Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa
File:                     3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa (raw, json)
Hash identifier:          53BDBqi+4fg1ufV0ZDGME8cCNQ/PxZEV4csO1OesWGE=
Subject key identifier:   C2:50:6F:BF:1A:AC:70:DF:EB:A3:74:2D:A3:B2:2E:9F:96:70:97:90
Certificate issuer:       /CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
Certificate serial:       789007B92889F8DF2B7009807E36A2F4EC477660
Authority key identifier: F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa
Signing time:             Tue 20 Feb 2024 22:30:47 +0000
ROA not before:           Tue 20 Feb 2024 22:25:47 +0000
ROA not after:            Tue 18 Feb 2025 22:30:47 +0000
asID:                     266302
IP address blocks:        170.79.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:90:07:b9:28:89:f8:df:2b:70:09:80:7e:36:a2:f4:ec:47:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Validity
            Not Before: Feb 20 22:25:47 2024 GMT
            Not After : Feb 18 22:30:47 2025 GMT
        Subject: CN=C2506FBF1AAC70DFEBA3742DA3B22E9F96709790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:1a:d3:82:7b:0b:d2:3c:de:c0:58:4a:bf:
                    3e:28:61:cd:7f:72:d0:0f:5a:de:c6:d6:d6:4e:f0:
                    3a:bc:b4:e4:e5:b9:4d:34:ad:bc:2b:8a:2a:e1:33:
                    80:10:7c:83:2c:ce:7b:ec:cd:f8:72:8c:f4:b2:28:
                    b8:51:7b:de:37:65:f4:75:cf:33:b7:cc:32:38:58:
                    fc:b2:00:73:31:32:a6:f9:2b:54:6c:08:d6:8b:ac:
                    cc:3c:f5:64:85:82:2e:72:ad:7e:d1:f6:a4:26:b2:
                    d6:87:cb:ef:85:4c:ba:05:2f:42:53:e7:50:2f:53:
                    6c:50:44:5e:e7:67:fb:c3:72:d7:45:47:78:ee:2c:
                    61:09:c2:ea:4e:c6:e8:29:7b:e2:52:70:d5:f7:e3:
                    30:de:42:a5:33:a7:6d:c1:3f:f4:9f:59:19:3c:3a:
                    4e:1c:29:d7:40:59:71:4d:1c:82:6e:2b:2e:17:b3:
                    ee:e4:6e:03:1f:38:78:75:36:e8:b5:f4:e5:49:2d:
                    67:70:04:4d:fc:a2:18:f3:71:17:da:01:34:72:40:
                    3e:20:66:b1:e6:3e:00:2b:49:d1:33:10:21:6d:5e:
                    40:bd:f2:0e:b3:ac:45:ea:40:9d:8d:5e:a2:cc:82:
                    da:7c:75:56:71:c8:56:24:4d:7a:c7:31:17:ec:16:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:6F:BF:1A:AC:70:DF:EB:A3:74:2D:A3:B2:2E:9F:96:70:97:90
            X509v3 Authority Key Identifier:
                keyid:F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:5f:e4:58:52:01:49:0e:1a:ad:ac:fb:69:6c:3e:ff:0c:cd:
         d5:0d:00:8a:d9:26:b0:cc:87:6e:dd:70:48:92:8a:f9:f4:76:
         87:ac:ee:3f:cf:4f:1f:42:69:d9:5a:39:8f:10:c1:9a:1a:95:
         aa:a2:d4:59:dc:e5:1a:ea:68:da:80:c6:20:1c:a8:24:8b:62:
         02:bd:f1:b7:ad:09:da:95:d2:e8:d6:3d:b3:b3:ca:dd:17:09:
         19:24:90:40:e2:50:49:5b:ce:6e:ba:87:3e:52:03:f6:82:32:
         35:3d:6a:44:69:ee:a2:eb:0d:82:39:37:55:2b:40:ee:87:e1:
         75:0e:27:ce:ab:26:c7:37:6a:7c:71:09:30:3b:60:ef:c2:f5:
         f9:3c:6f:c8:25:5c:cc:2b:4a:80:c0:77:f0:7d:3e:c7:dd:23:
         39:2d:81:17:2d:a9:0c:d7:00:77:30:60:1a:01:82:31:2f:49:
         77:58:56:63:ae:21:f4:ca:64:ad:79:d4:76:0d:32:fe:b8:58:
         1b:9a:d9:9f:c5:ae:6e:db:b3:84:81:df:59:ce:3d:5d:a8:00:
         1a:ca:eb:99:7a:e1:94:4f:01:81:c2:cf:9d:b7:2d:d0:3a:4a:
         46:91:6e:56:b3:85:51:ac:f7:00:39:38:79:a2:7f:ff:f9:75:
         42:6b:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org