c:15:a7:3e:86:
                    c0:11:1b:d2:b0:87:35:d8:18:d1:19:e2:75:23:8c:
                    ce:8d:ed:ca:09:bc:20:02:21:92:91:c7:42:ec:56:
                    97:0a:ab:95:f6:49:5a:b8:e1:27:d9:64:97:8a:23:
                    36:97:03:ef:01:1b:48:73:b3:9b:55:4a:a7:28:9c:
                    93:47:7f:ac:0b:44:f3:6b:07:dd:d1:92:c9:9a:40:
                    ee:21:e4:4e:69:5f:37:09:97:4b:8f:a5:32:34:27:
                    8b:54:6c:91:2e:9d:b9:a0:89:3a:bf:60:b5:e5:da:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:CF:FB:96:66:F9:E2:4D:C2:13:38:61:12:0D:A3:58:2D:5E:6D
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:43:c8:51:3d:94:5d:ae:79:92:7a:60:a9:a1:9f:f5:69:
         12:32:67:25:82:85:39:09:60:ba:42:1c:f0:b8:10:68:26:32:
         11:9b:ac:3a:d6:f3:85:43:21:bb:1e:93:16:19:2c:d7:49:1b:
         37:c5:ee:56:6a:37:cf:ae:35:da:d7:d6:df:a6:69:49:90:45:
         fe:d1:9e:9a:a7:68:98:59:45:88:a8:02:fe:45:69:ab:6a:be:
         ba:c6:8b:4d:16:49:78:91:ed:db:f4:e1:2c:33:de:7f:df:40:
         be:89:ae:00:a5:84:a9:b6:38:ce:bd:79:34:0b:54:43:fb:2b:
         5a:92:b7:3a:b7:6e:83:c6:ba:d7:b4:c7:14:99:35:0c:9f:b2:
         4e:a3:3d:d0:89:1f:69:70:f8:b6:af:24:b6:a4:69:f9:02:ce:
         d5:1b:89:99:79:48:4c:80:12:88:1d:ed:99:08:f2:38:17:be:
         8e:36:74:34:15:e6:24:aa:c3:41:f2:88:72:5b:1e:f5:8e:fb:
         a5:9b:82:e9:32:64:a2:05:2a:4d:2e:0c:46:64:15:f6:9c:ac:
         c3:c7:44:f8:a7:22:77:d9:b4:55:56:67:9b:12:8e:97:1e:7a:
         c9:40:ee:98:5d:e7:01:a5:b5:dc:90:57:db:2f:44:c1:3e:ee:
         68:e2:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org