Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          WAGr4q7iN+gITUbhRt+57dkXmriDZfgX08Io9wHsZ4I=
Subject key identifier:   36:1D:E8:90:BA:DC:35:27:E8:57:E1:D3:98:21:21:C8:80:CA:90:B6
Certificate issuer:       /CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
Certificate serial:       12A59F1533A44E7A12FE864F017B2DD1F26D7842
Authority key identifier: 8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:57:30 +0000
ROA not before:           Sat 27 Apr 2024 13:52:30 +0000
ROA not after:            Sat 26 Apr 2025 13:57:30 +0000
asID:                     264022
IP address blocks:        170.245.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a5:9f:15:33:a4:4e:7a:12:fe:86:4f:01:7b:2d:d1:f2:6d:78:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
        Validity
            Not Before: Apr 27 13:52:30 2024 GMT
            Not After : Apr 26 13:57:30 2025 GMT
        Subject: CN=361DE890BADC3527E857E1D3982121C880CA90B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:87:2f:f8:5e:c4:68:60:03:d2:df:b9:e8:
                    a4:23:ba:c7:96:d4:11:12:a4:ef:04:55:e1:7b:74:
                    68:28:1f:5e:36:22:ca:e3:a3:b2:fd:f9:0a:79:8a:
                    39:60:3a:5c:6f:83:81:9e:21:f7:9c:86:27:1a:26:
                    cc:64:7a:e0:a1:ed:08:13:24:4f:4f:b3:f8:5c:d7:
                    82:3e:cf:09:96:dc:e4:fc:da:b7:1c:c0:d6:01:30:
                    e3:b4:12:e9:ac:a9:80:55:5b:1a:78:ff:b0:b1:49:
                    b4:8f:2d:55:44:71:1f:07:f4:90:14:d7:fc:1d:69:
                    5c:c3:82:89:e4:76:7b:1d:a1:8b:d8:47:7f:74:2c:
                    49:4a:cb:7d:63:6b:f7:63:e9:fd:25:10:ac:25:14:
                    b4:ad:b4:53:b3:29:bb:c6:cc:58:86:11:7d:9c:7e:
                    c1:fc:52:54:8b:e9:a9:01:8a:db:07:ee:ed:29:00:
                    58:bc:dd:74:11:4b:c6:2f:55:c2:1f:49:dc:c3:97:
                    2d:44:60:66:de:57:b8:c2:c0:d8:31:2b:af:38:23:
                    47:41:d2:93:ad:0b:7a:c8:8d:28:60:58:db:7d:e5:
                    2b:7a:c8:24:c6:de:1a:cb:d0:ea:64:58:28:7d:c6:
                    85:f8:da:a7:bc:03:93:c7:70:da:ff:3a:cd:36:d3:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:E8:90:BA:DC:35:27:E8:57:E1:D3:98:21:21:C8:80:CA:90:B6
            X509v3 Authority Key Identifier:
                keyid:8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:31:e0:13:ff:5a:20:3f:62:d4:c6:ae:6c:2e:39:0d:d0:a2:
         ab:b4:27:72:73:53:94:94:95:89:6e:86:70:d4:f8:44:d4:c7:
         c7:ac:c0:d8:8d:26:15:c7:9a:de:83:b0:d4:30:fb:dc:b5:92:
         a5:46:6a:54:d6:6d:b5:b7:5a:14:da:b0:b8:15:a7:19:8b:b9:
         04:83:43:21:a5:24:5d:33:70:82:b9:ac:fd:4b:8b:bd:1e:27:
         95:cc:c7:86:6d:0b:cb:f9:f7:73:c7:ec:fe:d4:53:b1:a3:7a:
         7d:d8:fa:fc:19:d6:95:0d:23:12:cc:7e:ad:03:50:94:7f:ee:
         3e:3d:b9:2a:de:ad:07:2f:db:37:77:8d:ed:39:4a:90:7f:ed:
         03:02:97:f8:e6:51:78:4b:db:49:bc:d6:45:6d:1d:4a:21:94:
         30:17:9b:bc:bc:bc:79:c8:8e:f9:a0:22:4d:6c:fe:b0:9b:e0:
         33:2c:b9:23:18:b8:37:aa:d7:bc:ff:85:bf:d6:4b:da:d1:d6:
         4c:63:5c:54:70:a4:db:69:27:3e:52:2f:6c:94:85:00:f4:58:
         6c:c6:c6:dd:b9:26:b5:21:4a:40:88:a8:8b:1f:0b:5a:c0:25:
         8a:7c:83:fb:78:41:46:2a:b2:9e:2d:76:62:6b:12:f1:10:c0:
         d6:70:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org