Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa
File:                     3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa (raw, json)
Hash identifier:          ohzm7fYQBcJ4KhqU7e22o1pmgTYhGjVUDCM2pNW7ZQw=
Subject key identifier:   2D:36:02:7B:14:45:7A:70:6E:DD:F5:13:21:E5:5B:2F:DF:89:0E:A7
Certificate issuer:       /CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Certificate serial:       6583697F37010CAF1CBDA46D827CB17EA6CE0FF7
Authority key identifier: 89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa
Signing time:             Mon 18 Dec 2023 14:32:43 +0000
ROA not before:           Mon 18 Dec 2023 14:27:43 +0000
ROA not after:            Mon 16 Dec 2024 14:32:43 +0000
asID:                     265086
IP address blocks:        170.233.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:69:7f:37:01:0c:af:1c:bd:a4:6d:82:7c:b1:7e:a6:ce:0f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
        Validity
            Not Before: Dec 18 14:27:43 2023 GMT
            Not After : Dec 16 14:32:43 2024 GMT
        Subject: CN=2D36027B14457A706EDDF51321E55B2FDF890EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:b3:87:46:61:d7:2e:6e:cc:8b:53:1f:fe:
                    79:16:62:21:b8:7d:7f:ed:c6:69:8c:39:bb:c6:c6:
                    2a:da:fd:31:22:f6:b2:5e:bf:26:da:80:9f:d7:f5:
                    e2:2e:b1:27:04:8f:d7:ba:9c:76:aa:e0:a7:5f:a6:
                    0c:29:79:6e:71:e7:7d:0e:dc:6b:fb:23:2f:52:bd:
                    a8:08:fe:76:cf:e5:cc:5d:67:ba:56:36:ed:df:a6:
                    6b:8b:33:c4:ae:90:86:4e:78:ab:27:9e:0e:66:11:
                    7d:48:5a:27:e0:50:4f:98:56:e3:22:61:d7:4a:36:
                    d8:c8:6c:05:b7:ac:10:50:ae:b1:28:aa:a5:e9:d5:
                    da:dd:56:ce:06:64:f1:87:10:0f:0a:58:35:e8:f2:
                    7f:c6:16:25:c9:3f:3b:52:e2:fa:03:e9:eb:d4:3f:
                    21:fc:f8:11:91:9a:2f:5c:a7:5c:4a:6a:89:13:46:
                    5f:f3:95:1d:6d:3f:f8:fd:7f:4c:6b:3a:72:a7:a9:
                    42:e0:8d:f5:4e:32:e0:53:b5:09:ab:e2:e3:e8:93:
                    1b:6a:db:3a:42:6a:2f:fc:40:f2:47:a4:12:8a:10:
                    32:ba:75:d2:5a:25:4f:7d:dc:34:c8:ea:24:ed:1b:
                    10:3b:41:eb:64:c2:8f:62:37:f2:40:19:97:9f:e0:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:36:02:7B:14:45:7A:70:6E:DD:F5:13:21:E5:5B:2F:DF:89:0E:A7
            X509v3 Authority Key Identifier:
                keyid:89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:e0:07:81:bd:29:2e:22:3d:60:9b:81:a6:e6:c8:c4:37:
         2e:bb:6f:13:3e:0b:86:67:4e:a4:59:6b:19:60:85:f5:79:15:
         35:05:95:f4:ec:a6:23:46:61:3c:bd:b6:5b:32:ac:15:e4:d7:
         0d:72:be:12:2b:19:e6:e6:8e:46:25:89:6f:02:c4:a3:aa:4a:
         f0:16:c2:19:65:30:50:02:a5:a8:2d:2f:21:f2:7b:fe:a7:c9:
         e7:b6:d2:d2:81:b0:fa:98:e8:4c:e5:70:fa:85:51:eb:51:5b:
         75:80:42:41:44:33:45:93:50:05:2f:60:ee:4a:9b:38:1f:f6:
         9a:3f:eb:fc:f3:f1:7a:25:05:22:dd:ff:a8:29:68:5b:3b:4a:
         9f:65:47:c5:59:b6:fe:e6:a3:79:4b:95:0c:dd:4d:35:1e:22:
         23:25:7b:5e:9f:fb:0c:e2:ce:43:31:be:d0:c2:d4:8a:af:03:
         28:24:20:11:87:c6:5d:a4:98:ad:de:16:23:3f:53:a7:18:95:
         55:93:19:f8:d4:f7:37:ce:c2:35:94:26:60:dc:f1:c9:38:b7:
         de:e4:14:d4:27:c7:12:ed:de:9f:63:3e:85:d8:0e:12:a0:c6:
         72:d1:2a:ea:d4:5f:0a:36:3a:20:b8:d3:43:84:34:26:55:c5:
         c8:0e:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org