Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3235203d3e20323634303834.roa
File:                     3137302e38312e3138342e302f32322d3235203d3e20323634303834.roa (raw, json)
Hash identifier:          aoWWz78utG9D4Qr8uc05/DUywIyfi1kAiYKyH7VuHrk=
Subject key identifier:   1B:F8:36:42:0B:07:7B:6E:77:6E:A1:37:47:F8:0F:70:F5:91:8B:70
Certificate issuer:       /CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Certificate serial:       5EC73C5F591AA31E6BEA6FC53769AD558911EF69
Authority key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3235203d3e20323634303834.roa
Signing time:             Wed 16 Mar 2022 18:33:43 +0000
ROA not before:           Wed 16 Mar 2022 18:28:43 +0000
ROA not after:            Wed 15 Mar 2023 18:33:43 +0000
asID:                     264084
IP address blocks:        170.81.184.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c7:3c:5f:59:1a:a3:1e:6b:ea:6f:c5:37:69:ad:55:89:11:ef:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Validity
            Not Before: Mar 16 18:28:43 2022 GMT
            Not After : Mar 15 18:33:43 2023 GMT
        Subject: CN=1BF836420B077B6E776EA13747F80F70F5918B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:86:35:97:ec:b1:34:d2:e7:6f:54:39:d0:ad:
                    3d:34:cc:6a:d0:54:c1:51:a7:b4:e8:76:42:7c:61:
                    03:76:4e:c7:8e:40:3d:cc:1c:f4:ab:1f:3a:63:db:
                    0a:78:b1:05:99:58:45:4e:39:23:74:59:75:9f:1d:
                    54:6f:bb:9e:46:b9:9f:af:d1:e3:f5:cf:9b:ca:4f:
                    fd:91:c3:c8:c9:4d:78:be:57:23:0b:7a:19:2f:cb:
                    78:d3:38:6b:d9:ea:ee:93:55:3f:00:76:b5:c8:9f:
                    bf:9c:2c:ea:2a:7b:50:79:3a:e7:ef:9a:75:39:61:
                    b4:3e:67:0e:70:ef:32:d4:37:de:9b:8a:3d:70:6c:
                    d6:f8:be:42:ea:cf:91:11:ff:17:9f:77:18:2e:93:
                    fe:db:ca:a8:32:e3:1d:e4:52:74:80:0f:c1:83:cb:
                    68:58:1f:cd:34:56:98:e4:d0:25:22:54:e8:ae:83:
                    df:86:87:5d:83:08:9a:3c:f3:6a:61:5e:09:a5:69:
                    75:b2:fc:9e:5e:38:a7:a3:ce:46:08:78:49:b5:87:
                    91:6f:d8:25:e0:2b:08:b4:31:f7:9a:60:05:45:7a:
                    a9:17:30:e3:68:31:b5:3a:64:3f:9a:6c:de:d3:d3:
                    24:c5:03:e2:87:69:4c:82:c2:dd:60:08:d0:ca:80:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:36:42:0B:07:7B:6E:77:6E:A1:37:47:F8:0F:70:F5:91:8B:70
            X509v3 Authority Key Identifier:
                keyid:68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32322d3235203d3e20323634303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:66:9e:c0:d9:ce:11:5f:b9:29:e5:5c:4f:87:62:90:90:
         10:70:6a:77:58:bb:ef:f2:41:6d:f3:c4:f0:7f:d6:82:46:d9:
         f3:30:b3:60:01:4c:06:c9:85:59:de:e2:ba:83:f4:e5:d6:72:
         b9:c7:84:29:45:b5:7f:79:a9:09:23:95:01:c9:fc:44:0a:93:
         39:0e:94:99:4e:1b:6e:2a:ef:78:05:06:80:1c:b3:58:61:91:
         53:3c:50:eb:cf:fc:4a:f8:00:0a:d2:55:3a:f3:cf:58:e5:6e:
         8d:17:9f:43:82:46:2b:ba:50:cb:92:18:6e:4b:9d:c8:b3:76:
         3f:61:8e:92:47:a6:f0:5b:69:53:b3:12:86:7b:d6:1d:d4:7f:
         96:38:ee:4c:3e:9c:ad:35:26:47:47:2d:8b:76:45:1f:46:39:
         a5:90:4c:fe:62:8a:b6:17:70:6e:27:80:ed:6b:3a:37:31:db:
         99:b7:7c:ad:58:84:ae:c1:7b:e2:34:93:c5:5a:21:d6:3f:13:
         2e:82:f8:44:cf:c3:43:a6:57:42:17:0c:4d:6e:83:b3:91:8f:
         38:ba:84:72:b0:4e:03:9f:27:c4:25:42:4b:d1:01:95:7d:2f:
         45:27:11:84:83:28:11:ce:43:2e:af:10:26:02:d7:d1:c9:0c:
         de:65:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org