Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31342e302f32332d3233203d3e20323634393837.roa
File:                     3137302e38342e31342e302f32332d3233203d3e20323634393837.roa (raw, json)
Hash identifier:          sWRMqupqPApx1noZMY75eEHNGZU/4DvdpxYqdnjUWHk=
Subject key identifier:   C2:2E:22:E7:12:B5:00:E0:4C:B2:C1:D5:E2:8C:FB:A3:6E:46:4B:47
Certificate issuer:       /CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
Certificate serial:       7C703FB0CB054302B562327AD5E1326C0AF97483
Authority key identifier: 3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31342e302f32332d3233203d3e20323634393837.roa
Signing time:             Mon 12 Feb 2024 13:21:47 +0000
ROA not before:           Mon 12 Feb 2024 13:16:47 +0000
ROA not after:            Mon 10 Feb 2025 13:21:47 +0000
asID:                     264987
IP address blocks:        170.84.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:3f:b0:cb:05:43:02:b5:62:32:7a:d5:e1:32:6c:0a:f9:74:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
        Validity
            Not Before: Feb 12 13:16:47 2024 GMT
            Not After : Feb 10 13:21:47 2025 GMT
        Subject: CN=C22E22E712B500E04CB2C1D5E28CFBA36E464B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:0b:01:a2:b2:84:f2:aa:56:d0:9d:f8:91:
                    ba:65:ea:c5:ed:00:e8:83:fc:d3:b1:a1:0e:bb:f2:
                    dd:07:58:f8:40:28:d8:82:cb:1f:ce:d7:00:03:3f:
                    9a:dc:4b:4e:1b:cf:ad:73:96:6e:ee:e4:a6:e6:5a:
                    e7:95:61:63:58:e1:7f:22:c6:f5:73:55:92:78:86:
                    0d:9d:3f:ca:ce:2f:29:31:70:4c:63:28:cf:01:9a:
                    dc:f5:8b:0d:14:b2:fb:20:25:4e:95:a2:fe:2e:d6:
                    2c:e7:15:07:57:d7:63:76:25:be:97:87:81:91:eb:
                    20:3c:71:d9:81:da:ba:1b:a6:3d:a9:6d:e1:88:65:
                    97:63:78:aa:c2:5c:6b:cd:2a:20:d8:9d:cb:6b:d6:
                    c2:08:1a:9f:77:b6:8a:78:11:f4:70:57:52:96:6b:
                    4a:e9:12:38:12:3c:c9:88:16:60:c9:db:6b:3b:14:
                    29:83:67:27:52:73:71:de:ef:79:84:f5:0f:b3:01:
                    e2:fd:16:26:72:02:d3:96:59:91:d3:31:0f:32:27:
                    b5:7c:66:ca:6d:60:d6:fc:c3:e5:76:dc:56:b1:9b:
                    d5:1e:59:78:81:b4:3e:27:4f:5d:1c:e4:86:98:f9:
                    cd:46:f2:11:23:35:31:37:57:37:25:21:ed:78:4c:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:22:E7:12:B5:00:E0:4C:B2:C1:D5:E2:8C:FB:A3:6E:46:4B:47
            X509v3 Authority Key Identifier:
                keyid:3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31342e302f32332d3233203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:c6:10:57:76:ca:74:0e:08:22:d8:d1:6e:66:45:be:4a:
         95:16:40:b6:5c:73:9a:5b:f8:12:1c:36:ac:37:1a:bd:0e:c3:
         fc:10:09:20:99:08:6a:05:d5:e9:4e:71:c9:de:59:99:20:7f:
         cd:0b:c2:0c:6e:9d:54:70:f3:6b:90:ac:1b:35:7f:3e:4b:0e:
         b3:1f:4d:37:1c:e1:0a:a8:6a:19:6a:80:8c:d6:81:c7:1d:1e:
         62:ea:39:11:bd:bf:1a:07:bc:32:99:fb:53:03:01:7a:c2:13:
         a8:1f:87:54:6f:3f:92:c9:b6:1e:6c:89:a9:bc:02:fa:3c:5d:
         f4:73:2c:fd:34:fa:d3:2f:eb:f5:79:9c:e7:92:cb:c1:e8:02:
         02:a8:b0:df:44:e0:02:77:52:f4:31:0e:1b:75:3e:52:ad:1d:
         63:9c:17:65:8a:ab:90:1c:44:38:29:f3:70:e5:18:84:22:f4:
         02:10:2e:42:e9:43:a2:fb:76:7a:9b:4b:a9:49:f8:e3:98:b5:
         4c:97:cd:01:e8:06:ac:bc:91:9a:1a:5b:b7:61:58:59:da:35:
         cf:22:a6:bb:61:4c:e0:93:4c:e1:7a:a7:fd:bd:d3:73:f4:d0:
         52:b2:a5:2c:43:9c:a7:14:7b:7e:0e:23:94:91:eb:22:67:14:
         67:10:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org