Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e352e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          9oPkw9zh+CY8jR+qnKMSy3ZTSeZYgzN3ipFCcyhT5ek=
Subject key identifier:   1C:AC:9F:CA:26:A8:11:CF:7C:F0:5F:CF:F4:6D:6F:A7:52:68:CE:FE
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       060174736C6883F9FA044AA4AACBCF0B79979A61
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        177.67.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:01:74:73:6c:68:83:f9:fa:04:4a:a4:aa:cb:cf:0b:79:97:9a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=1CAC9FCA26A811CF7CF05FCFF46D6FA75268CEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:88:43:c4:57:e5:2e:70:3c:7a:2b:9b:5c:
                    42:11:b7:8c:2f:18:f5:bd:ad:e3:98:b3:2d:b2:41:
                    a2:37:bc:43:c6:a3:81:3c:a6:f3:e4:23:6d:fa:74:
                    15:a4:6f:ed:0c:13:6a:15:99:e8:76:0d:8c:82:dc:
                    f1:4f:54:52:bb:c4:5f:c3:e8:3c:0a:ec:ab:e8:35:
                    d0:22:f9:4f:c7:23:b1:87:44:66:86:d9:ba:a1:4a:
                    1f:d1:f8:c0:2d:14:ef:0c:c5:66:6f:83:69:c7:58:
                    1c:7c:21:d8:88:7e:ba:b3:de:54:35:bc:f8:03:d5:
                    25:42:b4:24:42:d7:a5:bb:c6:71:18:12:84:c2:1c:
                    a4:b4:a7:00:79:9d:1e:74:79:ee:99:c6:00:4a:d2:
                    a6:26:63:97:08:75:16:30:14:15:c6:0f:6d:f5:75:
                    d8:fa:b6:b6:c0:44:fc:b0:6f:e9:d4:12:7e:dc:de:
                    de:19:73:5b:2e:ba:64:87:4d:f2:97:86:4c:3e:f5:
                    6f:a2:56:aa:69:2b:e0:86:51:36:4c:1a:0e:85:eb:
                    de:24:43:fb:aa:ed:e4:69:c2:fd:61:bc:cc:cb:b1:
                    33:f7:1c:82:51:f4:20:81:da:cd:55:61:15:09:95:
                    b0:46:7c:14:77:78:52:49:88:89:b7:5d:21:6f:d2:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:9F:CA:26:A8:11:CF:7C:F0:5F:CF:F4:6D:6F:A7:52:68:CE:FE
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:37:76:99:9b:78:66:bc:26:77:f1:13:43:74:7e:55:90:
         2a:7f:f0:1e:94:4c:79:66:4d:79:49:49:d4:98:5e:1f:d2:84:
         ea:c9:08:7d:94:f6:a9:e5:41:ad:91:f5:d3:54:51:21:db:43:
         f2:60:6c:32:5d:62:0e:37:03:66:1d:a5:2a:05:26:19:66:26:
         80:e9:2e:0c:82:5b:f7:cc:7d:68:93:96:02:a7:ae:79:dc:c6:
         7e:6f:95:20:a1:47:07:e4:94:11:91:e4:64:3b:b2:0c:bc:94:
         6b:b3:63:bb:a3:36:15:1e:bd:ef:bd:a8:1f:8e:e4:7f:3f:5c:
         a8:26:ca:61:ea:72:a0:03:a1:96:ca:73:16:95:ba:9b:99:a7:
         4f:a4:6e:85:4e:09:f6:05:e9:5c:6f:d6:b2:7a:5f:53:87:3b:
         48:d3:91:84:e3:5f:b9:2b:9f:85:68:fa:e0:24:53:82:25:e2:
         1e:86:98:bc:ac:61:c2:63:25:d4:3d:95:5d:ab:16:a6:be:49:
         19:36:5f:c8:82:8c:f5:9d:cd:dc:40:95:a9:12:93:1b:d9:ed:
         5f:ac:2a:a0:56:e0:d3:93:f6:f1:0b:6a:e2:40:7f:a3:35:11:
         ce:a2:0a:3e:e4:4a:66:19:6f:0a:31:22:ca:41:c8:cc:4f:9a:
         9b:00:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org