Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32332d3233203d3e203631353834.roa
File:                     3137302e3235342e3136382e302f32332d3233203d3e203631353834.roa (raw, json)
Hash identifier:          xgx6cguTFBzEenihpS5tJCzLlFDKfDfBE+yYL53p0WI=
Subject key identifier:   56:BF:CD:0D:83:55:A4:42:E2:7F:E2:68:4C:12:72:F1:77:A4:8A:BC
Certificate issuer:       /CN=F085DC3BDC9546AB32EBE3AB957AB1D72F083B27
Certificate serial:       04499D29BAF97C8940BCC80851B66EF38297B2C0
Authority key identifier: F0:85:DC:3B:DC:95:46:AB:32:EB:E3:AB:95:7A:B1:D7:2F:08:3B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F085DC3BDC9546AB32EBE3AB957AB1D72F083B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32332d3233203d3e203631353834.roa
Signing time:             Mon 10 Oct 2022 16:00:11 +0000
ROA not before:           Mon 10 Oct 2022 15:55:11 +0000
ROA not after:            Mon 09 Oct 2023 16:00:11 +0000
asID:                     61584
IP address blocks:        170.254.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:49:9d:29:ba:f9:7c:89:40:bc:c8:08:51:b6:6e:f3:82:97:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F085DC3BDC9546AB32EBE3AB957AB1D72F083B27
        Validity
            Not Before: Oct 10 15:55:11 2022 GMT
            Not After : Oct  9 16:00:11 2023 GMT
        Subject: CN=3082010A0282010100EF02BB57F124622B6081972E7D5E2F41ECFDCA2572D57E68D74B1B295DBA2C1269D71722E58FF824F38D62404A96163EFB72B5A09D7E51936EDDF4D1593CA27B3638793027CCA1BFD955A8BB5829547862A1B44D3807ECD2F9DE6419617170A28CAE3754F0AB32537553CB8C58158AFC31A8149916C9CCF584BAE9ED1AD61DAA55D7B9B095E936858BAF93F1CF0C1E6DAF01B85AD55205E54358AE54CCF067617A51B2E1DFA989539D435DB6521B8ED46FEF2089EB1A2DE398AE16346D222D132165AEF7F9C4C34B75F312A42E7DD9A1581DD59742CB7790911057D06E8CD9548BCA94E16DAFB30F9B413D88B0E88F211B1317E87CB070AF1E39CDA3F071589F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:02:bb:57:f1:24:62:2b:60:81:97:2e:7d:5e:
                    2f:41:ec:fd:ca:25:72:d5:7e:68:d7:4b:1b:29:5d:
                    ba:2c:12:69:d7:17:22:e5:8f:f8:24:f3:8d:62:40:
                    4a:96:16:3e:fb:72:b5:a0:9d:7e:51:93:6e:dd:f4:
                    d1:59:3c:a2:7b:36:38:79:30:27:cc:a1:bf:d9:55:
                    a8:bb:58:29:54:78:62:a1:b4:4d:38:07:ec:d2:f9:
                    de:64:19:61:71:70:a2:8c:ae:37:54:f0:ab:32:53:
                    75:53:cb:8c:58:15:8a:fc:31:a8:14:99:16:c9:cc:
                    f5:84:ba:e9:ed:1a:d6:1d:aa:55:d7:b9:b0:95:e9:
                    36:85:8b:af:93:f1:cf:0c:1e:6d:af:01:b8:5a:d5:
                    52:05:e5:43:58:ae:54:cc:f0:67:61:7a:51:b2:e1:
                    df:a9:89:53:9d:43:5d:b6:52:1b:8e:d4:6f:ef:20:
                    89:eb:1a:2d:e3:98:ae:16:34:6d:22:2d:13:21:65:
                    ae:f7:f9:c4:c3:4b:75:f3:12:a4:2e:7d:d9:a1:58:
                    1d:d5:97:42:cb:77:90:91:10:57:d0:6e:8c:d9:54:
                    8b:ca:94:e1:6d:af:b3:0f:9b:41:3d:88:b0:e8:8f:
                    21:1b:13:17:e8:7c:b0:70:af:1e:39:cd:a3:f0:71:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:CD:0D:83:55:A4:42:E2:7F:E2:68:4C:12:72:F1:77:A4:8A:BC
            X509v3 Authority Key Identifier:
                keyid:F0:85:DC:3B:DC:95:46:AB:32:EB:E3:AB:95:7A:B1:D7:2F:08:3B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/F085DC3BDC9546AB32EBE3AB957AB1D72F083B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F085DC3BDC9546AB32EBE3AB957AB1D72F083B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32332d3233203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:86:58:c1:bd:e2:92:2a:2b:6a:67:a9:2e:80:fb:19:a9:
         80:ab:ae:87:94:e7:61:96:55:41:47:01:b3:cf:90:49:42:e9:
         e5:f6:1b:5c:e7:da:6d:f2:d5:5c:d7:9e:77:7c:b7:62:b2:27:
         8b:93:82:81:04:4f:75:a9:b3:26:4a:4e:37:f7:95:4e:f1:10:
         0f:79:29:3d:a4:bd:89:9d:63:53:c5:b8:71:18:fe:8b:26:2c:
         cf:78:f6:15:45:c2:5e:ba:48:ac:38:93:69:83:b3:6f:8d:a1:
         41:77:c4:69:bc:f8:9a:a7:a8:23:ef:67:bd:d1:1b:48:9d:62:
         23:0b:67:a3:72:db:5f:47:b4:17:4e:2c:04:c7:58:c1:fa:c4:
         05:ea:41:7d:f4:02:19:98:87:e5:c9:ce:56:d3:26:99:86:de:
         04:59:60:45:6f:79:43:05:7a:49:74:1a:7d:65:51:2b:e9:ad:
         fb:19:a9:2e:d2:27:1e:22:21:69:12:d8:42:5f:9c:de:d6:19:
         50:0d:d5:f8:13:da:d2:5d:30:fe:c6:26:ba:68:ad:29:4a:dd:
         ea:ba:74:bc:29:da:77:41:f9:fc:fe:bc:4d:f1:f7:04:cc:48:
         cd:08:12:0d:44:b0:70:14:1a:cc:4f:03:23:5a:24:41:89:73:
         e7:9f:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org