Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231382e302f32342d3234203d3e20323636333539.roa
File:                     3137302e3233392e3231382e302f32342d3234203d3e20323636333539.roa (raw, json)
Hash identifier:          plexfyXJB5hmEKw1muSdNjtK8qmdQuPdBJ88nPWmTJo=
Subject key identifier:   50:A2:EE:FE:F1:86:DF:6E:8C:78:00:6F:01:23:4D:F7:0C:70:6D:AD
Certificate issuer:       /CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
Certificate serial:       589E337B4FD3F3FE5608A1FD072E329741FC9D48
Authority key identifier: 2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231382e302f32342d3234203d3e20323636333539.roa
Signing time:             Fri 06 Jan 2023 14:51:03 +0000
ROA not before:           Fri 06 Jan 2023 14:46:03 +0000
ROA not after:            Fri 05 Jan 2024 14:51:03 +0000
asID:                     266359
IP address blocks:        170.239.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9e:33:7b:4f:d3:f3:fe:56:08:a1:fd:07:2e:32:97:41:fc:9d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
        Validity
            Not Before: Jan  6 14:46:03 2023 GMT
            Not After : Jan  5 14:51:03 2024 GMT
        Subject: CN=50A2EEFEF186DF6E8C78006F01234DF70C706DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:01:19:6d:27:46:1b:70:86:3b:86:4f:61:
                    15:3f:c2:ba:cc:cb:eb:e9:f2:d1:f1:00:91:5a:6d:
                    10:76:21:13:42:d3:8e:10:f2:79:82:69:81:ea:3b:
                    b0:52:68:d5:29:8e:80:c7:e7:14:9a:34:8c:e7:b9:
                    a5:91:27:6f:61:15:b8:04:00:d8:a5:81:86:33:57:
                    1b:9b:a3:bf:34:21:ce:d0:ad:ff:ac:e0:da:29:fa:
                    c4:41:2e:bb:fb:91:15:c5:25:af:98:cd:60:88:2c:
                    83:dc:86:e4:36:73:da:13:c9:a7:f4:6a:55:87:de:
                    90:35:f7:fb:bf:5a:56:cc:da:31:0e:c0:22:1a:27:
                    77:24:04:63:f0:fa:fb:48:e5:c8:18:8d:2b:e7:79:
                    57:66:6d:0c:a4:32:8e:75:df:f7:83:c8:17:80:75:
                    38:7d:b7:0b:c1:06:45:cf:96:d2:71:84:cb:5a:68:
                    28:fb:5c:6e:6d:8a:cd:21:a1:35:c3:b9:84:ba:d8:
                    05:f3:76:60:ff:22:e7:45:2c:2c:e9:83:f8:bf:1b:
                    18:f2:d7:8f:93:c7:c8:30:ec:28:9a:b2:6f:24:bd:
                    e3:0f:15:2e:d2:52:28:bf:44:81:67:04:78:a6:3a:
                    0e:25:bc:0a:14:4d:bf:76:c7:f1:52:8f:0a:e5:50:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:EE:FE:F1:86:DF:6E:8C:78:00:6F:01:23:4D:F7:0C:70:6D:AD
            X509v3 Authority Key Identifier:
                keyid:2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231382e302f32342d3234203d3e20323636333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:f1:e1:d8:bb:0d:7e:6a:c2:f3:61:3f:f5:f0:90:23:9b:
         69:37:ac:a3:50:db:15:87:25:aa:02:14:fd:89:2e:50:a4:72:
         6b:a1:b3:a8:22:6d:ab:b6:6d:f5:25:8c:30:d9:a8:24:88:7c:
         38:b7:e9:a5:c8:ef:65:42:71:0d:48:47:f2:e0:06:40:79:39:
         fe:03:f7:74:94:c2:e1:28:75:ed:61:23:da:20:d8:19:2d:b3:
         e1:3e:63:34:11:fb:69:52:bf:8f:d2:e1:79:7e:f9:da:9d:fe:
         6c:1c:1e:03:f1:5a:11:b5:4e:fa:60:a5:3f:53:31:34:29:55:
         b8:64:09:a3:37:09:2e:e2:f3:67:6c:3e:cb:41:b0:80:32:66:
         b0:aa:07:7b:ab:0c:8e:fc:60:b9:29:8d:03:4d:37:54:a3:94:
         83:67:b7:10:14:c0:85:5d:58:50:cb:d5:6e:56:6b:a0:f4:1f:
         da:60:d0:12:b7:b0:81:f4:95:85:3f:3a:ec:22:2e:19:bf:6a:
         7c:87:e1:90:45:1f:0f:12:96:4d:7f:1f:24:b4:2f:e7:fb:33:
         8c:72:04:50:b0:f9:3e:d2:98:f8:cf:22:e1:cb:84:b4:30:72:
         e5:d0:b0:46:7e:de:18:44:0a:5e:e2:1b:0b:25:6a:40:2e:73:
         39:94:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org