Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39362e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          LtGJ5VVMrq2TeMuZx5vOv9BCDUsJ4OEF4bOJtLW4o18=
Subject key identifier:   33:71:20:E0:FE:5D:19:F6:54:FD:BE:2B:5F:DD:36:D0:65:37:16:DA
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       2000C1E2CCE20C59104F85D2FC5F0217B0048E90
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:59 +0000
ROA not before:           Wed 10 Apr 2024 19:14:59 +0000
ROA not after:            Wed 09 Apr 2025 19:19:59 +0000
asID:                     61748
IP address blocks:        170.245.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:00:c1:e2:cc:e2:0c:59:10:4f:85:d2:fc:5f:02:17:b0:04:8e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:14:59 2024 GMT
            Not After : Apr  9 19:19:59 2025 GMT
        Subject: CN=337120E0FE5D19F654FDBE2B5FDD36D0653716DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:ff:82:3f:6f:7b:f8:e5:eb:4b:22:45:5e:
                    6a:55:9f:2e:12:30:b3:14:21:81:a6:d1:46:13:49:
                    b2:b0:d5:60:cb:4f:69:b5:48:e9:4b:2a:7c:ad:61:
                    fa:c0:14:a2:57:bf:db:cf:8d:6c:a1:75:dc:4a:95:
                    ea:8f:f5:99:ad:e2:4f:f7:25:76:c6:88:fb:07:c9:
                    9e:99:7b:9d:4f:3e:ae:92:c9:ab:b8:e6:7b:2a:66:
                    04:8d:21:05:92:72:5f:b8:b0:23:a2:f7:24:4c:cb:
                    17:54:33:bb:c7:27:7d:5b:ff:eb:b9:2b:a8:63:c5:
                    d7:2c:5a:b2:53:ff:35:e4:27:b6:d3:2e:da:e5:b9:
                    7d:71:77:68:92:a5:32:fc:7d:8f:99:9c:88:0d:cd:
                    6a:72:88:33:ef:b1:50:8d:66:7c:00:8f:f1:f7:e5:
                    76:d1:71:31:e0:47:0a:ef:3a:f3:58:24:ba:56:c0:
                    d7:28:5b:b7:e4:0e:51:fd:e5:ae:4b:aa:b9:92:18:
                    73:05:02:cb:85:9f:e0:76:bf:b7:3b:57:ef:76:1c:
                    48:13:78:1d:29:94:56:66:42:29:e5:45:5b:15:26:
                    b7:e8:e1:5e:a3:0b:15:68:ae:57:27:28:84:06:fb:
                    51:8d:31:39:e6:e9:bb:36:21:1b:dd:3d:c1:b7:4c:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:20:E0:FE:5D:19:F6:54:FD:BE:2B:5F:DD:36:D0:65:37:16:DA
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:92:8a:d1:d1:e7:48:ac:21:c1:34:a2:e9:b8:bd:2c:ad:
         26:4c:52:7c:ce:43:f8:ff:85:0c:82:5f:df:7f:31:e7:83:98:
         b2:e4:75:5f:47:60:fa:ca:81:cb:60:fb:fc:1a:dd:06:1d:aa:
         62:63:24:46:39:07:f2:a3:51:56:2e:09:8d:ec:d7:24:77:8a:
         83:2e:6d:9e:ac:4d:7c:1a:12:10:4b:e9:1e:96:e7:df:83:0b:
         b2:3b:88:93:0f:70:0a:a9:7d:7b:47:48:45:86:49:c1:a5:1d:
         cf:18:dc:ea:d6:7b:ee:f9:1f:63:45:5b:37:8a:79:d0:58:51:
         2e:75:50:6e:47:23:fe:93:d0:bb:5a:bd:a4:0f:e1:5a:8c:fa:
         39:aa:79:5c:6d:10:96:16:12:f1:f9:44:63:a4:a0:71:8e:46:
         df:3b:b0:d9:a5:8a:b8:59:5a:32:e7:66:54:e6:60:2c:3f:7f:
         e8:72:ee:2b:89:a2:cf:3f:b8:20:93:31:f0:e5:ed:e3:9f:52:
         07:e9:0b:64:6b:6a:e5:56:32:37:cf:6e:3d:2e:04:25:25:df:
         6d:04:17:7e:06:8e:67:ef:c4:53:26:c9:17:04:dc:4c:e9:37:
         46:f5:7d:87:f8:cd:fb:de:de:56:29:18:d8:e9:83:ae:e4:27:
         38:c0:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org