Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e35302e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          RKzPHO8vsztba60EV388o8YeJJokW93uu3o9eaZ1y6g=
Subject key identifier:   75:A8:D4:A7:C3:4A:70:09:16:24:AE:0E:4E:A2:48:F0:08:C6:F5:23
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       61D6726D2AAEDDBE9E01A2D41A6B93DBDF03CD3E
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:30 +0000
ROA not before:           Thu 29 Jun 2023 14:55:30 +0000
ROA not after:            Thu 27 Jun 2024 15:00:30 +0000
asID:                     265022
IP address blocks:        170.84.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d6:72:6d:2a:ae:dd:be:9e:01:a2:d4:1a:6b:93:db:df:03:cd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:30 2023 GMT
            Not After : Jun 27 15:00:30 2024 GMT
        Subject: CN=75A8D4A7C34A70091624AE0E4EA248F008C6F523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:eb:c1:1e:95:dc:8c:16:6b:b2:6f:77:ee:
                    6e:94:4d:8a:30:ec:b9:11:75:16:30:38:54:5f:e4:
                    75:b0:79:48:5a:bc:98:40:b5:ef:df:c7:76:3e:c2:
                    8a:3d:d9:4e:d6:5f:ab:62:06:89:ff:8f:e6:6d:2b:
                    3a:0a:9f:4f:99:48:e7:0e:f4:9f:58:0c:c5:8a:ba:
                    15:a5:9d:61:4c:34:72:a8:d7:35:90:a0:10:93:b8:
                    ce:a0:47:82:14:5e:0c:92:0a:5a:b5:59:05:7a:a2:
                    0d:aa:aa:a4:30:95:7d:72:5a:cd:db:a5:98:ed:bf:
                    b8:b5:a6:f6:9f:a1:ab:b2:a8:08:0b:ed:df:13:79:
                    ea:b2:8c:7a:5a:d2:a1:91:03:68:ce:7f:52:80:c2:
                    ea:75:61:eb:8a:d1:e7:a2:f0:37:98:1b:f1:2b:38:
                    0a:b6:52:3c:ed:89:77:6f:b6:64:87:45:9e:ae:b0:
                    9e:14:25:3a:e4:c1:2c:0d:8e:f9:1a:44:15:d3:f3:
                    39:31:f3:92:14:97:4c:f3:95:7e:09:73:99:b7:a0:
                    ba:4d:15:a2:b7:f8:aa:45:d3:33:6e:6f:fb:c9:44:
                    0a:40:52:50:e5:a4:8f:3b:d0:fc:91:a6:46:3a:2f:
                    b1:8d:fe:61:bd:f6:fe:8d:c3:fb:20:ee:18:55:55:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:D4:A7:C3:4A:70:09:16:24:AE:0E:4E:A2:48:F0:08:C6:F5:23
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:12:6f:64:85:73:cb:7d:48:be:52:f7:0b:a4:2c:52:5b:
         13:6f:f0:5e:39:ce:2e:74:c0:73:be:58:49:05:fa:00:57:ce:
         d3:89:63:7a:cd:ea:7e:4b:1d:c4:f8:58:bd:83:26:13:30:2b:
         77:10:8a:6e:dc:f2:81:6f:95:4c:d4:13:89:8a:2d:3b:e0:02:
         5a:0b:ea:27:a2:f5:01:b4:e5:db:ba:f6:16:1e:02:7f:96:4b:
         04:d7:e5:6c:a7:bb:67:ee:43:99:e3:d5:a7:3d:3f:4c:05:de:
         bc:70:99:59:54:67:6f:a0:e1:5e:de:b1:91:9d:69:a5:be:73:
         b8:fd:8e:60:6d:d4:9f:7e:32:ae:f6:65:77:26:3a:da:42:ac:
         91:af:3a:17:bd:88:83:00:1b:3e:fa:2d:ac:28:67:0b:cd:26:
         dc:0b:26:9d:b2:e4:fe:ad:42:53:61:78:bf:0c:8d:d0:78:f3:
         e0:6d:fa:70:53:7f:88:10:24:39:fc:d0:b4:32:5f:52:99:57:
         43:26:da:c9:15:0a:1f:38:b3:ac:f2:7c:83:ed:80:15:b3:3d:
         f6:e6:28:30:f8:98:e8:b4:c5:cf:47:d0:00:02:09:53:c6:53:
         4a:19:f6:fc:cb:4a:f1:22:05:93:e2:ae:29:e5:50:68:96:01:
         37:ad:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org