Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32322d3233203d3e20323733353638.roa
File:                     3137302e3233382e3231322e302f32322d3233203d3e20323733353638.roa (raw, json)
Hash identifier:          EUJ9P6So3xJVVk6/Z8Xjo45LlS4YrO+a8v84xZ20NWk=
Subject key identifier:   1C:64:64:E4:94:B7:04:8F:91:64:32:03:C4:C4:28:58:D8:B7:1B:39
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       4D222C2AD999DC81EA5CBF856A7C8F39EA7BF5C4
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32322d3233203d3e20323733353638.roa
Signing time:             Fri 03 Nov 2023 19:17:31 +0000
ROA not before:           Fri 03 Nov 2023 19:12:31 +0000
ROA not after:            Fri 01 Nov 2024 19:17:31 +0000
asID:                     273568
IP address blocks:        170.238.212.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:2c:2a:d9:99:dc:81:ea:5c:bf:85:6a:7c:8f:39:ea:7b:f5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Nov  3 19:12:31 2023 GMT
            Not After : Nov  1 19:17:31 2024 GMT
        Subject: CN=1C6464E494B7048F91643203C4C42858D8B71B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:c6:5b:31:b5:0b:09:e8:28:4f:9f:35:85:
                    03:36:17:ce:8a:e9:77:a3:f6:78:7a:8d:d0:3d:60:
                    73:5d:29:00:dc:da:49:8d:c0:18:c7:fc:ec:e3:00:
                    7d:de:65:31:68:fc:3a:5f:ec:cf:b3:a2:ec:5f:5d:
                    f1:9c:e5:5c:69:31:59:7d:8e:42:5e:0f:65:94:68:
                    46:93:f9:51:bf:ea:77:9a:c0:ba:ef:87:b9:3b:27:
                    39:bd:ad:19:18:3e:bd:9d:ea:36:d6:19:53:52:d4:
                    2f:bf:e0:ed:ee:c0:bf:98:55:c0:9d:44:c2:0d:42:
                    6c:08:93:dc:a2:aa:c4:46:02:ab:94:59:48:93:15:
                    8e:36:f4:70:4e:e5:b6:73:d8:34:8a:2e:71:a7:8b:
                    80:86:e2:b7:74:ac:79:81:fc:36:a9:62:97:f2:a1:
                    ef:4c:8e:d3:6e:3d:60:fd:00:00:8b:80:d6:a8:35:
                    c5:8f:47:7b:87:93:70:91:c7:08:09:79:f5:30:d7:
                    7b:29:ff:9f:d5:a4:32:72:33:97:31:a4:c9:92:a4:
                    af:62:43:fa:66:5c:d6:64:36:c0:ae:bf:b7:08:19:
                    49:8c:05:9b:2c:e0:16:f4:1a:8e:aa:7f:74:22:e3:
                    8a:42:99:2a:ca:4e:24:9c:f7:dc:58:28:c1:91:f9:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:64:E4:94:B7:04:8F:91:64:32:03:C4:C4:28:58:D8:B7:1B:39
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231322e302f32322d3233203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:d5:d0:69:b5:b0:5a:7d:36:9e:59:43:e2:40:95:07:ab:
         2e:c7:e7:86:63:5e:e4:39:a7:ca:56:20:47:f0:26:c0:ca:2f:
         12:b4:c8:6f:b1:30:ab:af:4e:f6:c9:b6:0e:44:ad:5b:d5:98:
         30:74:b5:3b:27:9c:28:72:14:2d:16:37:dd:5f:8c:a5:05:20:
         3c:c2:9f:e9:ed:42:92:95:c3:9f:87:b3:02:bd:07:70:d9:74:
         ad:82:ae:74:76:f7:ba:9a:62:52:50:9d:cf:b2:d0:b2:1b:83:
         f5:5d:77:99:4a:fd:a7:78:21:64:43:0d:ca:3d:a3:81:31:c4:
         01:91:a0:ae:42:3a:a1:37:1e:3b:a3:41:21:e2:bf:e2:45:b5:
         e0:0f:dd:81:62:c9:c3:4e:ed:56:62:a0:55:99:7b:c9:bb:26:
         7a:e9:3f:c4:10:21:88:bb:c2:16:46:da:10:8a:32:e9:90:fb:
         7f:a3:a6:03:50:05:ef:15:d3:2f:e0:5e:20:45:f0:c9:77:53:
         6b:43:99:90:c6:24:84:c0:f8:5d:50:9e:bd:ad:b6:9d:2f:81:
         b8:5a:a9:5f:99:c5:b5:37:86:1e:47:d4:15:fa:b3:4c:3e:aa:
         38:03:07:ce:5e:16:3e:0d:c5:7e:f6:3f:28:ce:18:50:e2:4f:
         d5:b9:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org