Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e3234372e3130382e302f32322d3234203d3e20323634393831.roa
File:                     3137302e3234372e3130382e302f32322d3234203d3e20323634393831.roa (raw, json)
Hash identifier:          V6zH8R/6iPITHaioTbK8qjAJ9GPfNhY2fnfNfJDj1nI=
Subject key identifier:   40:FF:B7:D2:5E:68:ED:EF:30:9C:18:B9:C6:F5:21:86:E4:91:F0:EA
Certificate issuer:       /CN=BCED8499C9E000F68DEC84B5BB31387555F60613
Certificate serial:       27D52E46C4F8DD8D23CA0D58AD025815C3F1B1FA
Authority key identifier: BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e3234372e3130382e302f32322d3234203d3e20323634393831.roa
Signing time:             Thu 16 Mar 2023 20:58:54 +0000
ROA not before:           Thu 16 Mar 2023 20:53:54 +0000
ROA not after:            Thu 14 Mar 2024 20:58:54 +0000
asID:                     264981
IP address blocks:        170.247.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d5:2e:46:c4:f8:dd:8d:23:ca:0d:58:ad:02:58:15:c3:f1:b1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCED8499C9E000F68DEC84B5BB31387555F60613
        Validity
            Not Before: Mar 16 20:53:54 2023 GMT
            Not After : Mar 14 20:58:54 2024 GMT
        Subject: CN=40FFB7D25E68EDEF309C18B9C6F52186E491F0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:1d:17:e2:56:ed:d0:5c:95:29:c0:5f:5b:
                    5c:47:c2:55:c5:6d:bb:bf:8a:62:47:25:10:33:db:
                    9a:a3:f2:a4:d3:62:a8:5f:1b:43:1e:25:c5:72:f0:
                    76:c7:e8:f9:ac:e1:4a:6c:92:33:bd:36:13:b3:be:
                    d2:55:ee:c0:e7:c0:0c:21:26:f6:52:e7:4e:96:d4:
                    99:f3:48:aa:45:07:b4:d8:70:98:e0:8d:40:b6:7e:
                    ab:45:61:80:3f:6e:53:f8:5d:85:40:e3:9d:f6:6a:
                    81:e6:fc:a8:3c:84:34:40:e2:63:aa:9b:46:18:84:
                    e6:dc:5e:12:f2:9b:ac:93:fb:c7:1f:b2:d8:dd:5d:
                    51:1e:4f:cf:a2:5d:df:b6:d0:14:0b:0a:ec:7c:2f:
                    2a:66:bb:73:72:b9:3f:5f:9d:2d:48:19:04:5f:c9:
                    6b:77:38:84:0d:46:57:8e:99:5c:71:7a:c9:c2:37:
                    05:52:e6:f8:15:c4:9a:e1:8c:99:e4:94:75:77:1a:
                    9b:e1:6a:4a:9c:1d:10:60:77:cf:f3:81:17:97:53:
                    45:26:dd:dc:79:74:59:8c:b5:04:ab:73:8a:dc:cc:
                    a7:79:46:e5:66:24:e5:bb:ed:19:29:1f:20:c2:ae:
                    dd:55:ad:32:3e:8d:09:fc:25:65:14:6c:61:c1:2f:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:B7:D2:5E:68:ED:EF:30:9C:18:B9:C6:F5:21:86:E4:91:F0:EA
            X509v3 Authority Key Identifier:
                keyid:BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/BCED8499C9E000F68DEC84B5BB31387555F60613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/3137302e3234372e3130382e302f32322d3234203d3e20323634393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:18:79:49:8c:6f:61:58:dc:b4:04:6c:f7:65:da:b7:10:
         15:ef:23:b8:a4:11:4b:4c:8e:a7:d4:d7:e9:a6:6c:f9:d1:c7:
         fb:69:d7:52:c8:1d:1b:5a:d5:50:f0:5d:9b:0f:05:df:b9:82:
         5b:e9:49:de:42:70:53:69:92:70:4b:87:49:04:87:56:92:20:
         43:a5:41:3c:04:e3:14:c7:88:db:16:41:86:fa:d4:f6:ec:1b:
         e1:b4:de:e3:82:d9:8b:e0:a0:e8:d4:28:9a:04:ea:ba:9f:41:
         4c:1e:6f:e9:a1:a5:29:36:a1:3f:c8:e0:d3:3f:be:7e:df:93:
         14:2d:3e:8a:a7:10:05:48:fa:52:e4:8f:6b:1d:c3:e7:54:dd:
         06:53:37:a2:c8:ae:b4:16:18:80:2e:8d:35:ce:06:01:47:69:
         38:9a:6e:93:e1:ab:8e:db:8a:7f:bc:ea:30:11:92:a0:6f:5c:
         bf:36:70:53:f7:df:2d:64:32:a8:1f:d7:1e:2a:3e:be:c2:67:
         9c:e5:e1:00:5d:91:12:80:5b:b2:92:7c:17:6b:95:cf:a8:2a:
         83:5f:e3:2f:b9:30:dc:2f:a9:54:be:8d:c1:27:21:10:70:cb:
         6f:26:70:b0:e3:55:c1:b0:a9:00:68:6a:8b:15:53:16:24:f1:
         da:85:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org