Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234372e3131362e302f32322d3234203d3e203238353830.roa
File:                     3137302e3234372e3131362e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          8zt9TdCy8AdsTfi2i8OWh1+juDE7A71Lvm7FvIram0A=
Subject key identifier:   B7:99:56:22:C6:5A:CF:02:6B:34:A0:E9:B3:AF:1F:97:C0:DE:91:36
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       50C96778B11B3E4085FF36D7655937E6116E0BAB
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234372e3131362e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:07 +0000
ROA not before:           Thu 19 Oct 2023 19:10:07 +0000
ROA not after:            Thu 17 Oct 2024 19:15:07 +0000
asID:                     28580
IP address blocks:        170.247.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c9:67:78:b1:1b:3e:40:85:ff:36:d7:65:59:37:e6:11:6e:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:07 2023 GMT
            Not After : Oct 17 19:15:07 2024 GMT
        Subject: CN=B7995622C65ACF026B34A0E9B3AF1F97C0DE9136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:de:c5:71:d8:b9:80:65:40:1e:ba:30:11:
                    9e:2f:a2:d1:d4:08:2f:67:3c:04:5b:58:20:28:f7:
                    4e:d4:a3:69:20:2e:e8:f9:a0:f0:8a:f3:32:bf:6a:
                    c4:92:5d:7d:c4:03:ab:1b:01:31:ad:0b:8a:a1:05:
                    b0:23:d1:c0:25:74:df:85:be:a2:8f:1a:84:83:3c:
                    10:38:f4:da:91:c8:e1:c5:bb:c7:d7:77:4d:2c:37:
                    9b:e1:3d:a6:5f:f4:3c:07:e6:df:c1:5e:98:10:79:
                    df:50:22:2e:ba:8d:fc:f4:ff:10:6a:2a:91:fa:4e:
                    f9:d6:af:93:ba:68:2e:6b:38:bb:a3:7f:73:3e:4a:
                    1b:ed:66:63:47:cd:77:46:87:57:34:f0:de:f7:34:
                    44:f2:5f:2f:8b:79:96:a8:df:56:8c:27:e9:82:21:
                    90:a1:63:08:3f:92:e0:b3:bf:ce:61:ca:b6:4a:be:
                    97:33:e1:8c:07:1a:02:ef:a3:2a:9e:d1:f1:54:1b:
                    63:5e:d4:0c:5d:1e:cf:08:93:ac:e8:79:15:0f:8f:
                    53:6c:fb:72:6f:6c:ce:4d:66:17:f3:55:cf:a9:1b:
                    09:77:71:08:45:61:a8:ac:7b:32:1e:ed:e7:67:5e:
                    d0:21:62:65:c0:e1:00:89:7a:96:67:af:81:3b:51:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:56:22:C6:5A:CF:02:6B:34:A0:E9:B3:AF:1F:97:C0:DE:91:36
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234372e3131362e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:21:ab:2f:6e:5f:47:de:b7:64:d4:4b:9c:00:36:4b:0d:
         a4:09:d0:a4:3f:ab:8e:f3:a5:6d:6a:38:93:b9:89:1e:66:39:
         02:71:03:e0:bc:f5:69:4a:d0:6d:7e:e8:d1:54:a9:aa:bf:13:
         c9:19:da:11:f5:b2:d5:e6:23:08:bf:46:04:4b:f8:7a:69:d1:
         76:1c:3d:80:b8:32:67:d4:fe:dd:32:5e:20:b0:7f:12:5c:af:
         41:07:47:47:8f:fe:7a:14:85:0a:ad:2e:59:b0:04:12:a4:c1:
         09:d8:31:05:f3:ea:6c:f2:16:ce:a6:4b:ff:ad:6c:32:c5:29:
         26:19:61:d8:92:03:7e:25:8f:76:6c:a0:ef:9d:92:2f:e7:0f:
         6b:b0:d1:63:69:44:a6:45:f7:2c:a4:23:25:36:f8:d9:91:70:
         4b:0a:3e:96:71:7b:11:22:79:7a:69:be:9b:34:c8:9e:50:38:
         4c:6c:5d:b9:1b:89:de:97:60:6a:69:ee:1f:31:52:49:36:d1:
         b1:31:c5:cc:3e:54:48:5e:6a:7c:5f:c3:cb:37:9d:ab:39:9c:
         32:fc:22:3b:c2:83:76:a1:e2:cf:3f:f4:13:b5:67:18:33:ec:
         da:5d:5a:4b:2c:2b:1d:1d:54:54:f4:db:c6:cd:e8:4d:d3:78:
         39:a9:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org