Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37332e302f32342d3234203d3e20323632353639.roa
File:                     3137302e38322e37332e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          CTz+lQ0ELD2ME79VijNt6QJ46lXhzKX+LdHO+c9XAvM=
Subject key identifier:   A6:B4:8C:8F:03:09:47:7A:F0:66:C9:C7:59:0A:3C:D2:95:C2:23:D9
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       2AA7CDE3F9B40D6B4F3AF8CB7C5D6BDBC212A80F
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37332e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        170.82.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:cd:e3:f9:b4:0d:6b:4f:3a:f8:cb:7c:5d:6b:db:c2:12:a8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=A6B48C8F0309477AF066C9C7590A3CD295C223D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:58:4d:c7:18:fa:f8:68:17:4c:6d:b7:55:
                    2a:d9:0c:b0:03:3a:36:d7:89:34:60:0a:fb:de:95:
                    d2:2e:14:d5:99:52:36:df:2c:44:27:81:18:c5:c2:
                    bc:2b:21:cf:a5:59:95:3b:74:c8:3a:00:f4:e4:c2:
                    4e:cf:47:f6:96:26:bb:09:1c:ac:01:95:84:31:b6:
                    3b:95:e1:fc:77:fb:d7:4a:d9:cd:2e:10:fc:72:4e:
                    4c:bb:06:47:97:16:cd:25:20:dd:3d:1e:75:0f:33:
                    4c:4a:ab:12:a3:f4:45:74:52:ab:f7:82:74:c8:6c:
                    13:5b:1a:ff:fb:ce:45:0e:cf:69:1f:02:59:a6:4a:
                    f7:49:a8:0c:73:44:2f:65:09:36:45:ee:fd:1c:7e:
                    e5:46:2e:02:e3:66:21:f9:62:17:58:c0:ae:2f:4a:
                    88:66:86:6a:32:6d:2a:53:99:ee:cc:03:a6:7f:c1:
                    24:e5:37:bb:5c:e8:dd:76:c7:2e:30:d7:6c:52:a6:
                    10:e8:1a:66:45:ec:de:ff:20:10:b9:f5:8d:cd:83:
                    fb:37:80:51:73:33:e6:6c:21:11:c8:b0:24:d9:03:
                    fd:f2:9a:1f:c1:e3:bb:63:50:56:16:dd:2b:d5:60:
                    90:9b:e1:8e:07:0d:dd:5f:69:0f:2e:4a:8e:0d:9a:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:8C:8F:03:09:47:7A:F0:66:C9:C7:59:0A:3C:D2:95:C2:23:D9
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37332e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:43:da:09:bd:ab:f3:0c:8a:74:3a:70:10:4e:08:80:b2:
         ae:80:3b:64:9d:0f:96:06:48:a3:bb:18:db:bc:a4:fe:96:7c:
         bd:5a:d2:06:94:81:84:73:8c:c1:9e:6d:87:ea:eb:15:0d:bb:
         0f:e9:b7:31:f9:24:61:fa:c9:95:51:dc:32:02:da:90:d5:5a:
         d6:00:1d:f3:b9:53:b1:4b:29:4f:f7:0d:4a:0c:81:64:1a:cb:
         52:05:1f:06:a2:d1:de:0f:e4:87:c3:55:d8:bf:fb:78:8a:df:
         32:f9:d8:10:52:0b:a3:1b:57:3d:31:71:a8:b1:d8:a2:b1:2c:
         4b:35:37:8d:b6:f8:8b:6e:20:18:23:c5:5c:2c:a2:e0:e1:db:
         1b:18:9b:dd:03:ea:9b:25:0e:9b:e8:87:e6:10:ec:20:60:8e:
         f1:14:af:3c:48:84:36:12:8d:4d:15:de:d5:c7:ed:1c:f2:71:
         72:90:8b:d4:70:c0:2e:ca:26:1f:ad:9a:03:18:ca:1f:e8:dc:
         25:5b:2d:16:db:12:6e:e9:cd:38:a7:30:3f:e3:c1:2e:5f:4e:
         07:80:04:a4:04:2e:c6:15:af:9f:fe:8e:8a:39:89:d1:7b:2e:
         f6:24:3b:09:71:bf:23:1d:5a:63:61:59:6c:ec:c9:fb:60:e4:
         e5:75:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org