Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          2ncDi5B9v3CG7Ub5+v7qVPDvc21/qgIaK5cVdBNYP/A=
Subject key identifier:   00:AE:2E:84:13:F5:3C:4A:2C:BC:26:53:20:AF:F4:3A:52:41:73:25
Certificate issuer:       /CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
Certificate serial:       30B573511DEBEDA14A86786943436E5BEC188575
Authority key identifier: 8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:57:30 +0000
ROA not before:           Sat 27 Apr 2024 13:52:30 +0000
ROA not after:            Sat 26 Apr 2025 13:57:30 +0000
asID:                     264022
IP address blocks:        170.245.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:73:51:1d:eb:ed:a1:4a:86:78:69:43:43:6e:5b:ec:18:85:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
        Validity
            Not Before: Apr 27 13:52:30 2024 GMT
            Not After : Apr 26 13:57:30 2025 GMT
        Subject: CN=00AE2E8413F53C4A2CBC265320AFF43A52417325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:74:2f:3f:c8:7a:8e:37:55:bb:d4:fa:51:
                    76:99:20:07:b4:df:9e:1d:b0:4c:3f:64:be:2e:c1:
                    67:80:43:1d:0d:a2:4b:21:19:a2:07:64:9c:96:cb:
                    c3:31:cb:92:52:33:8e:da:b2:90:77:d9:4e:96:ba:
                    73:61:28:77:08:82:03:8e:0e:3f:a0:06:f6:61:10:
                    3d:a1:1b:32:3d:cb:a8:9f:4d:c5:35:da:04:e9:b5:
                    45:9a:8a:44:4a:7c:25:03:a8:6a:bb:54:1e:03:21:
                    58:93:ff:3f:20:88:26:74:4b:31:84:5b:30:b5:28:
                    8a:b2:40:ae:af:c0:76:5f:33:16:be:a1:56:03:96:
                    e3:5a:d9:7b:7f:b2:d1:fd:a3:3e:03:04:c0:ca:90:
                    5f:f5:1f:5d:44:ad:f6:40:b9:a0:30:6e:e8:0b:9e:
                    6d:51:1f:02:70:74:f8:70:36:45:fb:f2:5a:b0:8a:
                    a0:35:fb:02:a1:4a:e1:eb:12:50:6b:bc:1b:8d:e6:
                    b2:18:c1:64:74:0a:f5:23:f5:79:a2:47:52:7c:6f:
                    6d:6c:2c:83:b1:49:1c:5a:ee:a9:63:cb:dd:41:b2:
                    7e:47:c3:cc:8b:5c:ce:57:15:bc:f1:cc:f4:6a:cd:
                    f1:df:6e:55:a4:9b:46:51:06:75:7c:a9:87:51:7e:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:2E:84:13:F5:3C:4A:2C:BC:26:53:20:AF:F4:3A:52:41:73:25
            X509v3 Authority Key Identifier:
                keyid:8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:46:70:80:62:8f:66:26:05:f3:e3:62:ab:31:85:27:98:
         be:b8:7a:00:92:83:51:69:71:3c:90:7d:26:19:dc:6a:27:b6:
         01:41:15:39:29:90:a5:f3:ef:fd:2f:c4:c6:f7:d4:be:7d:02:
         ad:7c:d9:19:d7:29:54:75:9c:97:9f:7f:7f:f4:2e:3e:11:93:
         1f:17:ed:df:ca:45:11:94:52:92:c8:96:ad:3a:99:9f:66:d0:
         ee:2b:b7:9a:05:4d:06:22:69:b4:81:23:21:27:f0:e1:4a:b9:
         4f:45:be:99:4a:00:a9:ae:ae:75:77:4d:52:79:ec:fd:2d:b6:
         31:0e:48:b2:2a:a2:50:6e:3a:98:b0:20:fe:e5:bf:9b:f1:79:
         f4:b4:1a:42:4d:db:9f:ad:15:6a:b5:e3:be:20:9f:2b:5b:8f:
         f8:3a:da:46:42:56:87:66:31:94:0c:9f:9e:90:75:ec:13:92:
         24:97:f9:1b:14:ad:d1:0c:a6:b1:82:f8:78:12:22:e2:25:fd:
         b9:06:b2:75:d4:68:46:37:6e:d6:fb:b8:0c:ed:ff:5a:64:17:
         05:ab:d3:d6:3c:d6:8c:5c:7a:5d:5e:71:f1:74:85:40:58:bc:
         e6:d0:c2:8b:a8:10:ee:41:8b:0c:aa:52:40:97:99:d1:1e:5c:
         46:1c:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org