Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
File:                     3137302e38322e37322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          xOPqSLtzOIuLQWiRvnAFplz8+YWbkBA5pJz6PyLADMA=
Subject key identifier:   31:3A:3D:3A:65:95:F3:24:BF:C0:94:04:7B:ED:4E:EC:51:D5:C1:97
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       3C476578567C1F9037D4E823AD94936500B19C16
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        170.82.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:47:65:78:56:7c:1f:90:37:d4:e8:23:ad:94:93:65:00:b1:9c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=313A3D3A6595F324BFC094047BED4EEC51D5C197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:ae:99:5d:92:fc:10:71:ca:4a:91:ff:46:
                    89:50:06:04:bf:6a:56:4c:ec:f9:c1:ca:01:f0:60:
                    d2:45:3c:ba:3e:a6:92:72:95:49:05:78:76:48:fa:
                    c4:d9:9d:43:25:35:52:ac:d7:9d:fd:98:5f:58:7c:
                    e4:a5:1e:4e:60:a6:79:80:65:b1:d4:77:f1:db:30:
                    80:98:10:87:63:db:f8:e6:ec:a9:be:9a:27:07:7c:
                    05:26:18:43:07:d6:6c:c6:da:6a:ca:ba:6a:3d:f4:
                    e8:a0:6f:1e:87:e3:6c:0a:77:f9:b9:7c:3a:f7:e3:
                    7c:a4:40:5d:9d:e8:73:06:b2:5e:16:5c:89:5e:e4:
                    57:a8:e7:f9:fe:4d:9f:f8:b4:22:2c:64:a5:59:96:
                    19:19:b8:4c:76:1c:77:b8:e7:a8:b4:d7:26:0f:92:
                    e6:d9:53:2b:7b:70:b6:86:62:24:00:f1:87:5b:fd:
                    7c:c1:5b:f2:89:34:0f:e4:27:2d:ad:90:34:fb:c6:
                    24:6c:22:70:bf:f9:00:07:dc:0f:d0:cf:25:53:ee:
                    14:6e:2e:1b:bf:86:d1:70:c0:f9:b2:39:70:5e:09:
                    1e:58:e0:6f:bf:58:d1:ea:54:97:f1:ce:ce:aa:94:
                    37:1d:1c:a0:ee:ed:2b:23:32:08:a7:1a:54:ff:ef:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:3D:3A:65:95:F3:24:BF:C0:94:04:7B:ED:4E:EC:51:D5:C1:97
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:e4:cd:4b:78:5c:08:48:51:bc:f5:12:a0:7d:9b:8e:cb:
         d2:9f:bf:dd:7f:e0:a4:99:40:09:55:2f:af:c7:43:ee:2a:ed:
         66:d4:3e:78:b4:ec:3c:a0:88:19:c9:5b:56:0b:98:cf:2d:5f:
         15:ef:94:b4:37:3f:4d:23:b5:c2:1c:2b:aa:79:cb:b8:0a:14:
         52:26:13:bb:74:b1:88:e3:06:3f:2f:e6:a4:1f:f4:37:d5:94:
         e7:ce:f4:cc:35:3c:c9:c9:3c:8e:49:df:e1:3f:6e:16:de:3a:
         b7:2b:99:69:4b:0b:60:26:f5:9f:b5:fd:3c:05:3d:ca:0b:a4:
         24:42:95:83:21:7f:fe:ed:74:4d:3c:a5:da:d1:18:78:96:c8:
         42:58:44:11:07:b3:39:6a:6d:f1:8b:ec:99:f3:57:a3:0e:09:
         59:d4:3a:17:f9:db:79:af:c5:24:da:95:4e:c7:e9:25:66:10:
         c9:22:99:2d:f7:91:8a:27:7d:3e:33:22:1b:35:63:cc:90:7e:
         5e:ce:16:10:25:ec:d4:3e:d8:59:2a:44:e0:14:0a:ca:1d:22:
         97:f0:19:6c:a4:4c:2a:17:b4:c7:f9:3b:b3:d0:13:61:e1:01:
         cd:1e:f6:8d:ea:ec:7c:4e:13:95:59:63:4f:56:89:32:97:b8:
         60:f9:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org