Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa
File:                     3137302e38322e38342e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          FFVFj2c4vczVlHfXAGkxiIcQBcOu1YjqNGnObKpPGy8=
Subject key identifier:   CD:0E:67:2E:8A:60:73:19:C0:C9:D8:6A:B3:E8:2B:B3:2D:22:88:FD
Certificate issuer:       /CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
Certificate serial:       110A828CD4D74796D3ED54C660979E03B8C8D343
Authority key identifier: 0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa
Signing time:             Wed 19 Jul 2023 13:19:15 +0000
ROA not before:           Wed 19 Jul 2023 13:14:15 +0000
ROA not after:            Wed 17 Jul 2024 13:19:15 +0000
asID:                     262642
IP address blocks:        170.82.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:82:8c:d4:d7:47:96:d3:ed:54:c6:60:97:9e:03:b8:c8:d3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
        Validity
            Not Before: Jul 19 13:14:15 2023 GMT
            Not After : Jul 17 13:19:15 2024 GMT
        Subject: CN=CD0E672E8A607319C0C9D86AB3E82BB32D2288FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:ff:6a:49:4d:04:25:02:11:87:74:1e:bd:
                    aa:7b:29:af:89:ac:58:0b:09:7a:cd:31:40:2c:74:
                    95:5a:d2:92:da:a7:27:18:54:ea:13:b6:39:a7:2b:
                    f7:1c:42:c3:1b:1d:d1:c5:54:ef:d2:39:d3:e2:b5:
                    4c:b9:aa:31:51:c9:2b:09:10:1e:a6:f6:90:41:bb:
                    d3:12:99:b9:ce:8f:8f:be:59:0b:a4:b9:3a:4f:1a:
                    da:4f:45:ce:09:63:c0:80:cc:23:ac:a4:d6:f2:ea:
                    eb:06:aa:07:64:cd:13:66:67:58:92:c9:05:85:18:
                    43:f2:56:96:c7:c3:dd:df:b6:d4:9f:51:ca:89:34:
                    5d:20:81:c6:f0:e3:d5:e5:13:7a:8b:72:fa:78:c7:
                    14:65:21:7e:12:34:7e:72:21:f2:fa:bb:7e:ec:7e:
                    84:c9:5e:63:af:2d:c4:37:fc:45:b6:d1:bf:4a:d1:
                    cf:ba:51:cb:7a:7b:81:46:48:ef:5b:f8:ff:a7:a2:
                    78:ac:db:2c:a2:56:dc:0f:41:64:1f:fa:5e:3b:58:
                    a4:ad:61:5f:8d:a2:c1:75:bb:5a:47:c0:d9:92:fe:
                    7a:d7:71:09:ff:cc:c4:b5:f3:f3:4d:b0:11:0b:67:
                    d5:d6:0d:27:3a:59:ce:65:1d:6e:6d:b4:28:21:62:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:67:2E:8A:60:73:19:C0:C9:D8:6A:B3:E8:2B:B3:2D:22:88:FD
            X509v3 Authority Key Identifier:
                keyid:0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:34:68:c3:fb:52:fd:3e:e4:40:ff:8e:ae:84:f6:dd:8c:
         93:a7:2b:26:dd:4f:20:cb:b4:28:ca:89:d4:68:56:91:11:36:
         78:76:85:53:8b:82:71:17:91:51:98:e6:a2:4a:07:6b:48:28:
         21:68:50:0e:2a:bc:4e:36:ad:ac:7f:31:24:f8:f8:3e:20:37:
         ac:ac:00:b4:46:58:ca:87:1f:d8:59:be:e5:98:5b:e9:5a:84:
         6a:ac:86:71:11:18:57:7a:61:ef:77:90:e9:c4:41:6b:75:e1:
         3f:2c:7a:8e:f6:8f:a9:72:e1:4c:fb:c7:05:b3:e9:85:3a:b4:
         6f:e6:74:4e:01:5d:42:13:27:e2:1b:3a:d5:82:b8:2b:40:df:
         1f:1a:1e:10:a6:7e:4d:43:b3:3d:bb:ef:e6:57:a9:5b:8c:5c:
         4d:2a:ed:d4:62:bc:23:24:9e:11:f4:b7:33:8b:1e:79:64:a4:
         92:29:cd:99:07:f1:6e:87:29:03:55:9e:48:5a:c2:27:a7:d4:
         ad:36:31:7d:8e:7b:40:c6:86:15:25:6a:54:9e:c0:b1:00:71:
         2d:52:3f:cc:b8:ac:4e:42:f1:ab:01:a9:3c:4c:dc:05:82:b6:
         cd:3d:8c:98:81:ae:09:38:83:45:a8:09:2f:af:04:95:13:a1:
         1e:31:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org