Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139322e302f32342d3332203d3e20323634393831.roa
File:                     3137302e302e3139322e302f32342d3332203d3e20323634393831.roa (raw, json)
Hash identifier:          2dlTucXJwWWwKkWN8AaZ7nBHburTEUBRP1gOWxpu1aM=
Subject key identifier:   B6:73:90:68:94:E0:C2:34:14:CE:26:81:51:70:A5:E5:E3:EC:76:1B
Certificate issuer:       /CN=BCED8499C9E000F68DEC84B5BB31387555F60613
Certificate serial:       665A882B994F09FD5023027606CDD6BF32358508
Authority key identifier: BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139322e302f32342d3332203d3e20323634393831.roa
Signing time:             Thu 16 Mar 2023 19:05:32 +0000
ROA not before:           Thu 16 Mar 2023 19:00:32 +0000
ROA not after:            Thu 14 Mar 2024 19:05:32 +0000
asID:                     264981
IP address blocks:        170.0.192.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:88:2b:99:4f:09:fd:50:23:02:76:06:cd:d6:bf:32:35:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCED8499C9E000F68DEC84B5BB31387555F60613
        Validity
            Not Before: Mar 16 19:00:32 2023 GMT
            Not After : Mar 14 19:05:32 2024 GMT
        Subject: CN=B673906894E0C23414CE26815170A5E5E3EC761B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:80:e3:3d:b4:d2:aa:43:4b:f4:47:99:2d:
                    8d:0c:2f:e2:a5:51:c7:20:58:f2:96:09:f3:a2:9f:
                    ed:94:ce:e7:b9:90:41:96:15:5f:2e:41:22:e9:f7:
                    1f:92:31:81:14:73:17:48:56:21:b4:3e:90:fd:4f:
                    0e:df:08:0d:2d:da:e2:98:a6:33:35:d5:1c:1b:7b:
                    f1:69:41:0d:ab:10:96:cf:d9:0b:c3:c2:0e:bd:5a:
                    89:dd:1d:12:74:d8:7d:ed:9d:64:e9:09:82:31:6b:
                    8c:4d:d0:af:e7:47:02:57:36:84:ee:7e:f1:83:28:
                    48:93:80:e5:82:b9:e5:51:be:53:77:e1:72:5c:c2:
                    62:a2:1c:57:8a:3f:47:39:bc:1d:f5:49:d5:79:09:
                    ce:8a:51:37:62:59:41:1a:c3:42:cd:a7:fc:cb:fc:
                    95:f9:29:67:f3:a0:65:b4:03:72:e4:ef:a9:44:94:
                    b0:1f:e4:63:c7:ca:fb:74:db:27:b0:72:d5:71:81:
                    54:f4:d7:f4:c2:61:8c:80:3d:8b:d0:7c:61:eb:46:
                    b6:e7:b1:ce:f6:57:0e:48:5a:b0:1d:4c:4d:c7:cd:
                    21:bc:6b:85:1c:77:a1:7c:48:d4:11:d1:72:32:31:
                    57:a1:36:58:08:64:65:1b:eb:63:75:76:ab:63:a4:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:90:68:94:E0:C2:34:14:CE:26:81:51:70:A5:E5:E3:EC:76:1B
            X509v3 Authority Key Identifier:
                keyid:BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/BCED8499C9E000F68DEC84B5BB31387555F60613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139322e302f32342d3332203d3e20323634393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:73:46:39:89:b6:d3:3c:6c:7a:e2:90:54:d7:84:65:87:
         d4:1c:5e:af:8b:5e:2a:19:cf:d1:d7:56:7b:61:61:3d:f6:30:
         49:82:8b:1e:fb:15:45:f5:ef:0a:8b:66:00:57:43:a9:37:90:
         c7:44:71:af:05:bd:c8:1f:4c:59:28:1f:e8:b4:98:83:d6:1c:
         a8:ae:be:22:d2:ea:90:86:64:5d:50:19:03:34:c8:24:c5:8f:
         64:c6:11:83:07:67:bf:fb:dd:4d:cd:ac:e3:21:51:2b:67:a7:
         c2:e5:44:27:09:03:45:19:7b:ad:3b:e3:71:f9:a4:cf:6e:76:
         51:38:23:bb:ee:65:2e:0c:98:22:f1:2d:87:95:c6:32:a0:27:
         e0:7f:21:bf:c8:35:23:79:41:59:02:b1:53:69:69:14:48:d3:
         e6:b4:eb:24:8e:83:5a:9d:c8:fb:75:b8:1e:f1:a0:48:7a:6a:
         c1:ad:52:30:dc:c6:f5:8a:1f:87:0f:4f:b2:d8:fb:03:69:13:
         95:76:f2:86:60:fd:6c:3b:60:e5:53:6b:7f:7f:16:50:72:4f:
         7c:a3:ce:48:18:a7:c3:b4:de:a6:c1:31:49:37:1e:f0:cc:fd:
         b4:8e:e1:26:c8:82:84:41:cb:20:21:88:94:3a:9b:42:b5:ea:
         32:f4:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org