Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38372e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          3qLf9sVwL/XGhZsyiW09v7Z/lQ2Sy6Bp7lm9ZkeHl8M=
Subject key identifier:   78:C2:34:7E:69:36:E6:9E:07:B7:44:FB:0D:01:DA:FF:BA:7C:53:41
Certificate issuer:       /CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
Certificate serial:       79A28B0705A399D7C84370985521544FD19F9C47
Authority key identifier: 0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
Signing time:             Wed 19 Jul 2023 13:19:11 +0000
ROA not before:           Wed 19 Jul 2023 13:14:11 +0000
ROA not after:            Wed 17 Jul 2024 13:19:11 +0000
asID:                     262642
IP address blocks:        170.82.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:8b:07:05:a3:99:d7:c8:43:70:98:55:21:54:4f:d1:9f:9c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B16F339D49C5E820012703CB4978BE6AE2CC78E
        Validity
            Not Before: Jul 19 13:14:11 2023 GMT
            Not After : Jul 17 13:19:11 2024 GMT
        Subject: CN=78C2347E6936E69E07B744FB0D01DAFFBA7C5341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:0e:0f:b9:64:d6:10:d3:8f:e9:18:49:e6:
                    e1:c4:46:28:be:59:2e:55:fd:c4:24:c9:7d:6b:ff:
                    af:c2:ea:2b:e9:69:8e:9f:d6:08:8f:a7:1b:85:b1:
                    8e:f2:15:f3:e6:ae:f9:cc:e9:a2:7c:81:5e:01:27:
                    66:17:c2:91:37:0a:f1:61:5f:24:10:39:ec:9b:f3:
                    36:ba:65:71:5d:de:42:15:52:2a:34:ce:a9:81:36:
                    3b:88:70:37:5c:54:d0:2c:56:75:e2:59:e7:c5:5b:
                    f7:ae:b4:6e:e5:01:72:9a:62:9c:05:9b:01:11:9b:
                    d3:5d:51:ad:4f:ee:3a:ae:42:60:8b:86:44:f6:5f:
                    93:ad:cd:79:5f:a4:32:9a:37:0a:8a:3d:1c:bb:78:
                    01:e3:c0:e0:87:52:c2:34:10:66:cb:f5:25:4c:0b:
                    b6:d9:9d:1e:d5:43:91:54:ba:79:6f:e3:be:d6:7d:
                    d9:6d:68:01:98:b2:cb:e2:45:e1:79:a0:6d:7e:9c:
                    45:a8:6f:3a:88:c3:38:6f:19:6c:71:d8:45:90:8b:
                    94:e8:8e:04:3b:9b:92:ae:7c:41:09:02:b2:4b:11:
                    99:62:68:7e:96:71:38:3c:6f:b1:e5:c2:0e:70:50:
                    f7:90:1b:e3:50:40:73:69:85:87:8c:b0:eb:0d:34:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:34:7E:69:36:E6:9E:07:B7:44:FB:0D:01:DA:FF:BA:7C:53:41
            X509v3 Authority Key Identifier:
                keyid:0B:16:F3:39:D4:9C:5E:82:00:12:70:3C:B4:97:8B:E6:AE:2C:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B16F339D49C5E820012703CB4978BE6AE2CC78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:17:d2:ad:80:fa:34:69:86:b5:c1:1b:6c:a7:b1:ee:b2:b7:
         3f:3c:7d:67:2e:4c:3f:60:72:94:35:fa:c2:1e:84:77:fe:f1:
         d3:55:80:4b:07:9e:08:1d:61:93:91:60:8b:29:98:32:7d:ec:
         e2:c7:08:fa:0a:1a:41:02:8d:67:56:59:1b:a7:36:2a:83:8e:
         c6:2f:fb:1a:15:22:2d:9c:0e:4e:bb:95:f2:20:40:9a:af:ff:
         4f:8c:8a:ad:73:81:2a:24:c3:bd:27:96:c3:b4:d2:d9:81:56:
         21:95:71:72:55:89:ef:af:10:90:2e:ce:2a:7c:6e:42:86:a6:
         89:3b:c2:0e:62:6a:9d:66:52:60:0f:68:14:13:9f:2b:53:5a:
         5b:e5:48:e6:cd:f7:d6:94:ef:8b:af:3a:c5:ae:fc:e8:28:c9:
         9d:3e:4d:65:2c:dd:63:e4:44:34:13:94:a3:f1:29:15:4e:fe:
         3c:be:19:9b:1f:87:04:60:87:b6:30:5e:66:3e:7f:42:8b:a6:
         19:91:6a:f6:9b:3b:2c:b6:4e:c1:97:45:89:41:68:3b:03:b3:
         e4:d5:16:f7:a9:93:87:0b:16:04:1e:82:e6:c3:7d:5b:73:a3:
         ab:2b:57:10:54:b0:87:24:22:30:df:36:3a:46:af:8e:92:a5:
         aa:11:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org