Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa (raw, json)
Hash identifier:          Dvgh2eglmGd2PGjbrUMUGa9KEddwMaO06RlPeNP4UJc=
Subject key identifier:   4E:EA:8C:3D:C5:0A:4C:E8:BE:7F:EE:71:27:63:26:6C:D8:9E:E8:14
Certificate issuer:       /CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
Certificate serial:       0237B3C4F01F46C0339DD2F6E5F172C775FDA01E
Authority key identifier: 5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa
Signing time:             Mon 19 Feb 2024 17:40:56 +0000
ROA not before:           Mon 19 Feb 2024 17:35:56 +0000
ROA not after:            Mon 17 Feb 2025 17:40:56 +0000
asID:                     264998
IP address blocks:        170.84.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:37:b3:c4:f0:1f:46:c0:33:9d:d2:f6:e5:f1:72:c7:75:fd:a0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
        Validity
            Not Before: Feb 19 17:35:56 2024 GMT
            Not After : Feb 17 17:40:56 2025 GMT
        Subject: CN=4EEA8C3DC50A4CE8BE7FEE712763266CD89EE814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:2c:94:cb:1f:d7:e2:ea:8b:e9:9f:2c:e8:
                    94:43:83:00:4b:3e:d5:45:e5:46:95:f7:71:99:58:
                    ab:ed:06:de:75:fe:e4:89:ac:a5:da:3c:63:fe:c2:
                    09:8e:f6:ec:c8:45:9c:04:2e:a4:b6:fd:81:e2:d4:
                    5f:14:3d:3a:ef:a9:c2:f2:09:f3:0c:aa:53:cf:53:
                    25:ed:99:54:86:94:c7:6a:81:3b:d9:73:1e:03:29:
                    2e:2e:fd:95:36:39:f9:27:62:92:ce:ca:94:46:42:
                    f6:6d:dd:56:db:0f:ea:92:4f:16:ea:74:c9:aa:96:
                    74:fc:33:7b:0e:4f:5e:99:25:26:f9:c0:89:b6:95:
                    91:a4:9e:15:a7:9f:47:38:ab:15:d1:1d:67:ef:78:
                    f9:4c:e6:ec:69:93:0d:76:de:86:ef:73:0e:41:1a:
                    fa:78:2d:d7:98:d7:44:ab:bb:c2:b4:ff:33:b1:cb:
                    6a:31:6e:9f:68:4f:34:2f:17:64:77:8b:12:98:d0:
                    2b:6e:69:91:d3:b8:54:bf:49:14:62:e4:71:e2:44:
                    67:ce:c3:d3:79:8d:1c:0f:91:cc:63:7b:f9:2f:01:
                    8b:7e:bd:4d:a7:50:cb:ee:76:da:f5:5d:a6:b6:08:
                    82:53:43:87:16:b5:6d:dc:a2:e5:1c:20:19:b5:0d:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EA:8C:3D:C5:0A:4C:E8:BE:7F:EE:71:27:63:26:6C:D8:9E:E8:14
            X509v3 Authority Key Identifier:
                keyid:5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:ef:47:a2:7f:54:93:e6:c4:0f:06:82:ec:d8:bb:b9:a8:
         33:a2:39:49:c0:09:df:ca:0f:30:60:8c:54:37:73:fb:64:fe:
         88:58:ed:2f:82:0c:57:7d:c7:f5:27:af:be:c4:50:f4:79:cb:
         d6:06:1d:1c:db:8f:29:01:59:e8:2a:0c:98:cc:b3:7b:84:99:
         c4:b7:8f:33:55:3d:df:89:1c:48:4f:83:d9:7a:d1:5d:c3:79:
         9d:53:35:22:af:7d:ea:5d:24:f7:a3:90:88:6d:e1:b2:7d:9f:
         2a:df:99:fd:fd:dc:a2:be:56:08:92:d6:f0:b6:00:d0:c9:19:
         30:3e:29:7d:55:d1:f5:d2:3f:5f:b8:87:dd:b7:c2:ed:c5:a5:
         c1:dd:78:02:8f:38:6d:06:d2:49:b9:27:42:78:be:4d:74:96:
         04:72:a5:14:77:4f:49:08:78:c5:fb:d0:55:f3:cf:4e:24:9e:
         ec:14:ac:fe:ad:d5:63:d7:06:c9:3c:a9:f5:bf:4e:5d:82:85:
         b7:a6:c4:15:50:b8:27:a4:89:63:4a:0a:1d:19:58:89:57:08:
         ef:20:93:f1:b2:44:b3:c2:1d:04:13:a6:80:e9:b3:12:a6:af:
         0d:ff:6c:77:59:15:3f:71:0a:c7:87:96:b2:84:94:f1:7b:32:
         a5:37:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org