Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa
File:                     3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa (raw, json)
Hash identifier:          SsVcRcCR9kcw27JLg8Nm6mcw7tUXYSMSOE2uDFBvG9Q=
Subject key identifier:   AC:F6:6F:8C:47:AD:1C:CF:87:A5:72:94:A8:65:39:72:9F:6E:77:E5
Certificate issuer:       /CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
Certificate serial:       2739C9897A330467890E69D61DB37384146FFE7D
Authority key identifier: 6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa
Signing time:             Thu 14 Sep 2023 20:44:23 +0000
ROA not before:           Thu 14 Sep 2023 20:39:23 +0000
ROA not after:            Thu 12 Sep 2024 20:44:23 +0000
asID:                     266418
IP address blocks:        170.81.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:39:c9:89:7a:33:04:67:89:0e:69:d6:1d:b3:73:84:14:6f:fe:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
        Validity
            Not Before: Sep 14 20:39:23 2023 GMT
            Not After : Sep 12 20:44:23 2024 GMT
        Subject: CN=ACF66F8C47AD1CCF87A57294A86539729F6E77E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:9f:2f:1b:78:f5:83:ac:5b:d1:1e:0b:82:
                    0e:45:39:fb:ad:78:d5:16:f9:90:97:2a:71:7a:8e:
                    ea:d1:13:5c:97:48:fe:a7:12:81:87:8c:06:e8:36:
                    a6:22:9a:52:e0:10:b1:7c:7b:f2:9b:c8:be:96:1b:
                    1e:83:58:0e:f5:ec:7b:70:3d:31:90:5b:f7:e1:e5:
                    3c:31:20:17:ba:8b:0a:e3:ea:74:03:f7:cf:7f:e5:
                    72:69:13:4c:a6:d1:63:42:1e:c5:3d:46:aa:ec:85:
                    71:69:b7:89:ed:0e:89:fa:c7:bb:eb:07:63:3b:16:
                    f9:a8:56:d2:8b:b0:e0:8b:9d:4d:65:23:08:25:20:
                    8a:04:62:b3:52:b1:3b:23:14:9f:3c:30:73:5b:4f:
                    4d:a8:cc:23:7c:39:fb:96:21:2c:5c:3b:72:03:24:
                    ac:04:27:25:52:33:be:03:2c:78:70:0c:c0:ac:e5:
                    53:48:0e:39:23:2a:67:2c:58:e4:52:9c:a8:ac:ed:
                    25:fd:a0:7b:df:79:b7:fd:2e:06:91:37:e3:16:98:
                    f2:c8:f7:26:4e:e6:b4:fa:18:04:32:f7:f7:58:ca:
                    c2:6f:c4:6c:89:89:0e:85:ed:8d:df:0e:f6:7f:62:
                    66:ca:b9:0b:21:2c:8c:3c:43:df:0f:76:65:74:b1:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:6F:8C:47:AD:1C:CF:87:A5:72:94:A8:65:39:72:9F:6E:77:E5
            X509v3 Authority Key Identifier:
                keyid:6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:b9:86:bc:3f:67:32:f1:94:8a:be:f6:0a:ad:64:49:76:
         cc:c2:39:49:82:5a:6b:55:56:0a:49:90:ee:33:f6:a0:41:8a:
         a6:ef:2e:67:e1:ea:a7:6e:3e:b2:43:fb:65:a6:05:40:2d:6a:
         2a:1a:8f:42:20:34:0a:72:da:2d:ac:8a:78:cd:0b:27:7a:d6:
         7c:c7:5e:83:ae:81:24:06:c4:ce:12:90:cb:ff:30:64:c3:e6:
         e1:70:11:bf:7f:8a:3a:81:e4:4e:3f:bb:69:5e:9e:84:c7:fc:
         6f:10:d0:fd:88:d6:6d:d8:fb:90:27:19:c0:d7:b0:d5:37:5b:
         51:49:3c:16:df:9e:f1:15:f6:5e:fa:de:39:45:e4:35:e4:fe:
         db:51:98:cc:55:b2:32:38:2a:22:bf:d2:ff:64:2e:5d:57:67:
         84:6f:0e:f4:ba:6e:6f:4a:ea:5a:8c:54:20:41:42:e2:e1:ff:
         1a:d7:6e:29:28:67:87:ec:d2:a7:bf:01:9f:03:b6:78:20:ac:
         71:59:3f:a9:48:4b:03:be:f6:8e:e7:cf:6c:a7:a2:62:83:71:
         17:75:f9:4c:28:f7:a4:87:cd:54:91:4f:06:02:5d:7a:f5:c5:
         e5:e7:1b:4d:12:fe:3f:b9:2f:e5:ae:a9:13:65:14:13:8d:fa:
         12:b5:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org