Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e34382e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          Zt5GhsKQNhUcRmohkTwl0N7Dyk1CWGhDFrrDZDKD+Ew=
Subject key identifier:   E0:94:94:2D:B5:B6:1D:9B:2F:B3:77:75:F7:D4:7C:21:63:16:32:9E
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       2BE8B2FA558B17597CE5B7D75C4A9691947F992E
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:30 +0000
ROA not before:           Thu 29 Jun 2023 14:55:30 +0000
ROA not after:            Thu 27 Jun 2024 15:00:30 +0000
asID:                     265022
IP address blocks:        170.84.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:b2:fa:55:8b:17:59:7c:e5:b7:d7:5c:4a:96:91:94:7f:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:30 2023 GMT
            Not After : Jun 27 15:00:30 2024 GMT
        Subject: CN=E094942DB5B61D9B2FB37775F7D47C216316329E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:1f:17:4a:dd:00:42:bc:91:e0:cb:6c:31:
                    d4:ca:01:ef:5f:72:5b:67:f6:60:b2:12:94:86:3b:
                    6d:7b:d0:68:36:d4:5a:d9:7f:d2:08:4f:0e:7e:c1:
                    ce:b2:76:52:62:b8:aa:fd:de:db:41:c2:3a:5d:fd:
                    79:15:b0:72:71:eb:ee:ca:e2:19:34:05:06:6e:ba:
                    50:50:78:db:34:c5:52:f1:96:03:45:b2:f2:82:7e:
                    b8:aa:1d:7f:00:ce:0e:ca:3d:50:84:20:36:95:11:
                    44:eb:d9:06:e2:2f:d1:45:23:d8:84:54:0e:03:c7:
                    5f:b3:36:f9:e8:b4:f0:aa:d8:fc:e1:47:b3:44:cb:
                    04:e4:5d:b5:42:7d:6e:18:f7:b9:5a:da:4b:f2:b1:
                    f0:38:62:8d:39:80:2a:70:0e:04:a7:67:36:6b:aa:
                    e2:9b:ff:12:7d:24:dc:a7:0b:f1:ed:aa:30:48:eb:
                    dc:80:eb:b5:b8:68:b9:b2:28:de:ab:c0:c6:63:35:
                    3a:12:92:64:74:ee:a7:f7:fe:78:ac:d8:30:83:2a:
                    03:f4:95:56:a6:95:9f:b4:d1:3d:c6:41:36:65:ed:
                    10:f8:ff:26:23:b7:99:c7:cd:01:07:8c:28:d9:16:
                    26:89:cb:69:a9:9e:ea:0a:05:c0:80:22:d8:ee:09:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:94:94:2D:B5:B6:1D:9B:2F:B3:77:75:F7:D4:7C:21:63:16:32:9E
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:a7:06:44:f1:78:e0:63:4b:93:63:a2:bf:2d:b1:9d:74:
         c2:11:ed:a5:a4:f1:3f:c2:49:8a:ee:36:76:fd:7c:16:57:5a:
         b8:c1:bf:c1:3f:1c:b6:cd:7d:31:7f:20:e9:a6:14:26:14:9d:
         3e:b3:90:a3:10:9a:9c:9e:64:05:1b:88:3d:7d:ff:26:ab:98:
         ee:e4:8b:c0:e6:e5:78:74:f7:11:2d:fd:5b:e5:01:83:cf:61:
         c6:79:42:90:dd:2c:38:a2:51:12:ec:cd:90:7b:b2:2b:cc:72:
         4e:6d:9a:02:c1:98:1c:fb:fb:79:b7:bc:d7:3c:3d:2a:4d:9a:
         23:e1:a4:fd:4b:f0:63:e1:80:61:56:ef:54:6e:54:24:a6:b0:
         1c:62:b0:72:76:19:dc:66:d4:e5:64:56:2c:a2:ce:93:c0:2c:
         ff:46:2d:e1:2d:13:53:3a:26:bb:d3:8d:5a:3e:be:dd:2d:c4:
         ad:c2:85:9a:40:5d:66:9d:28:3b:08:96:0c:51:bc:dc:78:89:
         6c:3c:05:2e:d3:1c:58:20:b7:0c:62:4d:9b:57:7c:33:1d:a0:
         71:81:b3:a9:04:7d:a2:a1:41:98:a5:cb:5f:a5:91:01:90:21:
         e9:58:0a:ee:67:84:f8:de:44:92:01:70:e4:35:5e:1f:a2:cd:
         98:88:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org