Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3232203d3e20323634303834.roa
File:                     3137302e38312e3138342e302f32322d3232203d3e20323634303834.roa (raw, json)
Hash identifier:          Z50k0VIBLgu9A+tCienvqjl6iM+e3s3qxa0KtvEm6BY=
Subject key identifier:   EE:66:CF:CF:0C:E6:B6:FA:84:1B:D1:5A:AC:00:79:D0:7F:36:86:5E
Certificate issuer:       /CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Certificate serial:       5B99F3BD273659BF8AA4791EF8BEBE9300D9A7A5
Authority key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3232203d3e20323634303834.roa
Signing time:             Tue 22 Jun 2021 12:22:33 +0000
ROA not before:           Tue 22 Jun 2021 12:17:33 +0000
ROA not after:            Tue 21 Jun 2022 12:22:33 +0000
asID:                     264084
IP address blocks:        170.81.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:f3:bd:27:36:59:bf:8a:a4:79:1e:f8:be:be:93:00:d9:a7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Validity
            Not Before: Jun 22 12:17:33 2021 GMT
            Not After : Jun 21 12:22:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:4b:84:4c:e3:98:a2:67:a0:61:d5:ce:1a:
                    94:26:13:11:fe:3d:84:5c:ab:6b:11:37:df:2c:c5:
                    29:cf:ae:c8:98:35:88:a6:32:49:ed:2b:64:55:9e:
                    28:fe:4d:6d:8a:75:f2:d4:66:8a:ba:a5:89:6d:4a:
                    0c:57:f3:89:93:30:4b:97:fd:f6:87:e6:a7:5b:f1:
                    65:38:0b:01:4a:75:42:db:24:97:a9:c7:46:59:37:
                    60:b8:26:07:a4:4e:78:80:2a:58:c7:dd:e5:e9:e6:
                    42:9d:27:b3:12:40:9a:63:6e:ac:24:0f:d8:83:a9:
                    e1:9b:02:68:27:99:39:a5:ff:7d:eb:88:c3:6c:8a:
                    97:f5:2a:cc:29:3f:79:c6:75:c9:7a:a5:a5:19:b3:
                    e0:dc:43:c9:7a:b6:c7:c0:aa:89:61:10:5e:34:c9:
                    46:2a:7b:c0:47:e7:87:1d:79:89:c7:25:00:72:48:
                    9d:9b:7e:f1:17:9a:d2:85:ba:75:51:cb:10:57:20:
                    31:1a:5c:cd:5e:15:65:35:a5:04:58:d2:41:90:0b:
                    a7:3b:b4:ef:b1:c9:7e:b3:45:0c:41:ef:31:25:71:
                    96:a0:88:9d:9e:e2:6b:75:0a:c0:f9:b1:34:44:b3:
                    f2:25:31:0c:98:e6:aa:84:b3:88:88:dc:db:29:8b:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:66:CF:CF:0C:E6:B6:FA:84:1B:D1:5A:AC:00:79:D0:7F:36:86:5E
            X509v3 Authority Key Identifier:
                keyid:68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3232203d3e20323634303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:61:8c:98:11:df:5a:f9:f0:83:7a:59:68:ec:fc:9d:ac:58:
         ad:f8:bc:95:e0:ee:06:bf:3a:af:fe:02:c6:af:79:53:da:e8:
         3f:5f:76:23:a0:be:34:d5:83:61:96:ef:79:74:af:6a:3c:85:
         ea:79:69:de:46:88:d6:5b:06:32:6d:27:5c:4a:fc:13:2a:80:
         07:8c:a1:98:53:da:cd:52:c5:b7:ae:ad:8c:46:f7:43:d8:d5:
         9a:a4:17:45:50:91:ce:84:e4:1d:d1:df:39:8b:4b:08:fb:2c:
         36:3a:08:3f:b0:a9:d7:f1:94:ef:6b:67:a9:0f:9e:96:21:d5:
         08:02:aa:ea:98:5f:3d:cd:6f:c4:49:e7:d2:08:6c:49:78:cf:
         f3:28:d0:a8:72:03:cd:75:a5:7b:15:69:d9:d2:76:5b:b7:6e:
         9d:04:9e:89:2c:d8:0e:05:16:05:e0:12:b0:7e:85:c1:64:d5:
         96:6f:73:18:fd:15:90:de:64:4c:95:f8:44:0c:66:20:ef:c6:
         2b:34:85:2b:a4:ba:bd:8d:31:5a:98:1f:df:f6:8d:7c:6f:2b:
         c3:c6:7b:1b:91:13:f4:86:a1:41:ff:26:e2:6e:1c:4f:ec:95:
         9d:9a:1e:11:1e:32:96:48:88:97:3c:ad:38:42:b2:7c:32:12:
         19:15:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org