Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          zbp2kuskpQ4yrxd6nZOYRMyXVdpRUfr3UG701qGv0iE=
Subject key identifier:   9A:5E:E1:70:B2:A0:13:94:74:EC:95:72:03:71:F4:34:1C:B9:B2:41
Certificate issuer:       /CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
Certificate serial:       6C26A90FDC64DD1E665D83D12EBE04E3CE6E7D57
Authority key identifier: 0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
Signing time:             Wed 19 Jul 2023 13:19:10 +0000
ROA not before:           Wed 19 Jul 2023 13:14:10 +0000
ROA not after:            Wed 17 Jul 2024 13:19:10 +0000
asID:                     262642
IP address blocks:        170.82.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:a9:0f:dc:64:dd:1e:66:5d:83:d1:2e:be:04:e3:ce:6e:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
        Validity
            Not Before: Jul 19 13:14:10 2023 GMT
            Not After : Jul 17 13:19:10 2024 GMT
        Subject: CN=9A5EE170B2A0139474EC95720371F4341CB9B241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:79:69:24:7a:7d:6d:bd:45:d2:d1:44:23:
                    73:d1:2a:d2:a7:cc:a8:76:53:04:28:df:9f:21:68:
                    88:7b:1c:0b:b6:4e:ab:7b:22:72:1e:be:1b:a2:cd:
                    38:1b:a2:eb:42:ef:b4:8f:5d:d1:9c:45:d5:7d:5d:
                    90:e8:71:d7:dc:55:0e:5b:8f:9b:c9:78:ed:b6:e7:
                    f9:b8:bd:43:ec:c8:72:ed:74:e2:2c:a5:3f:b3:b9:
                    eb:76:e5:b0:e2:49:e5:93:af:1c:e7:44:5e:66:6d:
                    53:a1:85:4f:8d:08:7b:5d:c8:1a:db:2c:5c:6f:7c:
                    cf:1a:03:8e:a7:2c:87:06:34:6e:dc:f8:2d:6b:4a:
                    00:48:54:ae:0d:be:e0:e1:08:c0:ac:bf:1e:9e:50:
                    20:be:d4:ff:ec:2e:79:62:84:a8:67:80:ad:3e:f6:
                    9b:6c:10:3e:0c:a3:f3:b6:6a:7d:54:cd:df:b6:22:
                    9d:f6:fc:d3:e1:25:ea:a5:37:40:d3:ac:8f:38:ec:
                    3b:17:ee:8f:9d:ee:f3:ce:91:fd:d3:f5:83:04:3d:
                    64:07:f7:56:e4:9c:5c:9a:78:21:88:a9:15:c1:b1:
                    62:4e:58:88:4f:55:55:6e:c4:52:76:4d:e3:9d:35:
                    b5:f4:75:00:6f:69:81:85:6b:d2:f4:7c:c5:fa:be:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:E1:70:B2:A0:13:94:74:EC:95:72:03:71:F4:34:1C:B9:B2:41
            X509v3 Authority Key Identifier:
                keyid:0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:87:63:89:b8:6c:ea:f0:38:f0:86:c6:88:a7:57:05:1b:
         cd:be:c7:52:02:ee:a8:5a:9a:cf:60:af:a7:a3:2a:bf:df:01:
         6d:3c:a9:9d:5b:2b:34:5a:b6:df:5f:ae:9d:ba:7d:f2:a4:a4:
         e6:c5:50:8d:9f:a2:35:78:26:18:40:0a:52:91:9e:85:9a:61:
         04:19:3f:71:46:ab:ad:d9:f0:ed:9d:1b:6f:14:d5:d6:1f:14:
         46:f8:28:55:48:d9:cb:4d:e3:48:ef:63:97:61:66:8b:af:b6:
         ce:1c:1f:6a:e9:5b:52:5f:8b:b0:6a:5a:fe:87:8c:9a:f5:6b:
         4b:56:5c:c0:19:2c:04:fe:85:8c:b4:f1:61:20:a0:85:6e:bb:
         c4:0b:6e:da:96:d8:01:49:78:fd:55:39:ed:a5:89:43:4d:df:
         4e:df:23:89:e1:ec:f6:8f:91:ee:2f:b3:1c:ad:a1:da:db:00:
         ea:ee:e4:d0:57:db:a6:ca:a7:27:ce:50:11:6c:57:85:26:f4:
         3b:87:c4:09:a9:a1:51:bd:4d:70:90:8d:1c:4a:9e:8d:bc:9d:
         bb:f3:9e:eb:48:e2:15:42:4d:d9:09:9e:91:3a:94:f8:dc:af:
         6d:4c:5c:c4:f8:78:9d:5a:60:eb:0d:90:9b:28:33:e6:1c:61:
         0c:b0:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org