Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e35312e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          PnXDmwQXnaoAv94wJbxOW9PFvIbO30Zx555Uo7t+fHY=
Subject key identifier:   91:BD:1A:12:4C:12:3D:E9:0A:6A:F7:80:E9:D5:88:F5:F2:38:79:83
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       6458F5CD0F1E88CFFF76A5B938D26ACEA345C16A
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:30 +0000
ROA not before:           Thu 29 Jun 2023 14:55:30 +0000
ROA not after:            Thu 27 Jun 2024 15:00:30 +0000
asID:                     265022
IP address blocks:        170.84.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:58:f5:cd:0f:1e:88:cf:ff:76:a5:b9:38:d2:6a:ce:a3:45:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:30 2023 GMT
            Not After : Jun 27 15:00:30 2024 GMT
        Subject: CN=91BD1A124C123DE90A6AF780E9D588F5F2387983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:00:44:90:c8:f0:c2:23:0e:38:61:6a:23:
                    69:0f:1c:d9:66:97:10:f2:54:5e:9a:af:c3:5e:f1:
                    bb:ca:48:8e:fb:bb:0f:7a:4b:d0:79:23:ce:1a:b6:
                    0e:69:df:5e:25:b1:06:c0:63:5f:e9:ad:bc:f8:19:
                    47:e8:4a:14:ca:c6:d8:c4:fc:e4:39:48:0d:35:ff:
                    02:9a:8b:5a:0b:cf:17:85:02:c7:b1:62:fa:d5:70:
                    74:fe:8a:6b:35:af:cb:57:5d:7b:2d:80:76:47:63:
                    50:88:e9:64:28:9b:5a:ab:24:9e:b3:10:0f:93:6d:
                    64:5b:16:32:cb:87:5c:56:64:94:7f:03:75:26:95:
                    80:00:8b:7b:b0:13:d7:43:fd:27:c1:9e:0f:de:09:
                    2f:65:3c:5d:de:34:eb:f4:4f:83:fe:7b:19:79:ff:
                    c8:53:34:f9:c1:d3:6f:6a:4a:9f:ca:67:ac:29:0c:
                    c2:30:6d:3e:a8:19:cc:3f:ae:0d:1d:be:05:0e:b0:
                    07:21:31:59:57:29:03:80:1b:23:f0:c3:71:da:07:
                    c1:47:6e:2c:95:6d:33:d3:f4:75:8a:05:8e:20:08:
                    10:de:30:f3:a3:73:c9:82:78:a9:ec:6f:f6:aa:5c:
                    a1:cf:88:88:5b:6e:87:34:f3:ab:7c:71:41:50:aa:
                    22:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:1A:12:4C:12:3D:E9:0A:6A:F7:80:E9:D5:88:F5:F2:38:79:83
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:63:5a:0f:f0:a4:65:cb:36:44:44:33:83:c1:f6:77:23:30:
         78:c6:2c:27:64:8b:ce:3b:e3:73:84:b3:0c:07:6b:95:fa:3f:
         09:c8:b0:23:4f:65:33:a5:1c:f7:53:7b:31:92:7e:19:3f:09:
         ff:cd:23:5d:63:f9:6e:05:16:f7:24:c3:30:22:90:a7:a4:eb:
         82:27:4f:46:42:b2:41:13:35:b2:05:a1:6d:f2:b1:c3:7f:71:
         32:72:08:98:f6:e6:53:75:d1:09:b4:56:e2:d8:2a:9b:99:3b:
         89:e2:3a:18:51:63:67:81:2d:23:13:08:84:63:51:0e:79:f7:
         c4:fe:57:cd:b0:5c:41:b5:a7:b0:77:fd:43:29:25:13:10:df:
         a3:1c:f2:38:62:d4:fd:f1:c3:31:27:31:2d:2b:35:5b:90:b3:
         c6:a0:a7:38:0d:82:e7:19:01:b2:00:25:e8:9f:61:0a:34:5b:
         2b:02:d6:b0:c1:da:9d:bc:a9:5f:f8:43:fc:3a:4f:6c:b7:aa:
         02:fc:e7:a0:ad:b4:91:4a:cc:95:58:f6:d0:b3:6e:8b:50:e2:
         48:89:75:dd:a6:eb:7b:6e:bc:7d:d0:b0:45:7a:59:e1:72:55:
         fa:5d:ac:6b:54:61:fe:89:ca:1b:76:6a:9b:f1:a6:72:5d:1a:
         0e:c9:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org