Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138372e302f32342d3234203d3e20323634303834.roa
File:                     3137302e38312e3138372e302f32342d3234203d3e20323634303834.roa (raw, json)
Hash identifier:          lNpfF/ATaRnpoAVN+UmhdkA6TOZ6RuY8nWM4WS76VNo=
Subject key identifier:   7E:12:26:75:78:9D:46:0A:F2:59:B0:E0:52:07:5D:61:1B:D4:0B:C7
Certificate issuer:       /CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Certificate serial:       494593F1B25333F8C4922A033551925252095B2B
Authority key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138372e302f32342d3234203d3e20323634303834.roa
Signing time:             Tue 22 Jun 2021 12:22:53 +0000
ROA not before:           Tue 22 Jun 2021 12:17:53 +0000
ROA not after:            Tue 21 Jun 2022 12:22:53 +0000
asID:                     264084
IP address blocks:        170.81.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:45:93:f1:b2:53:33:f8:c4:92:2a:03:35:51:92:52:52:09:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Validity
            Not Before: Jun 22 12:17:53 2021 GMT
            Not After : Jun 21 12:22:53 2022 GMT
        Subject: CN=3082010A0282010100B962A79052608FBB0F9105D6E89BE017808F0DE010F7ED880A589E53D4A185C6FE7E72EFAA00CA03FB69F2D68D2CC258A0919450FF4060C6CDFD385C7E6AFAEA42BD3EA03B19AB439416E70F082FA525D59C770623AD32DD30731427B6913689D65F6FF24B5EFA51D4C972B9C55625C1E6D5B42C4248340FB5B8E76186D0B58493E8C2164B4E13ED83E6F0BB05FF5E10BB35C8ECECC817CAB1FA6327BCB478C4A60D6BF95317FC9EC95452CC45F5E9E02F8CD8826E44410BA5F2CB713B2D18A93965EF2E7F5D48365004AC5D512A33232DE298A016F1EDB615A249056580E143FC7B27BEC83E673E1E739DCFD6D8491D5EBFF406824EEC443E2EF2A64D71778D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:a7:90:52:60:8f:bb:0f:91:05:d6:e8:9b:
                    e0:17:80:8f:0d:e0:10:f7:ed:88:0a:58:9e:53:d4:
                    a1:85:c6:fe:7e:72:ef:aa:00:ca:03:fb:69:f2:d6:
                    8d:2c:c2:58:a0:91:94:50:ff:40:60:c6:cd:fd:38:
                    5c:7e:6a:fa:ea:42:bd:3e:a0:3b:19:ab:43:94:16:
                    e7:0f:08:2f:a5:25:d5:9c:77:06:23:ad:32:dd:30:
                    73:14:27:b6:91:36:89:d6:5f:6f:f2:4b:5e:fa:51:
                    d4:c9:72:b9:c5:56:25:c1:e6:d5:b4:2c:42:48:34:
                    0f:b5:b8:e7:61:86:d0:b5:84:93:e8:c2:16:4b:4e:
                    13:ed:83:e6:f0:bb:05:ff:5e:10:bb:35:c8:ec:ec:
                    c8:17:ca:b1:fa:63:27:bc:b4:78:c4:a6:0d:6b:f9:
                    53:17:fc:9e:c9:54:52:cc:45:f5:e9:e0:2f:8c:d8:
                    82:6e:44:41:0b:a5:f2:cb:71:3b:2d:18:a9:39:65:
                    ef:2e:7f:5d:48:36:50:04:ac:5d:51:2a:33:23:2d:
                    e2:98:a0:16:f1:ed:b6:15:a2:49:05:65:80:e1:43:
                    fc:7b:27:be:c8:3e:67:3e:1e:73:9d:cf:d6:d8:49:
                    1d:5e:bf:f4:06:82:4e:ec:44:3e:2e:f2:a6:4d:71:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:12:26:75:78:9D:46:0A:F2:59:B0:E0:52:07:5D:61:1B:D4:0B:C7
            X509v3 Authority Key Identifier:
                keyid:68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138372e302f32342d3234203d3e20323634303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:12:02:29:21:65:96:e0:d5:1d:50:b7:85:a2:a3:5b:5e:f7:
         df:d2:a4:d9:b9:62:df:43:42:9b:a9:71:75:f8:e6:6c:e5:a9:
         99:42:ea:38:1e:88:94:ea:8d:7a:e5:df:c2:3d:21:e8:30:ee:
         c4:f0:c8:25:57:02:06:6b:88:db:d9:98:83:e5:83:95:65:f4:
         52:e5:dd:9a:e2:ae:1b:27:f7:6d:07:3f:58:30:27:95:01:ed:
         ad:36:cd:46:5d:86:5b:f3:69:ff:e6:75:3f:bd:0a:fe:dc:19:
         91:4e:ea:a7:31:2a:6e:19:b0:27:fd:b2:cc:86:86:b1:bc:24:
         54:77:5a:b1:64:26:62:22:15:b0:14:27:88:39:47:f4:78:45:
         1c:ba:e6:56:f8:08:43:37:41:22:5a:43:e7:86:e3:e6:e2:a7:
         2c:04:f7:d8:56:7c:0d:4e:54:3d:8c:c3:02:ee:cd:74:30:d6:
         37:6c:0b:63:f1:6a:c0:9e:42:a5:fb:2f:46:d5:86:2f:df:75:
         c0:d0:79:ea:c5:eb:45:c2:30:32:64:e8:48:aa:89:3e:e1:d6:
         df:9b:8a:36:4e:53:fb:36:0d:f2:ef:41:9e:81:3e:10:7e:56:
         af:5f:f1:99:a9:96:43:ab:f8:de:c1:4f:b0:47:57:12:35:55:
         d0:82:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org