Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34392e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e34392e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          mwrJJnKJktZ4S33oQN18ZiYmzDAbK7fwdi8uRI0R1SU=
Subject key identifier:   B9:82:18:72:2B:56:3E:F1:49:9E:D6:8E:09:6D:54:0C:85:52:BC:42
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       766DA623455D1715C104E0710BD73C2DFC046BC7
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34392e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:29 +0000
ROA not before:           Thu 29 Jun 2023 14:55:29 +0000
ROA not after:            Thu 27 Jun 2024 15:00:29 +0000
asID:                     265022
IP address blocks:        170.84.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6d:a6:23:45:5d:17:15:c1:04:e0:71:0b:d7:3c:2d:fc:04:6b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:29 2023 GMT
            Not After : Jun 27 15:00:29 2024 GMT
        Subject: CN=B98218722B563EF1499ED68E096D540C8552BC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:72:88:6a:08:9c:c4:dc:d5:fc:1b:b7:0f:
                    ec:48:c9:89:a6:58:2d:3b:5c:65:ec:f0:3d:b9:f9:
                    17:e3:99:99:a6:85:59:4d:1a:12:80:c6:39:80:e6:
                    a1:45:57:01:a3:56:3d:5e:df:e8:60:c7:84:3b:2c:
                    18:2c:d6:ff:63:8f:85:64:06:09:ff:58:ac:2e:a9:
                    cf:6e:33:72:c4:5c:ec:05:9c:7e:7a:59:1e:bb:29:
                    36:b5:41:c7:3b:49:4f:33:fb:1d:be:be:3e:38:5b:
                    d0:f9:f3:25:21:47:69:5d:5b:47:03:7f:1f:96:b4:
                    ee:ae:3e:cd:a7:cf:4d:f8:f7:a3:e0:27:a2:b1:c7:
                    88:2c:c4:7c:bd:5b:78:96:bc:be:f9:62:c0:8e:04:
                    9e:c1:51:5b:8e:5f:64:8e:c2:9c:e1:86:d9:fd:64:
                    6a:a1:a0:84:8e:87:df:63:51:a2:19:7d:7d:17:3d:
                    b5:17:f4:e0:7c:25:c9:20:f8:a0:2f:42:48:95:4f:
                    10:b2:ef:b4:74:85:47:56:e4:84:0f:4d:95:77:41:
                    33:de:54:de:50:77:50:7d:70:9d:dd:5e:23:ab:d9:
                    6d:56:c7:b8:d9:49:bf:f3:84:63:c5:ed:b6:f8:12:
                    5c:fc:cf:f0:72:7c:91:8f:15:3d:aa:72:e5:07:b3:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:18:72:2B:56:3E:F1:49:9E:D6:8E:09:6D:54:0C:85:52:BC:42
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34392e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:22:c1:4f:70:93:a8:7a:5c:e6:ee:6c:2e:a8:e2:17:6a:
         f1:54:ef:8f:f5:30:e1:04:64:29:3b:17:f3:23:94:11:91:3e:
         a7:7e:c1:9c:45:b6:c4:8f:d2:54:8b:33:80:44:9c:2a:22:c7:
         5b:05:f3:ff:5a:2a:e8:ae:bb:70:2d:75:bc:64:db:e5:99:e7:
         15:91:85:6e:ff:74:99:be:fb:4f:c7:7e:f7:cc:01:91:01:89:
         bf:18:63:49:81:3a:77:f3:b7:60:75:85:bf:71:64:c6:df:ae:
         6e:f6:14:91:94:50:82:6c:44:7e:84:e7:06:57:34:4b:54:3f:
         6b:b5:bd:1b:2e:72:68:1c:20:1c:54:8e:e6:ec:29:d2:f5:cc:
         85:66:05:7b:6b:ed:c2:d1:7c:a8:df:b7:ce:65:d7:4f:ac:0d:
         2c:ac:09:46:34:f2:16:50:97:db:98:61:40:30:4e:9a:c9:18:
         b7:ec:3b:62:87:42:21:8c:71:a8:40:70:b8:6b:84:0f:29:e7:
         04:ad:42:0e:47:5a:c4:9e:a9:05:98:3c:e6:70:3c:89:cb:49:
         e6:2e:5c:8c:15:13:8e:d0:91:a9:bc:61:af:46:f4:8e:a8:7c:
         b9:83:5c:49:dd:0f:3b:ec:58:7e:1f:0a:93:d7:d3:78:ed:f2:
         b0:6a:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org