Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
File:                     3137302e3234362e39362e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier:          IWzzf553WGmQ7VyfYK6e3477Zg4MLNgy6Em+1XUNHUU=
Subject key identifier:   0B:A9:CD:65:7B:A7:8B:ED:12:B7:40:EE:16:42:28:85:38:FF:91:42
Certificate issuer:       /CN=B314ECC73BF93F0D00B425AD71679523CD88E0B4
Certificate serial:       2994D59CDDDC65937291DA68D0881071AA3B4BB0
Authority key identifier: B3:14:EC:C7:3B:F9:3F:0D:00:B4:25:AD:71:67:95:23:CD:88:E0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B314ECC73BF93F0D00B425AD71679523CD88E0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
Signing time:             Tue 14 Jun 2022 14:19:24 +0000
ROA not before:           Tue 14 Jun 2022 14:14:24 +0000
ROA not after:            Tue 13 Jun 2023 14:19:24 +0000
asID:                     52721
IP address blocks:        170.246.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:94:d5:9c:dd:dc:65:93:72:91:da:68:d0:88:10:71:aa:3b:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314ECC73BF93F0D00B425AD71679523CD88E0B4
        Validity
            Not Before: Jun 14 14:14:24 2022 GMT
            Not After : Jun 13 14:19:24 2023 GMT
        Subject: CN=0BA9CD657BA78BED12B740EE1642288538FF9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:23:c7:93:3f:b3:6e:36:dd:fd:6e:e8:64:
                    00:1a:57:1d:57:cd:80:71:50:21:3e:b9:76:4d:6c:
                    26:0f:c9:12:ee:c4:8d:9e:25:dc:e2:cb:2a:1b:6b:
                    5f:35:60:a5:05:96:f2:cd:96:b3:15:c5:80:c4:a4:
                    7f:8b:a4:9e:94:aa:cf:4c:5d:9c:69:cf:8d:2f:ef:
                    1f:87:e3:e3:54:73:88:fc:26:4d:6c:b5:31:ff:56:
                    87:02:08:cf:27:50:61:bd:cb:34:b7:0c:de:79:d9:
                    c3:d4:d1:e3:cd:1d:4b:ad:f9:8c:f6:ee:d4:41:fb:
                    3c:0b:6e:b7:a1:dc:54:e7:2f:6e:c5:5b:bf:b3:7d:
                    c0:7b:12:82:10:f6:66:79:70:c0:38:2b:90:f6:1a:
                    89:40:42:e6:04:bd:38:50:08:a4:11:01:02:b3:93:
                    90:94:97:26:2b:a3:5f:1e:18:cf:a1:fa:d0:9d:4f:
                    f7:5a:e9:2e:6f:10:0d:c7:f6:64:3c:55:f1:03:94:
                    aa:41:25:af:85:65:4b:58:54:22:b0:2d:75:86:20:
                    f3:44:6f:6b:77:29:ed:2f:ba:84:5d:c9:68:90:d4:
                    d4:11:88:bd:a0:5d:9c:1d:a0:e2:39:ce:a1:cd:ec:
                    d0:f2:c5:77:35:38:02:df:8e:0e:cb:84:97:90:f0:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:CD:65:7B:A7:8B:ED:12:B7:40:EE:16:42:28:85:38:FF:91:42
            X509v3 Authority Key Identifier:
                keyid:B3:14:EC:C7:3B:F9:3F:0D:00:B4:25:AD:71:67:95:23:CD:88:E0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/B314ECC73BF93F0D00B425AD71679523CD88E0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B314ECC73BF93F0D00B425AD71679523CD88E0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:1e:c9:bc:a4:38:5d:79:5d:19:d6:28:4c:25:e9:a2:66:83:
         21:ed:35:d4:40:c2:b9:8f:75:a6:17:ac:c3:61:e9:cb:46:11:
         87:b9:14:02:be:5e:b0:4c:c2:1b:e2:bd:25:4d:c2:e1:8a:7d:
         72:fe:d6:c3:8f:dc:d5:7d:91:7e:ed:e6:41:3c:10:cf:bf:dd:
         e1:18:cf:cb:97:62:4e:1e:1b:25:98:76:cc:cc:e6:cb:20:16:
         36:04:fc:9d:50:a3:f2:f4:50:d0:91:d0:3d:b6:04:5e:85:cb:
         66:ce:af:9c:44:d6:7b:b7:37:45:c0:2e:fb:a2:c7:1e:be:a1:
         f2:eb:7b:c5:de:bd:ee:82:88:92:73:85:22:6f:e0:7c:94:9e:
         1d:50:b2:16:17:f9:cf:bb:e3:fa:12:27:d2:3a:4e:78:9d:d7:
         c0:ac:d6:6b:68:16:fa:9f:1b:86:b3:9d:e8:90:15:7b:48:26:
         2d:34:81:9d:8d:6a:f8:6d:1e:1a:09:44:e5:b5:96:b2:f4:9d:
         74:22:f7:48:a3:8a:20:19:aa:b6:6c:c1:e4:52:73:c4:fe:df:
         35:82:ea:8a:0c:fb:c0:42:29:5a:6f:31:04:35:58:f0:84:51:
         a4:85:2e:74:fa:94:ce:49:61:a3:01:5b:05:82:33:6d:db:56:
         05:a3:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org