Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa
File:                     3137302e37392e32302e302f32322d3332203d3e20323634383831.roa (raw, json)
Hash identifier:          i1HdKTXseoyBAMENkgnXEQj+FD6q9479q4uIvM0pyo4=
Subject key identifier:   D9:00:8F:81:73:D6:EF:E0:16:0D:BA:51:36:5C:72:7C:DA:C9:8C:33
Certificate issuer:       /CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
Certificate serial:       2DA3C6AAC96CC8A94F8D173AF259C64A97142F69
Authority key identifier: 68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa
Signing time:             Thu 21 Mar 2024 20:53:42 +0000
ROA not before:           Thu 21 Mar 2024 20:48:42 +0000
ROA not after:            Thu 20 Mar 2025 20:53:42 +0000
asID:                     264881
IP address blocks:        170.79.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a3:c6:aa:c9:6c:c8:a9:4f:8d:17:3a:f2:59:c6:4a:97:14:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
        Validity
            Not Before: Mar 21 20:48:42 2024 GMT
            Not After : Mar 20 20:53:42 2025 GMT
        Subject: CN=D9008F8173D6EFE0160DBA51365C727CDAC98C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:46:7c:c4:08:09:33:aa:7f:94:59:07:dc:
                    21:d2:11:49:f7:45:73:2b:46:50:c3:17:a3:6f:c5:
                    22:2d:93:b8:af:4d:58:a4:b3:5a:db:27:8b:1e:02:
                    ff:86:54:f2:18:ae:c5:0a:1b:b5:6b:b5:f8:14:7c:
                    71:88:95:ea:ef:3d:2d:53:43:71:16:95:df:8c:02:
                    0e:51:1c:80:18:be:a9:5a:d3:4b:d4:c4:34:2d:78:
                    1b:0e:1c:ff:53:85:0f:48:c3:e2:b3:29:91:3c:c1:
                    54:a1:5c:2f:74:c8:38:b4:95:5a:1d:66:de:be:f5:
                    10:58:16:76:a4:fe:2d:ae:dd:0f:c6:4e:57:1b:97:
                    b1:f3:a5:95:1a:88:15:70:07:48:46:85:21:e9:66:
                    c3:9d:f7:9d:aa:75:c7:e3:09:15:98:7b:80:28:78:
                    eb:89:33:35:16:40:7c:31:45:ad:86:54:c9:b5:7a:
                    42:a9:2f:ec:cb:ba:c3:4b:7b:89:19:c8:08:de:c5:
                    fb:e9:b1:cb:28:bd:ba:fb:e4:21:81:41:bf:25:f1:
                    00:a1:cb:c8:24:ad:99:d3:00:b4:01:97:4b:86:e9:
                    60:4f:f3:13:71:5a:bd:7a:d0:f9:4d:d2:1d:3b:8c:
                    c0:af:d5:00:66:63:db:b1:6b:46:e7:88:59:9d:f3:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:8F:81:73:D6:EF:E0:16:0D:BA:51:36:5C:72:7C:DA:C9:8C:33
            X509v3 Authority Key Identifier:
                keyid:68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:62:05:a8:36:aa:a6:c7:fb:22:38:e7:b1:21:e5:0a:44:33:
         87:ce:49:2f:50:2d:a8:4a:71:f6:fd:c9:01:72:89:3a:3c:14:
         b4:45:46:73:b9:aa:19:0b:48:9b:dd:f0:76:09:32:75:19:b5:
         f8:07:06:d1:ee:a9:a3:4b:7f:48:0c:1a:b9:8e:90:7c:2d:9a:
         b5:4c:4f:4e:55:a2:95:e1:97:cd:04:ce:6d:f5:4f:14:39:26:
         a2:91:32:a2:f9:f2:54:58:65:73:5d:41:23:f0:21:5a:a6:d1:
         b9:36:7a:44:9b:a8:5b:fb:d5:df:f6:35:62:86:19:6d:9d:34:
         61:41:cd:73:f4:b3:97:27:03:eb:4c:90:f2:fa:c5:64:37:38:
         d4:07:bf:cf:6f:02:4e:5a:a2:b3:2c:ac:b4:46:38:75:e6:4e:
         60:7f:00:c1:94:75:83:69:ad:b0:88:a1:f3:10:3f:1b:b7:be:
         3e:b5:b9:a6:ce:d3:fe:51:09:26:4e:c0:a9:df:c0:65:97:ea:
         ef:da:1b:f3:29:b8:0e:3f:57:a9:fe:1f:5e:5c:d3:ec:a8:b3:
         dd:aa:13:e3:74:8b:66:15:00:bd:8e:34:26:a1:15:18:e3:6b:
         5f:59:56:b6:80:e3:11:a2:15:a2:29:d8:a8:ab:15:4a:af:15:
         39:47:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org