Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137312e302f32342d3234203d3e203631353834.roa
File:                     3137302e3235342e3137312e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          IXqjSCSwlTCWWXEAM8w9wJN5jg1oxI5/U9O16qLsnTI=
Subject key identifier:   43:C0:0E:B2:DB:9D:C5:2F:A3:82:BE:75:F9:DC:80:CE:9B:47:0C:93
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       33610E737ABE050D9D70206346447808CF6EF529
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137312e302f32342d3234203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:32 +0000
ROA not before:           Mon 10 Jul 2023 19:01:32 +0000
ROA not after:            Mon 08 Jul 2024 19:06:32 +0000
asID:                     61584
IP address blocks:        170.254.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:0e:73:7a:be:05:0d:9d:70:20:63:46:44:78:08:cf:6e:f5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:32 2023 GMT
            Not After : Jul  8 19:06:32 2024 GMT
        Subject: CN=43C00EB2DB9DC52FA382BE75F9DC80CE9B470C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:c5:14:28:d6:7e:d1:3f:de:6f:bf:9e:fe:
                    22:2e:15:c8:40:cd:1b:5b:bd:e0:d8:4e:57:66:5f:
                    44:42:41:35:05:ed:04:4e:40:25:28:1c:60:81:4b:
                    9d:7f:1e:7d:16:f8:bd:46:ad:22:8b:76:e3:61:da:
                    d0:58:26:90:2e:95:bc:2c:b0:cb:cd:04:37:8f:a6:
                    cf:7d:d4:4b:b0:08:d5:d3:ab:67:77:e6:45:d3:4b:
                    5a:0a:2b:fa:75:42:f8:3c:13:8f:2a:1f:10:61:4f:
                    58:6e:35:82:79:1b:64:16:76:5a:cb:50:dd:84:aa:
                    14:19:fe:ca:91:68:71:ad:57:1d:06:25:5b:15:b5:
                    02:02:27:64:16:5c:3a:7d:dd:14:f5:4c:19:eb:d1:
                    8a:45:4c:f6:f2:4e:5f:26:51:d2:fe:e6:90:a9:20:
                    39:87:47:f7:9d:e6:a3:7f:ab:47:07:33:b6:64:b4:
                    be:68:80:fb:b4:dc:3a:2e:79:36:22:55:9a:c5:e3:
                    20:99:79:a7:95:88:d3:df:7c:71:b4:9c:b4:c0:e7:
                    fa:dc:0f:d7:0b:ca:87:48:2b:b2:b4:d2:e1:33:64:
                    e5:72:ab:8a:a5:00:ec:78:5c:93:e1:c4:c7:62:d1:
                    1d:1e:6e:8d:7f:30:49:07:96:54:b4:54:83:b0:0c:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C0:0E:B2:DB:9D:C5:2F:A3:82:BE:75:F9:DC:80:CE:9B:47:0C:93
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137312e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:60:8d:94:9a:3f:6a:bf:8e:a0:eb:19:c1:77:5a:fc:55:c3:
         2f:de:75:6d:ae:a1:66:4c:ce:68:93:69:8c:29:79:bb:f9:ed:
         48:9f:a6:c0:b5:e0:f0:64:53:a2:c7:22:4a:c2:6d:1d:db:8d:
         e7:f1:d5:b7:f2:8e:3b:7c:b2:2e:f2:80:80:05:16:8c:99:e6:
         0f:28:26:40:ca:88:c1:f5:bf:9e:28:30:14:04:73:63:f5:a8:
         ba:46:93:d1:c9:0f:d2:39:57:a8:04:ec:7c:0b:5a:8a:c7:eb:
         b8:f8:b2:8e:8e:32:16:76:4d:46:9f:30:e6:b2:d3:01:3f:e9:
         dc:73:89:c4:9f:d3:60:24:d4:93:35:6d:df:b7:4e:d8:e9:58:
         a7:46:ae:25:04:95:90:1b:e1:26:52:39:a2:8c:55:6b:57:31:
         e0:2b:c4:25:14:ed:db:97:69:cd:0d:cf:73:92:01:ce:71:81:
         25:21:aa:17:b9:b3:73:53:54:15:74:81:6d:61:27:0d:60:6c:
         cf:76:93:c3:f9:d1:c3:63:09:b5:2c:f4:35:ec:47:9c:2b:21:
         6a:0f:65:e7:ca:ac:76:29:15:d3:b5:b3:f3:b6:0f:80:c3:31:
         b9:61:96:19:07:41:da:81:7b:e3:11:7e:ae:13:ea:78:ea:c1:
         30:37:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org