Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3232203d3e20323636343031.roa
File:                     3137302e38312e36302e302f32322d3232203d3e20323636343031.roa (raw, json)
Hash identifier:          hy1efsCi8uVepZf9O8DyIPPGfwTvDbCKfrgTRvpAzGU=
Subject key identifier:   9D:BE:1C:A5:C8:54:6D:26:05:84:60:E3:CC:A0:A7:CF:DB:3F:2B:FF
Certificate issuer:       /CN=E30427505E0181222934723688BA4A47B7054C75
Certificate serial:       45BCBF3314492F02BEED44397389D896D9224FE1
Authority key identifier: E3:04:27:50:5E:01:81:22:29:34:72:36:88:BA:4A:47:B7:05:4C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30427505E0181222934723688BA4A47B7054C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3232203d3e20323636343031.roa
Signing time:             Wed 08 Mar 2023 14:48:52 +0000
ROA not before:           Wed 08 Mar 2023 14:43:52 +0000
ROA not after:            Wed 06 Mar 2024 14:48:52 +0000
asID:                     266401
IP address blocks:        170.81.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bc:bf:33:14:49:2f:02:be:ed:44:39:73:89:d8:96:d9:22:4f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30427505E0181222934723688BA4A47B7054C75
        Validity
            Not Before: Mar  8 14:43:52 2023 GMT
            Not After : Mar  6 14:48:52 2024 GMT
        Subject: CN=9DBE1CA5C8546D26058460E3CCA0A7CFDB3F2BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:71:d4:98:d4:f2:81:6e:1c:21:4b:9b:57:
                    4a:63:43:46:49:9f:9c:c4:cc:af:1d:9a:46:97:1c:
                    79:b0:6e:69:32:14:22:80:d5:48:a8:64:0d:eb:32:
                    08:a5:31:62:aa:1a:80:5b:f7:07:81:d0:29:c8:6e:
                    d7:05:06:76:d8:f4:73:68:95:5f:13:94:1f:f3:40:
                    f3:41:71:b7:8a:d2:74:cc:41:0a:f8:d5:f4:f5:47:
                    cb:04:08:52:9e:a1:75:22:43:15:9d:07:bd:1a:d9:
                    da:ef:e9:ad:42:73:50:c7:4a:20:ed:aa:a8:a3:ad:
                    72:18:f2:52:63:d7:ac:24:6e:a6:ff:6f:b2:ee:9b:
                    ae:06:d3:ef:a1:c5:31:2f:9d:ab:70:c7:89:02:f9:
                    1b:b6:86:1c:41:eb:74:c6:b0:fd:91:c8:50:e4:b5:
                    4e:91:f1:17:ea:87:e9:44:e9:87:3b:94:98:ee:f2:
                    5b:6e:f0:1c:bf:99:f2:c4:9a:33:40:1f:e9:1e:d6:
                    c4:18:73:c8:14:2a:37:67:4e:82:8e:8f:9a:82:42:
                    72:dd:73:98:34:fc:66:27:b7:4c:2e:23:81:45:8a:
                    34:d5:a4:92:4d:70:30:d7:e6:0b:27:b8:ee:8f:72:
                    e0:64:6e:f7:45:22:67:c0:f3:de:6a:51:7e:05:31:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:1C:A5:C8:54:6D:26:05:84:60:E3:CC:A0:A7:CF:DB:3F:2B:FF
            X509v3 Authority Key Identifier:
                keyid:E3:04:27:50:5E:01:81:22:29:34:72:36:88:BA:4A:47:B7:05:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/E30427505E0181222934723688BA4A47B7054C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30427505E0181222934723688BA4A47B7054C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3232203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:df:9e:fa:fe:fd:c0:18:22:1f:7a:b3:6e:f1:a6:27:67:28:
         3e:2f:6d:cf:ab:f5:7d:93:bb:cb:73:a2:c8:7c:00:ec:98:ed:
         5c:c2:29:28:e9:6d:28:98:41:90:4b:81:98:d9:b2:0d:c6:65:
         f6:43:22:e1:5b:c5:30:41:35:f8:59:7e:6c:5a:ab:59:81:a7:
         ba:82:35:94:e6:c7:52:2c:15:2d:27:98:b0:57:b8:da:c5:0d:
         e3:41:43:85:7f:59:f2:11:ed:07:78:4f:d1:6b:48:fb:75:1c:
         70:d6:38:24:da:2d:ae:0c:20:d7:38:b1:b6:c3:60:cf:63:8c:
         e7:51:82:cc:0e:7d:67:db:d4:8e:da:bb:50:cb:21:b1:4a:cf:
         07:c9:51:b1:42:05:d8:b8:6a:6d:f9:3f:69:15:48:36:8c:aa:
         65:65:98:a3:fb:3c:56:eb:5f:f5:64:45:3d:16:08:5d:4d:bd:
         0c:ff:28:16:37:33:a7:0a:0b:9c:f5:9e:78:f2:fc:0a:4a:fb:
         eb:e1:85:78:57:9a:24:d4:70:6f:1e:ba:83:96:40:02:83:05:
         ab:fb:8c:35:61:3c:a1:dd:2d:b5:03:3b:28:87:dc:30:9c:23:
         f2:f8:d0:51:31:ab:7a:74:56:ef:ca:59:44:76:a8:ec:06:f4:
         ea:e5:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org