Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32332d3233203d3e20323634393837.roa
File:                     3137302e38342e31322e302f32332d3233203d3e20323634393837.roa (raw, json)
Hash identifier:          PlRz/cVZqlsJUzIrb5SUVRUaYvwC2HSBU6ud9x2r7zc=
Subject key identifier:   73:FF:C0:E7:42:48:86:9A:50:2B:48:6D:B2:27:B1:2E:34:2F:A0:81
Certificate issuer:       /CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
Certificate serial:       32B77EE50D6071221EF5C7730197080CCD697FCF
Authority key identifier: 3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32332d3233203d3e20323634393837.roa
Signing time:             Mon 12 Feb 2024 13:21:48 +0000
ROA not before:           Mon 12 Feb 2024 13:16:48 +0000
ROA not after:            Mon 10 Feb 2025 13:21:48 +0000
asID:                     264987
IP address blocks:        170.84.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b7:7e:e5:0d:60:71:22:1e:f5:c7:73:01:97:08:0c:cd:69:7f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
        Validity
            Not Before: Feb 12 13:16:48 2024 GMT
            Not After : Feb 10 13:21:48 2025 GMT
        Subject: CN=73FFC0E74248869A502B486DB227B12E342FA081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:d3:a6:fa:e3:6f:94:56:ea:d8:c0:56:b5:
                    73:b2:42:e4:d0:70:c0:37:3b:3e:38:50:09:3d:af:
                    01:07:1d:67:1f:90:b9:62:b9:41:c6:8d:30:ed:ab:
                    fc:57:75:18:fb:61:a2:32:de:dd:7b:46:bb:66:c4:
                    fc:53:42:01:2a:bb:25:ad:ef:60:94:fb:55:4f:2a:
                    43:08:fb:8a:74:47:9e:f3:e8:db:80:93:50:d6:63:
                    74:86:30:6a:aa:87:e8:db:cf:1f:b0:e8:53:62:d2:
                    dd:8f:be:51:27:2d:0a:d3:3e:2b:06:0e:6a:52:a6:
                    0a:18:b3:34:39:93:ab:60:90:89:03:80:cf:76:f4:
                    5f:0d:b0:02:4a:b3:82:49:79:1e:ee:9b:cf:5a:eb:
                    de:0c:03:d6:96:f5:af:fc:79:4e:58:e0:38:2d:ba:
                    00:d8:b5:e6:43:d4:12:4f:c8:ef:37:05:26:07:67:
                    c5:bd:a7:2c:dd:03:ce:22:bf:14:17:12:bd:d6:63:
                    75:0c:0e:c7:62:75:3b:94:c2:50:db:d7:77:73:0c:
                    01:98:64:d5:39:39:12:6b:f8:0b:56:58:0d:47:6c:
                    7c:9f:02:51:f5:1a:eb:18:4c:d6:ef:ac:6f:38:7d:
                    b5:fd:6a:0c:03:29:9a:86:8b:48:57:92:29:83:3c:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:C0:E7:42:48:86:9A:50:2B:48:6D:B2:27:B1:2E:34:2F:A0:81
            X509v3 Authority Key Identifier:
                keyid:3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32332d3233203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:66:44:3a:ed:fe:cf:c4:13:a0:0f:e6:76:b5:d8:e1:65:c7:
         fc:cd:16:38:d8:d7:9c:75:4b:7d:3e:a9:d8:c0:54:82:e1:68:
         b8:16:1a:d8:e4:64:83:63:bb:c7:4c:21:8a:15:56:b2:42:b7:
         d2:de:15:d9:95:fc:09:3e:6f:b6:67:63:41:9f:5e:32:d6:16:
         62:ba:29:0a:00:37:52:d9:1f:7a:0a:d8:f4:3b:ca:f4:66:54:
         2c:54:8a:94:f1:a8:59:72:ed:7e:dc:9c:7b:0c:3e:a2:db:c9:
         f9:6b:0a:b1:d4:0a:b6:27:7f:4e:45:95:75:42:96:7a:5f:ba:
         db:69:71:c3:89:27:1b:27:83:d1:7e:7f:e4:ab:3a:a0:9c:c9:
         6c:e7:76:e4:85:da:9f:ec:6c:d7:17:d2:28:4f:c6:55:2c:e4:
         3a:00:1c:21:c1:93:2c:55:49:d8:c2:9f:6c:5e:da:d4:87:2f:
         f5:4b:ee:f0:ca:c4:e5:c0:cf:f8:62:16:08:88:eb:6b:e9:d6:
         d1:1e:35:18:a3:65:0c:d9:5f:55:a7:32:32:96:c3:55:e2:e6:
         4e:fa:19:10:83:07:84:a5:84:46:96:c5:a4:bf:d6:b8:a1:6d:
         5a:d7:81:59:8e:89:57:17:28:95:9d:4b:8e:3c:95:a8:26:a1:
         cd:97:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org