Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa
File:                     3137302e38322e38362e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          tUc2m9RX+pkw3Sl2t6bSWF9OcMdwDL26KB9O23Ub7tM=
Subject key identifier:   5A:28:23:A9:60:5A:6E:51:32:BF:10:4E:E9:AC:D2:33:93:D8:E0:3A
Certificate issuer:       /CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
Certificate serial:       4737C8C2CF44EC8A086AE47F93431BA1B1064A66
Authority key identifier: 0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa
Signing time:             Wed 19 Jul 2023 13:19:14 +0000
ROA not before:           Wed 19 Jul 2023 13:14:14 +0000
ROA not after:            Wed 17 Jul 2024 13:19:14 +0000
asID:                     262642
IP address blocks:        170.82.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:37:c8:c2:cf:44:ec:8a:08:6a:e4:7f:93:43:1b:a1:b1:06:4a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
        Validity
            Not Before: Jul 19 13:14:14 2023 GMT
            Not After : Jul 17 13:19:14 2024 GMT
        Subject: CN=5A2823A9605A6E5132BF104EE9ACD23393D8E03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:37:cb:66:c7:32:61:b5:f9:18:9d:34:27:
                    89:fc:80:f2:f1:06:fe:4b:a0:6c:e2:4d:1f:07:b1:
                    31:50:82:1a:00:43:b2:3d:c4:95:9e:80:a1:bb:de:
                    5a:e6:ce:0a:47:d6:24:86:99:a4:cc:f2:27:0a:21:
                    9b:0b:8a:ba:7a:0d:37:3f:fe:67:11:fe:db:ed:6b:
                    4f:2f:a9:d2:90:b7:57:f3:e1:9f:7d:a4:b8:4c:f2:
                    b0:ab:c4:4f:18:3a:6b:44:75:de:88:b6:03:d9:61:
                    8f:9f:b8:0d:98:8f:e5:b2:d4:ec:8a:e5:2c:a1:07:
                    0e:b1:3a:2b:15:85:29:7b:77:61:07:2a:8a:4b:50:
                    bd:08:1a:15:82:c6:92:fa:e6:57:32:1c:0b:f4:9b:
                    39:86:ac:29:f1:1a:34:1d:d4:01:a3:ca:d1:53:03:
                    dc:8a:7c:26:7b:d9:22:87:31:f7:e7:02:f9:f5:b8:
                    70:87:b1:b0:6b:67:7a:3f:c3:ca:51:43:7d:82:6d:
                    fc:62:32:7e:75:fe:64:a4:6d:fa:03:47:96:d8:c7:
                    c1:dd:4f:4f:71:4d:c0:ba:f6:8a:a4:34:bd:81:c3:
                    42:49:0b:ba:a0:fe:70:83:ca:9b:94:7d:15:54:93:
                    3c:6f:8e:3c:50:b0:fe:2c:29:ab:08:41:45:1e:6f:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:23:A9:60:5A:6E:51:32:BF:10:4E:E9:AC:D2:33:93:D8:E0:3A
            X509v3 Authority Key Identifier:
                keyid:0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:19:ed:ef:95:dd:ff:90:ce:1a:69:ee:0e:f5:6c:bd:bc:
         8e:ec:a5:96:d5:46:7a:56:70:a3:c0:19:01:f0:b6:c2:35:ce:
         06:54:82:66:29:c1:68:46:d9:b6:e2:b9:97:5a:d8:de:9f:f2:
         11:6b:6e:e5:92:85:3d:b0:93:39:b7:41:c6:77:d3:a7:43:5e:
         9b:15:c0:13:b3:a4:55:2a:3f:ec:48:6e:ae:db:22:a3:95:2e:
         ab:27:7b:a1:7f:e0:14:ab:fc:e7:3e:7a:78:fc:54:15:43:3c:
         46:86:cc:62:3a:3a:dd:31:09:32:c7:f1:08:c2:02:f6:88:92:
         3f:d6:b2:7d:86:ab:d7:3e:30:f5:14:77:c9:80:4c:7d:92:e5:
         13:2b:60:da:ed:34:33:ab:77:66:8e:fe:b1:2d:44:66:80:12:
         6e:cd:b3:c2:24:45:23:34:1b:56:5c:2a:e5:ec:ff:db:f7:6f:
         b5:78:cf:fe:52:77:b2:0e:b5:3f:49:a5:15:8c:22:3d:d4:f2:
         ec:c1:b6:6f:7f:22:03:83:22:4c:ea:76:2c:db:6a:b2:09:69:
         db:c3:6e:10:8a:41:2c:06:ae:fa:6e:ac:91:72:a3:11:24:44:
         2d:c9:4f:83:e4:4f:52:b0:0f:f6:34:2b:8e:79:8a:d5:de:30:
         8d:f5:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org