Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32342d3234203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32342d3234203d3e20323635303836.roa (raw, json)
Hash identifier:          RLrN2kYo7q9OL7EspxOi8bCDIR/KeTC0RWHZr3ZBG/k=
Subject key identifier:   13:DD:04:5E:27:9F:27:4C:AA:03:62:D8:7B:D6:69:3F:09:63:C5:BA
Certificate issuer:       /CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Certificate serial:       485B87348DB05D3FB7D814019AC1F03EDFF7A46B
Authority key identifier: 89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32342d3234203d3e20323635303836.roa
Signing time:             Mon 18 Dec 2023 14:32:39 +0000
ROA not before:           Mon 18 Dec 2023 14:27:39 +0000
ROA not after:            Mon 16 Dec 2024 14:32:39 +0000
asID:                     265086
IP address blocks:        170.233.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5b:87:34:8d:b0:5d:3f:b7:d8:14:01:9a:c1:f0:3e:df:f7:a4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
        Validity
            Not Before: Dec 18 14:27:39 2023 GMT
            Not After : Dec 16 14:32:39 2024 GMT
        Subject: CN=13DD045E279F274CAA0362D87BD6693F0963C5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:ac:df:93:5d:11:69:be:b5:6c:6d:7c:17:
                    00:33:15:5f:03:60:0d:cf:fc:48:99:ce:a1:1a:66:
                    43:f6:a8:af:28:ac:3f:cf:6d:75:11:70:68:4b:c8:
                    05:15:8c:52:72:24:09:32:c4:55:08:dc:4c:73:9f:
                    41:d9:3f:46:66:70:f2:31:fa:37:d1:2b:3c:72:e0:
                    ed:dd:94:4d:86:10:a9:0a:90:43:51:98:e9:4a:44:
                    09:da:58:43:1f:4e:22:04:7b:9f:80:1f:7a:c5:4f:
                    51:7c:bf:36:b8:b8:b0:27:31:e0:38:c4:fe:13:ba:
                    6a:30:d6:57:23:d5:7d:ce:c5:72:28:8d:19:90:0c:
                    b4:65:1e:55:6f:ac:dd:93:d5:7b:c1:35:76:72:51:
                    42:73:f1:47:f4:b6:b1:ea:83:30:12:c5:b5:58:5e:
                    4d:e9:95:b4:a2:48:ef:99:05:e3:3f:c7:be:c9:3c:
                    59:c9:7a:02:d0:1b:42:f7:2a:9c:ce:9a:b2:73:07:
                    91:b3:06:d5:ab:92:df:39:19:3f:6a:98:53:d5:9f:
                    78:65:e5:3c:0a:96:d5:e4:4a:65:43:5d:7e:72:4f:
                    f8:20:14:2d:f7:d1:bc:b2:98:8e:36:59:1f:ed:ec:
                    04:34:bd:61:52:40:76:b4:67:9b:36:65:e4:3b:32:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:04:5E:27:9F:27:4C:AA:03:62:D8:7B:D6:69:3F:09:63:C5:BA
            X509v3 Authority Key Identifier:
                keyid:89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32342d3234203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:ca:84:91:ae:28:da:b0:54:bd:1d:22:79:80:7b:85:fe:
         8d:d6:09:c1:a6:b1:51:17:e9:aa:5e:ea:f0:98:69:dc:59:32:
         6b:1a:5c:02:c4:14:c3:73:e2:c6:fe:70:13:01:70:28:aa:ac:
         a4:8c:6a:c2:42:5a:34:ae:17:1b:c9:83:59:c7:4c:5d:c5:9d:
         68:7b:2e:d2:b6:90:f2:c0:d2:38:54:34:53:06:4c:1c:17:de:
         ec:2a:c8:6b:9f:9c:23:e1:7f:4d:fd:70:0c:67:65:d5:e7:9b:
         54:6b:38:88:05:1d:cb:51:56:eb:d0:7b:13:4e:8a:71:48:74:
         6e:9b:ef:b6:5f:9c:cd:25:44:92:4a:15:78:2f:c7:fa:36:83:
         4b:52:6b:a1:45:6b:26:9c:bb:85:7e:93:27:a6:60:28:5e:ef:
         db:ef:de:2a:83:fe:0c:eb:d9:d3:87:47:28:b0:81:45:9a:1e:
         53:09:27:47:20:3b:88:3c:f1:ba:40:5d:d6:2c:a7:33:c1:e4:
         61:6a:4a:2d:08:4c:e5:89:ae:74:e0:af:48:e7:a2:7f:ce:56:
         2c:bb:a3:96:04:5b:36:86:40:ba:29:7a:2f:52:38:6c:ca:30:
         66:ae:7e:83:93:e2:de:62:1e:bc:8d:42:01:ca:3c:c6:88:45:
         51:85:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org