Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3332203d3e20323634353530.roa
File:                     3137302e302e33322e302f32342d3332203d3e20323634353530.roa (raw, json)
Hash identifier:          oOMyd7t+o3UF6hmXo0ucDMN52LWSPK1JrbF6mT7Txq4=
Subject key identifier:   24:8B:F7:CF:23:FC:68:6C:17:63:A5:A5:AF:FF:C3:26:74:9C:62:6E
Certificate issuer:       /CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
Certificate serial:       74ABA8D66F4390EBDBF7801E7DF8D5CD7ADAC83D
Authority key identifier: E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3332203d3e20323634353530.roa
Signing time:             Sat 26 Aug 2023 20:57:04 +0000
ROA not before:           Sat 26 Aug 2023 20:52:04 +0000
ROA not after:            Sat 24 Aug 2024 20:57:04 +0000
asID:                     264550
IP address blocks:        170.0.32.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ab:a8:d6:6f:43:90:eb:db:f7:80:1e:7d:f8:d5:cd:7a:da:c8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
        Validity
            Not Before: Aug 26 20:52:04 2023 GMT
            Not After : Aug 24 20:57:04 2024 GMT
        Subject: CN=248BF7CF23FC686C1763A5A5AFFFC326749C626E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:f6:6d:6e:2e:be:37:ef:44:52:72:78:76:
                    b9:9f:bf:77:f6:83:9f:da:4c:20:78:c4:ab:32:8a:
                    e3:8c:99:05:c6:4d:6d:c9:b0:a6:ea:11:c3:01:42:
                    ca:19:c8:6a:a7:13:f4:d3:9a:2e:d7:24:09:7f:38:
                    14:72:b3:aa:2b:20:76:ef:4f:f2:00:46:7b:25:b0:
                    5b:6a:8e:42:76:47:79:eb:42:22:59:85:10:85:95:
                    96:6e:3f:76:00:bf:4e:39:84:bb:fa:de:77:41:ce:
                    ca:5e:e9:f9:76:53:ed:49:d5:bc:31:c8:ad:3f:4e:
                    e3:6c:62:0e:b8:0f:98:e5:8e:11:01:82:45:60:3f:
                    2a:b5:a2:20:7c:3e:c2:4f:48:45:9d:19:57:7f:ce:
                    44:1e:b7:e6:4d:93:0a:67:4c:c0:f8:3a:77:6c:aa:
                    01:62:1a:9d:21:e7:f8:b3:fe:42:8e:5f:47:b6:3a:
                    c5:98:63:b0:5d:6b:86:7e:c3:14:d7:a4:10:1a:32:
                    14:60:1c:1e:79:2a:10:18:16:3a:2e:e7:a0:9a:de:
                    bf:c4:40:36:9f:5d:cb:81:b8:93:fa:de:73:79:cb:
                    fa:01:a5:d0:73:bd:ed:01:a8:f5:38:33:6d:84:cf:
                    65:ee:0d:81:4f:3c:29:c7:d4:32:c5:b9:70:1a:99:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:F7:CF:23:FC:68:6C:17:63:A5:A5:AF:FF:C3:26:74:9C:62:6E
            X509v3 Authority Key Identifier:
                keyid:E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3332203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:67:c8:9b:f3:c5:61:95:af:7b:d6:54:dc:01:45:a2:d3:90:
         99:78:62:9e:ad:6b:9c:e5:a9:8f:6a:96:ba:61:40:4c:30:92:
         e9:e6:3e:20:60:f5:b8:ae:27:74:f8:c4:b2:77:0d:7f:82:8e:
         43:d1:70:ed:bc:8c:9f:df:82:dd:ef:4a:cf:32:7b:ee:de:c9:
         ae:c8:e9:fb:32:9c:4b:9d:e0:a0:c2:01:65:43:11:67:7d:68:
         08:ad:4e:55:2f:d2:98:ea:36:da:9f:51:6e:82:97:26:e4:9f:
         0d:bf:bc:24:72:43:5a:82:99:48:99:fd:0a:8e:f1:4c:6a:d6:
         89:72:0e:63:97:97:cb:fb:4d:8f:4e:4b:3c:0f:0c:13:6a:bd:
         f3:5a:43:17:d9:69:13:af:ca:e0:2d:f9:b4:51:9f:b4:b7:9b:
         15:ae:82:2c:a3:c5:84:4f:44:36:d2:40:8b:aa:c1:a0:36:91:
         21:b3:03:b4:41:e1:9b:fb:99:38:7c:93:e2:fa:d3:ee:fa:20:
         d3:80:00:eb:cf:75:21:15:dd:1a:ee:3a:b9:27:b9:ec:06:53:
         27:96:33:b0:ee:48:dc:7b:ae:20:02:86:2b:36:8c:42:21:5b:
         ec:20:5c:35:9d:6e:fb:03:af:bc:3e:5e:14:0f:90:5a:f8:7d:
         28:87:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org