Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          KCql1PFMoJBkhfceiqARcrr71DybwzwyzNRxZP5KQLY=
Subject key identifier:   34:F6:6A:5A:35:26:21:1E:A2:70:B2:BA:BF:92:7E:15:E1:7E:40:C2
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       3E430B3B51259AF2112CBE124584B8E8E6FC7D1D
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
Signing time:             Thu 31 Aug 2023 19:08:02 +0000
ROA not before:           Thu 31 Aug 2023 19:03:02 +0000
ROA not after:            Thu 29 Aug 2024 19:08:02 +0000
asID:                     264297
IP address blocks:        168.197.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:0b:3b:51:25:9a:f2:11:2c:be:12:45:84:b8:e8:e6:fc:7d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Aug 31 19:03:02 2023 GMT
            Not After : Aug 29 19:08:02 2024 GMT
        Subject: CN=34F66A5A3526211EA270B2BABF927E15E17E40C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:7e:af:31:67:10:2c:03:2a:e5:9a:10:62:
                    63:6d:dd:70:9c:4e:95:cd:12:71:54:d8:4d:2d:56:
                    ed:a1:c1:43:90:b5:05:4c:20:7f:33:dd:29:ca:4c:
                    a4:9f:84:9c:79:d3:a9:12:62:5d:87:2f:60:0d:96:
                    09:31:f3:66:cf:90:62:9e:83:8d:b5:13:05:b7:d1:
                    b3:04:70:2c:87:b7:4f:fa:fe:f3:f2:4e:76:6a:a8:
                    b2:3e:3e:b5:4a:93:50:23:38:85:02:0e:8c:6f:92:
                    2b:c7:96:18:14:57:62:96:3a:61:b8:dc:da:42:f1:
                    13:39:1b:3c:1f:04:6c:6d:5e:22:6c:fc:d2:f5:c8:
                    1e:66:b3:06:3d:87:68:7e:d2:4f:56:0b:1a:af:d2:
                    bf:dc:69:f3:36:d0:3d:f3:05:f7:cf:6a:21:77:cf:
                    42:3f:8f:ed:c9:bd:7c:17:ec:70:49:65:e3:47:bd:
                    32:5f:bc:00:7e:a9:8d:95:04:5c:b7:fb:bf:4e:fa:
                    76:77:4e:6b:af:11:44:e1:50:15:dc:cb:e3:28:e3:
                    64:dd:9e:f3:c7:45:0b:56:93:25:5d:d7:bd:0c:ba:
                    01:4b:8b:47:f0:f9:06:05:98:ba:e4:bd:83:41:f6:
                    51:67:6e:ee:9b:48:a5:8c:5b:82:7a:bd:74:78:d7:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:6A:5A:35:26:21:1E:A2:70:B2:BA:BF:92:7E:15:E1:7E:40:C2
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:43:25:7e:44:65:d9:4f:8e:86:e0:dc:ae:78:17:00:f2:
         6f:5f:93:51:97:7b:68:ac:26:ed:d0:e6:f0:34:23:8b:91:4d:
         59:51:54:95:f3:0c:50:0c:f4:a7:77:d2:3d:22:c0:e0:ae:ed:
         4c:b5:20:ea:89:ce:56:46:ba:0f:cc:f9:b4:71:00:3b:17:e0:
         18:6f:24:8f:fa:b0:cd:96:26:c4:1a:68:a6:48:fb:07:f9:54:
         ca:4d:65:33:c5:7a:bb:c8:3f:c5:39:b3:82:84:1f:a3:2a:8e:
         81:0f:66:2a:ca:05:ff:b7:99:1a:d7:91:b2:46:84:e3:b9:09:
         04:32:56:9b:7b:5b:93:71:d7:1a:cd:ff:26:1b:bd:35:d4:ca:
         c9:c8:a8:ae:c8:6c:f4:0b:17:50:0b:8f:a6:e1:ac:6c:58:d0:
         55:08:85:45:86:4f:cb:f3:ee:da:e0:0b:13:08:e4:80:8e:9c:
         b4:48:60:f4:0e:81:a9:cf:7a:db:7d:44:3d:13:db:a2:f2:24:
         85:60:a6:ae:65:ef:79:8f:f5:28:22:d5:04:a0:6c:a9:4a:56:
         ff:a4:8b:6c:7c:66:ba:d3:bf:37:5c:0e:01:91:30:69:b7:a2:
         06:bd:6d:52:14:53:aa:2b:5a:3c:fd:1d:f4:11:fc:26:52:c6:
         f5:05:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org