Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36352e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          nBAKpF73chzRQEu1x1UGU5wtSbgf4wfdZ2LGIPa3adw=
Subject key identifier:   0F:9B:FA:53:2F:A1:B5:FB:73:22:42:E2:ED:CD:56:7B:DA:BC:1E:86
Certificate issuer:       /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial:       074F034E0A5E0BFAE2E9B9346674918FAE5F0B28
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
Signing time:             Thu 09 Mar 2023 14:55:40 +0000
ROA not before:           Thu 09 Mar 2023 14:50:40 +0000
ROA not after:            Thu 07 Mar 2024 14:55:40 +0000
asID:                     262514
IP address blocks:        170.80.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4f:03:4e:0a:5e:0b:fa:e2:e9:b9:34:66:74:91:8f:ae:5f:0b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Validity
            Not Before: Mar  9 14:50:40 2023 GMT
            Not After : Mar  7 14:55:40 2024 GMT
        Subject: CN=0F9BFA532FA1B5FB732242E2EDCD567BDABC1E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:bd:7e:57:b1:56:16:3c:d8:b3:cd:49:4f:
                    01:5c:d9:38:c8:0f:13:28:cb:4f:77:40:ad:9a:06:
                    95:2a:a5:c1:aa:ee:5b:80:9d:75:0c:b4:af:30:ff:
                    cb:e3:8f:db:8e:0f:c7:09:6f:28:68:e4:2d:ed:ca:
                    be:3e:1c:1d:55:89:b1:52:38:d3:82:ae:46:3a:8b:
                    ac:bb:5b:71:a0:d2:a9:e0:86:6a:1a:4f:6e:4a:db:
                    9c:8f:5d:ab:ce:bd:fa:68:1d:61:e1:48:a6:57:9f:
                    ac:50:16:cd:1f:84:d8:40:ce:ef:73:71:ba:c9:c1:
                    a7:e5:61:30:6f:72:b2:36:85:06:38:23:5b:b9:b4:
                    f2:fe:a8:3d:94:32:14:21:6f:36:aa:f0:57:31:7f:
                    f2:75:05:86:34:75:fc:60:5c:b0:fa:3a:d5:58:65:
                    cf:44:a6:11:ef:ff:33:e4:7a:3e:e9:8f:49:af:6c:
                    b1:2e:a8:1a:d7:b6:2c:3c:c5:54:04:13:3c:ef:42:
                    b5:02:44:c3:67:59:5b:3f:be:c3:5f:40:06:10:59:
                    48:0b:8e:91:f0:ad:12:45:e6:13:5a:c6:03:c7:fe:
                    8b:ac:ac:6a:eb:ef:30:0d:4e:41:95:8b:82:5e:26:
                    e6:12:cc:67:04:14:58:26:c1:8b:7e:a6:c9:36:f2:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:FA:53:2F:A1:B5:FB:73:22:42:E2:ED:CD:56:7B:DA:BC:1E:86
            X509v3 Authority Key Identifier:
                keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:3e:a3:ae:75:01:06:d0:0d:98:44:1e:0a:4a:77:41:f8:
         29:2d:d4:4c:46:1d:4c:86:7d:ad:a7:9b:76:5c:7c:ee:22:44:
         ad:b4:a2:5f:d9:02:c1:d2:c1:18:6f:53:58:39:e4:75:6b:40:
         8a:f9:59:6a:8c:26:bf:c3:85:73:ec:b2:2a:d9:69:cc:cf:a6:
         5c:12:58:74:ea:3d:12:b4:34:ec:26:70:d2:21:89:d3:d8:0d:
         78:d8:af:af:94:d0:59:21:46:e3:1c:af:e9:95:b6:c2:77:f0:
         25:ec:ca:83:68:dc:71:e9:77:b4:94:da:71:7e:f8:3e:51:c3:
         19:0a:de:6f:37:69:e1:6c:35:49:db:63:a3:8a:37:ac:35:ba:
         14:1e:eb:23:de:8d:40:bc:93:ad:00:58:7d:85:ec:2e:40:c0:
         39:24:99:8a:b9:d5:1b:1c:db:5c:dc:92:bb:d2:b2:11:9f:cf:
         c9:fb:8a:06:7d:35:78:ef:15:8a:a7:f6:cb:4b:c2:cf:34:d8:
         fa:58:94:7d:08:d3:98:12:a5:58:53:60:3f:4d:fc:84:20:b9:
         ee:88:f0:1a:ae:52:b7:e1:54:50:f4:05:9e:f6:40:e9:8b:61:
         32:b2:a9:8f:86:21:dd:c5:2a:1e:99:0b:6e:63:d7:b7:c0:1d:
         e8:1d:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org