Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39372e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          R1s2wmNBZ0sRNhNcMTGVvca8JzL3ZKlGY/ud0wtINtQ=
Subject key identifier:   3D:1D:34:18:D9:76:47:95:19:35:D9:1E:BB:41:ED:85:72:38:5E:50
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       30182A2663DFCDAA0282B99283E3F6180F679E50
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:04 +0000
ROA not before:           Wed 10 Apr 2024 19:15:04 +0000
ROA not after:            Wed 09 Apr 2025 19:20:04 +0000
asID:                     61748
IP address blocks:        170.245.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:18:2a:26:63:df:cd:aa:02:82:b9:92:83:e3:f6:18:0f:67:9e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:15:04 2024 GMT
            Not After : Apr  9 19:20:04 2025 GMT
        Subject: CN=3D1D3418D97647951935D91EBB41ED8572385E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:0d:3e:1e:20:8b:0a:8e:31:18:a6:5a:ba:
                    7b:03:80:25:40:e5:d8:2f:a5:4e:25:c5:b4:de:e9:
                    d9:d7:57:84:3f:63:c7:50:48:2a:52:5c:55:a8:74:
                    87:5d:0d:35:a9:89:39:2d:f7:8a:fe:b6:c5:85:8e:
                    ec:8a:bd:e6:d4:1e:04:46:f1:18:91:f3:c2:a2:82:
                    ae:15:fc:a6:d0:87:b8:c0:57:ff:bb:30:9a:d0:2f:
                    f8:d1:d3:57:35:4d:55:b2:17:82:ea:24:ce:97:a7:
                    05:42:78:c4:c3:09:49:1f:f4:6f:5c:2d:a1:74:3f:
                    f4:60:0b:2b:4f:42:ac:bf:43:54:0c:9b:32:3d:0c:
                    5c:21:92:9f:27:ea:e7:70:7a:0a:8e:a2:95:0c:00:
                    59:86:40:e6:a5:e8:4f:17:dc:50:82:13:0f:d3:a0:
                    b6:43:05:d5:9e:e4:4d:ef:26:c0:cd:81:09:b4:c7:
                    bd:50:a7:cd:5b:42:3a:6b:f4:41:51:20:7f:fa:1f:
                    d6:da:dc:ac:46:cf:fa:54:33:f7:a0:d7:3a:8b:2c:
                    1e:61:f3:ee:44:9a:f0:dc:be:07:ad:a4:f9:fa:3c:
                    ac:b8:ba:7b:c4:2e:48:49:d4:98:a5:88:bf:ac:3f:
                    c3:5c:86:46:38:85:41:8d:6c:a4:5e:c0:50:92:b0:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1D:34:18:D9:76:47:95:19:35:D9:1E:BB:41:ED:85:72:38:5E:50
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:25:7a:1e:6b:40:70:36:a2:13:bb:76:85:16:b2:de:4b:
         25:6e:ac:0b:79:cf:41:1c:a8:ca:ab:33:79:e5:7b:58:de:e0:
         26:5d:de:1e:6a:b6:cc:8c:db:27:b3:19:d0:8a:d9:93:83:68:
         87:f7:86:27:ef:9e:20:e8:a4:c4:2c:9c:4e:f2:11:56:ae:dc:
         e5:6f:59:12:61:d6:e0:9f:b5:90:17:ba:37:39:41:89:48:13:
         ca:7e:61:5a:ee:71:4a:e5:71:69:6e:e5:7f:07:61:88:17:c8:
         20:5e:fc:11:cf:c7:d3:83:aa:66:37:66:f8:cb:5e:21:e3:f8:
         01:35:ab:4d:de:ff:2a:ce:1c:83:e2:5a:de:23:1f:6c:90:4b:
         4a:50:5c:3d:08:07:20:b0:f7:31:bd:88:e6:26:36:a3:0a:23:
         f1:f0:25:10:fe:ea:85:17:97:8d:cd:fd:f9:9d:77:0a:55:14:
         af:18:75:93:38:7a:c0:8c:93:af:6e:32:ca:61:48:64:08:7d:
         17:c8:4e:0f:bd:0a:65:37:b5:9d:c3:88:02:29:f2:9a:78:ad:
         ec:29:bc:f5:9e:1e:6b:eb:d8:a2:df:48:80:11:b3:72:17:e5:
         f8:13:b2:d7:78:b0:c6:da:53:59:35:49:be:19:dc:06:37:d8:
         f4:06:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org