Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3332203d3e20323732373537.roa
File:                     3137302e3234342e33362e302f32322d3332203d3e20323732373537.roa (raw, json)
Hash identifier:          U0uaBz9CLYCu4Jp1qpi/Eo83DkbwSRm2qIN8wj3/sW4=
Subject key identifier:   63:ED:A9:B7:CD:DF:6B:4B:2A:F0:77:52:4F:AB:96:8A:A1:D8:A1:6F
Certificate issuer:       /CN=CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020
Certificate serial:       3D1E5787771884015F790098A6B22003F623D083
Authority key identifier: CF:C7:4D:09:65:E1:DC:3B:D2:D1:11:A2:B2:E3:DD:F0:05:7D:A0:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3332203d3e20323732373537.roa
Signing time:             Thu 04 May 2023 15:06:57 +0000
ROA not before:           Thu 04 May 2023 15:01:57 +0000
ROA not after:            Thu 02 May 2024 15:06:57 +0000
asID:                     272757
IP address blocks:        170.244.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1e:57:87:77:18:84:01:5f:79:00:98:a6:b2:20:03:f6:23:d0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020
        Validity
            Not Before: May  4 15:01:57 2023 GMT
            Not After : May  2 15:06:57 2024 GMT
        Subject: CN=63EDA9B7CDDF6B4B2AF077524FAB968AA1D8A16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:f4:e5:9a:07:c6:17:38:de:bb:2a:80:a3:
                    fc:0c:cd:fd:06:55:06:95:da:fe:20:62:c3:ef:35:
                    36:3d:73:a0:25:ef:89:d8:81:bc:2d:c7:13:66:95:
                    73:bb:0a:7d:b5:4a:78:b4:62:7d:25:4f:04:b0:ec:
                    36:20:44:d3:7d:f2:07:1b:a7:cd:84:93:17:b8:8f:
                    41:9f:5a:88:89:12:04:aa:74:27:34:23:d7:c6:c4:
                    a6:fb:38:bf:e2:de:37:96:a3:f2:0b:36:be:f6:08:
                    a2:ac:dd:dd:75:e4:5d:4a:5b:b4:36:7f:02:40:5a:
                    e9:f6:71:1b:e2:d2:12:a1:5c:5e:cc:cb:5d:f0:1b:
                    84:ae:83:fc:9a:15:0e:87:e7:aa:45:0b:87:38:e7:
                    5c:15:a8:cd:1b:ed:21:d4:15:4a:f5:79:df:67:be:
                    2d:09:88:d8:03:be:de:16:d6:7e:e3:24:65:39:e1:
                    db:6f:ed:b9:9c:fb:d7:60:84:e7:38:95:34:3e:0b:
                    5f:ab:61:f0:4d:7a:3c:31:8c:cc:77:85:2a:37:48:
                    54:b8:e6:99:bf:14:9d:dc:7d:28:d0:75:14:18:9c:
                    bf:31:83:84:9f:f2:02:37:94:b7:4c:9e:b2:bf:05:
                    24:c7:12:74:81:52:11:8b:8e:ed:ed:d9:98:82:fc:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:ED:A9:B7:CD:DF:6B:4B:2A:F0:77:52:4F:AB:96:8A:A1:D8:A1:6F
            X509v3 Authority Key Identifier:
                keyid:CF:C7:4D:09:65:E1:DC:3B:D2:D1:11:A2:B2:E3:DD:F0:05:7D:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3332203d3e20323732373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:0b:fb:dc:22:d0:88:88:ac:e1:c0:b3:ed:5b:37:a9:ee:
         36:a6:b7:26:1b:c8:5c:09:99:bf:13:72:82:b9:35:a6:9f:e8:
         33:c8:98:d9:35:87:6d:24:0c:ef:76:5d:fb:23:e0:62:31:40:
         f2:38:87:2d:a6:ac:b4:d7:89:02:ae:62:76:b2:43:04:0e:5c:
         41:38:3b:61:23:c8:ef:58:1f:5e:c8:f6:8b:1f:99:45:16:39:
         fa:a3:3d:08:f8:a8:fa:db:4c:d4:6a:ae:00:92:94:5a:f3:ff:
         20:b8:65:f1:c9:12:d5:77:d2:05:06:0b:d0:2c:35:73:3e:c4:
         db:8e:84:51:14:cb:1b:83:1f:cc:2a:be:a3:5d:2c:ea:83:f7:
         5b:9c:00:11:d1:9d:a4:1a:bf:5f:d9:06:05:79:01:c4:1b:83:
         8c:e2:7f:5f:63:6a:df:ff:f1:3e:d0:91:05:0d:a4:c7:22:f8:
         3d:a1:dd:ae:47:6e:f1:ef:37:e6:66:20:f8:1a:8d:53:e4:aa:
         7e:36:2b:cd:03:1a:50:e3:82:f8:f8:6b:52:e0:af:b3:5b:35:
         54:25:7f:ee:f9:bd:fc:89:7b:9c:89:73:ce:69:50:3b:73:20:
         bc:1f:af:16:54:07:dd:9b:c2:be:d8:66:51:86:24:73:33:31:
         7b:6d:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org