Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa
File:                     3137302e37392e39362e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          mB9MLH3FrUFpT8bOapF++PEqnwEukJimkIky5IwROjE=
Subject key identifier:   96:E8:00:DE:EB:52:B6:32:2C:2A:4F:41:30:06:65:26:B4:35:4B:77
Certificate issuer:       /CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
Certificate serial:       47B00F012B6F652314FBC199F73BC82FA4C69793
Authority key identifier: 6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa
Signing time:             Fri 11 Aug 2023 20:08:33 +0000
ROA not before:           Fri 11 Aug 2023 20:03:33 +0000
ROA not after:            Fri 09 Aug 2024 20:08:33 +0000
asID:                     265066
IP address blocks:        170.79.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:0f:01:2b:6f:65:23:14:fb:c1:99:f7:3b:c8:2f:a4:c6:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
        Validity
            Not Before: Aug 11 20:03:33 2023 GMT
            Not After : Aug  9 20:08:33 2024 GMT
        Subject: CN=96E800DEEB52B6322C2A4F4130066526B4354B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:1c:15:91:61:fb:70:d6:8a:1d:4a:33:4a:
                    e1:3e:36:b0:a9:74:a1:ec:05:84:93:56:c0:32:df:
                    13:1f:23:9f:a6:41:c2:49:0a:85:38:59:ef:31:fe:
                    28:db:97:b3:64:f9:fe:2b:04:12:91:9a:5e:d2:ca:
                    e1:0c:dd:e2:a9:ae:75:46:60:ee:74:5b:49:c5:c4:
                    63:8d:c7:c0:85:75:56:92:83:88:ac:24:13:02:10:
                    51:3c:66:68:b4:db:d7:88:d4:0c:1e:8f:ef:b7:9e:
                    d9:7c:88:45:28:05:97:ad:e2:b0:1b:b3:8b:f7:a3:
                    dd:bf:05:3a:3e:e9:f2:72:e7:a2:ab:ae:89:32:68:
                    33:fc:75:c2:24:d6:a0:b6:41:2b:5f:43:37:2b:56:
                    81:3d:30:c3:bb:94:6a:22:79:d6:2c:26:f3:74:ee:
                    eb:04:68:f6:9a:c9:6a:46:08:a0:22:50:03:84:03:
                    14:b1:74:68:0c:cc:c1:03:83:f3:70:cd:92:3e:26:
                    c9:9e:bc:36:de:1c:7d:a1:2a:2e:9a:6f:ad:06:e4:
                    c6:fd:06:5d:72:ee:e7:a1:e1:b7:5b:03:90:e4:7f:
                    f5:e8:c3:d9:9e:ae:bb:3b:c9:1e:5d:a3:7d:0d:8b:
                    d7:a2:1a:87:45:e7:06:7a:9d:59:fe:f7:eb:9a:48:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E8:00:DE:EB:52:B6:32:2C:2A:4F:41:30:06:65:26:B4:35:4B:77
            X509v3 Authority Key Identifier:
                keyid:6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e37392e39362e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:64:e8:b2:76:ac:9e:cd:ac:15:fc:dc:0b:51:22:17:a8:
         d1:11:48:3c:19:07:b8:4b:70:74:e1:58:4f:f7:2d:56:da:fb:
         24:e0:71:df:4f:eb:8e:74:da:6c:a2:c6:24:b1:ad:ea:64:42:
         ec:fd:70:4e:a9:09:c1:e9:8d:f7:8a:61:9a:06:1d:7f:90:00:
         e0:bf:60:b9:45:8e:02:ff:ca:85:c8:8b:b3:90:4c:65:f5:66:
         70:f0:de:da:79:d2:4f:a3:5d:54:bf:9c:e7:6d:a8:35:fa:a5:
         1b:c9:e1:f8:28:8d:d4:0c:46:83:03:6f:d5:c9:06:02:97:88:
         a5:c1:37:9b:d0:63:15:c1:19:ab:23:b7:e8:f7:f1:e9:dd:17:
         34:46:5c:cd:c6:0e:9b:81:d9:e4:34:5e:a3:79:7f:50:b3:fd:
         c3:80:43:39:32:ee:67:49:e4:58:2f:a6:b6:0b:1b:72:04:0a:
         9e:f7:3f:3a:f7:88:50:e5:ab:17:a3:88:f6:c0:96:7d:ac:01:
         87:01:a1:ae:ed:5e:91:ab:d9:ec:12:90:69:36:71:bf:cd:40:
         72:fd:45:ad:b3:ee:80:76:1e:55:c4:e3:b4:00:42:0c:29:f9:
         c3:d2:31:ee:fb:55:c9:c6:47:89:ea:17:7e:2d:cd:b7:2f:6e:
         b8:e6:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org