Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32342d3234203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32342d3234203d3e20323634393938.roa (raw, json)
Hash identifier:          ZNiD9JRCVilRbr6JtghLRMmesS320qoUYoionFDv5mE=
Subject key identifier:   B1:CB:C2:16:EE:C9:46:99:C6:F7:84:4D:E8:CB:66:A8:36:CC:82:A6
Certificate issuer:       /CN=BF74D0DF34465209B429D590F319EC137C0F9331
Certificate serial:       1F34E5D3FDDC74182088C3A6FD0450A77587B499
Authority key identifier: BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32342d3234203d3e20323634393938.roa
Signing time:             Thu 11 Jan 2024 17:44:26 +0000
ROA not before:           Thu 11 Jan 2024 17:39:26 +0000
ROA not after:            Thu 09 Jan 2025 17:44:26 +0000
asID:                     264998
IP address blocks:        170.84.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:e5:d3:fd:dc:74:18:20:88:c3:a6:fd:04:50:a7:75:87:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF74D0DF34465209B429D590F319EC137C0F9331
        Validity
            Not Before: Jan 11 17:39:26 2024 GMT
            Not After : Jan  9 17:44:26 2025 GMT
        Subject: CN=B1CBC216EEC94699C6F7844DE8CB66A836CC82A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:38:9b:ed:dd:ff:81:de:45:33:85:27:e5:
                    8e:26:1b:32:28:8e:1e:88:88:71:1e:fc:24:0d:d5:
                    47:b1:1c:3f:34:e2:19:b0:5d:49:15:cc:19:e3:a6:
                    4e:62:6e:b5:84:14:73:13:64:b0:ca:68:5a:04:54:
                    4e:14:92:3f:06:aa:a1:85:47:30:3c:98:c7:c3:b4:
                    9c:df:2a:6d:e0:46:c3:ec:83:02:4f:cb:66:f9:06:
                    ad:69:7f:2c:e6:c4:88:d0:ec:d7:3e:49:2e:1f:f8:
                    e4:6e:12:85:60:3b:39:2b:6f:12:0d:19:e2:46:04:
                    d9:ff:f1:80:e2:0b:3a:dc:8f:71:61:1b:9e:a2:9b:
                    73:d7:ec:4d:10:96:95:1d:c9:0d:77:90:4c:50:82:
                    e9:82:48:16:ec:88:aa:65:bc:7b:80:6c:6c:16:64:
                    ad:92:40:99:d3:3f:f0:8a:d8:cf:67:c1:9c:ab:b9:
                    6f:73:76:b0:a2:f1:6d:1f:4b:04:c3:06:87:fd:7a:
                    35:28:6a:76:ce:e9:c0:25:2d:0b:40:20:5f:11:23:
                    91:71:88:aa:b4:62:6b:3b:db:0b:0e:d1:8b:ef:89:
                    db:a5:31:15:cc:e1:4a:74:66:94:bb:8a:4d:57:e5:
                    5e:a4:ae:a3:71:c5:b1:5e:ea:07:3a:41:fb:93:51:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:C2:16:EE:C9:46:99:C6:F7:84:4D:E8:CB:66:A8:36:CC:82:A6
            X509v3 Authority Key Identifier:
                keyid:BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32342d3234203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:72:da:b4:da:7c:93:4d:b7:d4:f0:9e:46:87:81:47:4b:65:
         79:2a:5b:e7:76:66:ce:b3:85:dc:9f:fb:84:45:80:41:b1:6c:
         e6:92:5d:b1:dc:e0:de:2c:40:7c:48:83:fe:29:6e:92:af:bb:
         d4:ec:c8:1d:e2:38:15:e3:56:73:43:c8:b7:30:2a:a2:49:53:
         22:70:5e:74:a3:ea:39:8a:5d:70:16:f5:84:63:d9:6e:b0:4d:
         5c:d3:f7:c1:af:70:44:03:23:8b:f6:05:e7:29:a2:49:13:44:
         b7:52:70:ea:b9:cb:57:55:97:a7:f6:c0:22:41:bd:ec:46:38:
         ed:a5:cd:60:a4:0f:54:3d:66:54:f7:d1:11:e4:dc:f3:0a:9c:
         92:5d:b4:50:a7:8c:63:5c:90:2e:22:5e:77:b3:ae:b9:b2:4f:
         58:a9:60:64:19:c2:35:be:df:3b:bd:5b:af:6a:94:13:bd:0b:
         08:b7:18:58:a8:4f:02:5b:bf:a5:e2:e1:5d:8f:b5:2a:0a:0e:
         76:17:5d:61:fe:c8:95:c6:ea:2b:75:50:4d:76:4e:26:d0:e2:
         26:1d:d5:12:84:e9:19:a8:4f:70:bc:04:6b:26:a0:33:21:ef:
         55:78:d2:6f:71:26:9c:73:cc:0f:4c:b4:96:7e:52:77:7d:cb:
         57:29:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org