Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e203238323139.roa
File:                     3137302e3233392e3231362e302f32322d3234203d3e203238323139.roa (raw, json)
Hash identifier:          e6EmpBD7UXIUz9Be6xNRviIEYegr9FN0daIckicgsyE=
Subject key identifier:   72:64:91:7E:91:2A:DD:B4:5B:CE:6D:06:2C:8C:1A:93:0C:1C:3C:AF
Certificate issuer:       /CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
Certificate serial:       18FCD4644D313012AE9E0CE8CBE199E031CEDADB
Authority key identifier: 2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e203238323139.roa
Signing time:             Fri 06 Jan 2023 14:50:57 +0000
ROA not before:           Fri 06 Jan 2023 14:45:57 +0000
ROA not after:            Fri 05 Jan 2024 14:50:57 +0000
asID:                     28219
IP address blocks:        170.239.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fc:d4:64:4d:31:30:12:ae:9e:0c:e8:cb:e1:99:e0:31:ce:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
        Validity
            Not Before: Jan  6 14:45:57 2023 GMT
            Not After : Jan  5 14:50:57 2024 GMT
        Subject: CN=7264917E912ADDB45BCE6D062C8C1A930C1C3CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:7c:2d:6c:c6:66:de:02:a7:8a:8e:af:e9:
                    c9:cf:ab:ef:6c:5c:2f:0d:de:41:fe:b6:74:34:ae:
                    0f:fe:cb:9f:8f:1d:6b:68:2d:d2:c6:aa:11:07:50:
                    28:d5:d0:3b:b8:72:71:eb:9b:e1:89:34:96:0b:bc:
                    2e:a7:bb:5a:b7:c8:25:c0:34:52:ea:1b:de:11:be:
                    c7:0d:c0:a3:2c:4d:30:2d:bd:13:70:a4:92:bd:da:
                    e8:1b:e1:59:df:a6:ea:03:05:a0:e0:88:35:cf:f0:
                    05:16:95:e8:07:d5:a8:52:28:a8:1e:d0:06:f6:fd:
                    e8:6c:16:51:b3:c6:30:cd:6b:ba:14:b3:32:7b:17:
                    e8:f4:cf:11:31:a4:bd:e8:c6:ff:16:e4:cb:0b:fc:
                    40:3e:09:8e:df:78:1d:fc:a3:cf:b3:f9:1e:a4:e0:
                    2c:05:48:a4:b1:ce:53:46:c9:6a:fa:6a:7d:09:cc:
                    ca:be:af:d0:63:28:e8:05:0d:67:75:fe:3f:db:d9:
                    cb:58:06:54:46:de:9b:e4:13:ad:39:71:94:09:f4:
                    7f:fb:30:4d:9e:c5:44:ac:12:7e:21:c3:90:57:24:
                    e7:ab:a6:33:35:89:bd:bc:1a:9f:1b:90:96:d2:d6:
                    8f:18:84:1b:f6:e0:e9:d2:24:ad:5a:ca:2b:09:f8:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:64:91:7E:91:2A:DD:B4:5B:CE:6D:06:2C:8C:1A:93:0C:1C:3C:AF
            X509v3 Authority Key Identifier:
                keyid:2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:38:e3:f2:85:3e:de:2d:f8:b2:85:ee:1d:f3:10:50:bf:d6:
         b0:0b:1c:ce:1e:65:ec:09:42:33:d7:74:f8:43:83:8f:52:aa:
         0f:79:c6:8c:28:f4:fe:71:c7:f4:a0:4b:80:4b:eb:2e:86:65:
         1e:68:70:22:90:cc:f0:5e:a9:89:72:c3:a5:f4:76:b1:96:4a:
         a7:12:2c:0d:f0:fd:89:a2:91:8b:0b:5f:8c:aa:ec:4a:1e:61:
         ae:5f:dc:8b:e1:ec:77:a1:79:c6:8b:10:2d:00:b6:d8:eb:65:
         db:1e:d7:5a:85:c9:b2:c7:84:4c:ae:7c:78:f9:30:b1:2f:8c:
         94:45:81:7f:81:21:63:e2:16:4d:59:b9:9d:52:8e:90:f6:f3:
         51:b8:18:be:86:54:1f:aa:6f:a3:8c:b5:0d:06:93:47:4e:da:
         ea:c8:ee:98:00:6f:9c:d8:35:90:a4:87:d0:09:ff:17:c6:1c:
         c2:70:0a:85:4f:35:08:6c:d5:4b:25:53:94:7f:1d:b3:de:c6:
         db:c5:cd:0e:27:8f:63:d4:49:24:10:fb:57:eb:32:3d:7d:37:
         3f:fb:3b:0f:0f:84:d6:36:50:94:8e:7f:7c:07:24:a0:ba:7c:
         3b:01:76:ac:28:b6:12:2d:33:0d:b8:9f:b5:21:b6:e9:30:4e:
         3d:15:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org