Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa
File:                     3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa (raw, json)
Hash identifier:          BCUsbln/n6yf1T6r5dnykrC6jaIPe1asbOFgI6eCyn0=
Subject key identifier:   7A:B9:0E:46:ED:F3:5D:5C:AC:CE:23:B3:BC:E7:A0:DE:6C:B8:0E:BF
Certificate issuer:       /CN=93764B1F87D55A2888FF3D1906B289FD50CF8145
Certificate serial:       28FCFA664106F86782E770B990CE0F5F94DD19B5
Authority key identifier: 93:76:4B:1F:87:D5:5A:28:88:FF:3D:19:06:B2:89:FD:50:CF:81:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93764B1F87D55A2888FF3D1906B289FD50CF8145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa
Signing time:             Tue 09 Apr 2024 18:08:24 +0000
ROA not before:           Tue 09 Apr 2024 18:03:24 +0000
ROA not after:            Tue 08 Apr 2025 18:08:24 +0000
asID:                     265086
IP address blocks:        170.233.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fc:fa:66:41:06:f8:67:82:e7:70:b9:90:ce:0f:5f:94:dd:19:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93764B1F87D55A2888FF3D1906B289FD50CF8145
        Validity
            Not Before: Apr  9 18:03:24 2024 GMT
            Not After : Apr  8 18:08:24 2025 GMT
        Subject: CN=7AB90E46EDF35D5CACCE23B3BCE7A0DE6CB80EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:f5:b8:aa:52:36:6c:d8:95:1a:08:63:8e:
                    db:82:2f:33:76:7d:50:e5:e7:c2:60:e9:ed:85:6a:
                    d5:25:33:35:8a:08:17:3c:f3:6f:3e:e9:9d:ac:bd:
                    14:a3:85:12:a1:0d:4e:4a:ee:6f:17:10:52:24:40:
                    3b:78:97:4f:5a:dd:f3:8b:c6:48:d1:61:a5:c8:cf:
                    54:d6:30:ac:72:2d:41:9b:30:e6:ef:94:3d:89:80:
                    78:ce:a3:8a:de:8b:b1:52:a3:12:fb:d7:45:5e:a4:
                    17:16:ed:bc:e0:29:a6:98:93:71:af:6a:a9:ab:10:
                    55:84:63:af:d8:4f:5c:9e:1d:fd:b8:f9:10:2c:4c:
                    76:83:0d:0e:01:d4:e7:4f:f0:5f:a6:02:cb:2c:35:
                    a6:2c:4d:4d:c2:27:de:1d:27:34:24:90:59:90:1a:
                    f0:ab:f9:2a:74:0b:6c:43:f2:4c:4d:96:54:da:63:
                    db:0c:d2:ed:98:cf:29:d9:2e:a9:ab:99:86:a0:9b:
                    43:18:d9:b7:56:5c:91:3f:fc:77:4a:b2:4c:c0:c4:
                    d0:57:26:63:1e:19:ec:0c:c7:e9:68:55:7c:fa:78:
                    1d:7b:0a:f3:0d:0d:6d:cb:91:31:2e:a6:d7:f5:7b:
                    1a:34:d5:e9:22:58:58:f5:05:74:26:d8:64:8c:7a:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B9:0E:46:ED:F3:5D:5C:AC:CE:23:B3:BC:E7:A0:DE:6C:B8:0E:BF
            X509v3 Authority Key Identifier:
                keyid:93:76:4B:1F:87:D5:5A:28:88:FF:3D:19:06:B2:89:FD:50:CF:81:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/93764B1F87D55A2888FF3D1906B289FD50CF8145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93764B1F87D55A2888FF3D1906B289FD50CF8145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:13:43:45:5f:7e:09:bc:e2:f3:6f:a6:22:85:f4:74:b8:
         8b:f2:4c:b8:b2:56:01:8d:2b:81:b5:02:44:af:3e:b2:8e:f3:
         3a:bb:0b:99:af:fc:df:4e:82:44:4d:66:c9:1f:f9:e8:ae:65:
         77:ff:1e:af:67:d5:eb:65:b2:27:df:de:39:39:70:f1:71:3a:
         7d:f8:e3:64:09:a0:05:93:3f:bf:9b:a9:ae:1a:6d:4a:01:6e:
         01:df:b8:c0:84:7b:04:8a:99:c4:04:f8:18:a2:53:86:16:58:
         1a:9e:9c:26:ba:c8:9f:c0:35:21:76:95:3b:e8:35:24:7d:de:
         02:1e:20:41:29:66:7f:50:31:5b:e8:25:91:78:49:2c:1f:9f:
         c9:04:a0:92:51:a7:53:47:9b:ed:99:a0:eb:5c:e0:6f:59:8c:
         37:51:39:73:4a:ad:fc:97:45:34:34:3c:0a:44:f3:65:21:71:
         92:fc:59:34:c2:0a:57:5c:84:d5:85:8e:86:0a:3f:07:b4:09:
         5e:ee:87:36:ca:a3:d8:7d:45:a4:1a:83:ea:93:66:99:a4:09:
         de:0d:53:98:a0:fb:50:d9:e3:43:12:c6:5f:61:12:73:0b:ef:
         55:5a:71:54:e1:5d:a1:e4:ac:66:ec:2a:37:b1:29:5e:34:d8:
         57:da:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org