Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139332e302f32342d3332203d3e20323634393831.roa
File:                     3137302e302e3139332e302f32342d3332203d3e20323634393831.roa (raw, json)
Hash identifier:          Vqf6Q4nLtGE6TJw5ALHuhCWo/W1vv4pVsSJV7P96EJo=
Subject key identifier:   E6:4E:0B:E8:0A:C1:37:6C:5D:C0:1A:20:E9:D3:DC:15:21:51:62:85
Certificate issuer:       /CN=BCED8499C9E000F68DEC84B5BB31387555F60613
Certificate serial:       13C44D1B095C084B8A3865196E5DCE8FC1423F4B
Authority key identifier: BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139332e302f32342d3332203d3e20323634393831.roa
Signing time:             Thu 16 Mar 2023 19:05:37 +0000
ROA not before:           Thu 16 Mar 2023 19:00:37 +0000
ROA not after:            Thu 14 Mar 2024 19:05:37 +0000
asID:                     264981
IP address blocks:        170.0.193.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:4d:1b:09:5c:08:4b:8a:38:65:19:6e:5d:ce:8f:c1:42:3f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCED8499C9E000F68DEC84B5BB31387555F60613
        Validity
            Not Before: Mar 16 19:00:37 2023 GMT
            Not After : Mar 14 19:05:37 2024 GMT
        Subject: CN=E64E0BE80AC1376C5DC01A20E9D3DC1521516285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:d1:35:38:26:c2:0c:ef:fb:a0:86:9f:2e:
                    80:27:77:dc:6b:6f:b9:46:5c:55:94:64:c0:31:65:
                    05:a9:90:33:f1:42:98:22:0b:ba:e6:bc:df:b0:39:
                    1e:37:d8:33:46:f3:ad:75:4d:b8:12:24:4a:5b:fa:
                    9a:09:68:69:e0:d5:79:06:59:ab:38:5f:8f:7a:6e:
                    51:77:7e:01:28:2b:02:d4:60:2e:00:64:bb:5a:ff:
                    c0:b3:6a:b0:52:ac:72:ed:1f:3b:9a:73:aa:ff:f6:
                    dd:f7:b7:6b:45:1c:04:a7:35:a4:b5:5b:06:a7:e5:
                    fc:cc:74:d7:30:87:4b:98:61:3c:5b:3e:ef:eb:99:
                    76:a9:58:48:45:82:11:2b:d8:6b:cf:0e:92:7f:c7:
                    27:cd:b9:0c:b2:be:65:63:6d:76:a9:34:2b:78:b4:
                    55:5d:ed:c4:0f:38:e9:32:1f:a3:a6:b8:ce:d4:89:
                    14:c6:e6:24:44:5a:21:09:09:4a:1e:23:2f:42:1d:
                    90:47:e2:5a:d4:a7:69:40:91:fa:ef:b5:4a:15:20:
                    f9:ef:9f:46:bb:83:c4:1c:a6:de:f8:4e:c7:cc:05:
                    5f:38:8a:8b:9b:07:c9:fb:03:1b:46:54:b0:df:73:
                    b1:9a:75:ea:67:91:4e:e1:ec:19:87:8a:ec:a8:07:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4E:0B:E8:0A:C1:37:6C:5D:C0:1A:20:E9:D3:DC:15:21:51:62:85
            X509v3 Authority Key Identifier:
                keyid:BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/BCED8499C9E000F68DEC84B5BB31387555F60613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e302e3139332e302f32342d3332203d3e20323634393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ad:3c:c9:2c:98:63:ea:2a:9a:85:ff:dd:c0:91:36:80:2c:
         9a:c5:85:0c:47:76:1a:fd:53:a6:88:ac:b9:0a:de:55:ff:aa:
         88:f8:7a:bf:8e:bd:3d:69:2c:11:ea:93:69:da:8a:3b:6c:c2:
         71:fa:78:a9:04:5c:21:f6:3c:fb:3c:83:11:94:ad:8e:eb:3f:
         11:4c:33:0a:e0:88:35:fe:dc:5c:5d:c3:69:a9:b4:54:80:ac:
         66:96:54:2c:d7:aa:1c:10:e8:c2:2b:16:1c:63:eb:49:c5:49:
         a6:5c:dc:43:c3:2a:71:89:30:7b:5f:a6:07:2a:cc:12:a8:ca:
         15:2b:d2:bb:3a:a1:0b:98:52:de:5b:27:49:a1:e7:3f:dc:53:
         41:ed:39:a6:0b:fe:d7:7b:9b:91:55:e0:e1:8a:15:f1:c2:78:
         9e:7a:28:5f:8c:81:c4:6e:f6:2a:53:0f:d2:b0:80:8c:cd:0e:
         8a:fa:d4:7a:b7:3b:7b:fc:13:f5:b6:94:78:ea:2e:59:97:b1:
         2d:ef:86:43:94:07:84:b1:2d:18:04:92:fa:b5:50:8f:71:a1:
         39:1f:48:4e:5b:4e:59:d0:88:bf:da:0c:72:24:7d:43:4d:67:
         30:11:31:5d:39:92:c3:25:56:33:94:ea:51:0f:af:a6:7c:99:
         00:30:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org