Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33332e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33332e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          qXxB/hOa84VAClTqphXJtbRprlpaLfRtPBQPLHs9huM=
Subject key identifier:   BC:4F:64:D3:B3:D5:F5:81:18:F7:FC:48:68:E2:23:4D:0F:20:F0:28
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       0CF3657872923EAD8801B74B95A0B904F464F27A
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33332e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:03 +0000
ROA not before:           Wed 22 Mar 2023 21:55:03 +0000
ROA not after:            Wed 20 Mar 2024 22:00:03 +0000
asID:                     262760
IP address blocks:        179.106.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:65:78:72:92:3e:ad:88:01:b7:4b:95:a0:b9:04:f4:64:f2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:03 2023 GMT
            Not After : Mar 20 22:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:03:37:5b:66:6d:d6:66:a9:3c:97:44:e8:
                    61:1a:fb:80:01:fb:62:4d:dc:80:54:46:ac:1f:b5:
                    ad:e0:a4:f0:02:bb:99:bb:b2:c7:dd:d6:c9:fd:7e:
                    b7:d5:16:9f:ba:7a:55:e1:cb:f7:f1:45:e7:2f:61:
                    99:cd:46:45:f1:af:85:38:9a:a4:a9:df:cb:ff:e4:
                    8b:e6:ff:7c:5a:fd:a7:7d:fb:80:c5:f5:fd:29:b2:
                    67:62:f2:b1:89:45:90:04:18:77:aa:09:a9:da:81:
                    85:d2:8a:db:fa:11:b6:4b:ff:54:90:d4:70:4b:1b:
                    a5:01:75:0b:6a:0c:06:5d:bf:b3:7e:87:c4:61:c8:
                    8a:8f:de:f4:da:f6:72:48:72:61:02:cd:be:db:0f:
                    eb:2f:c4:77:61:9f:41:d6:b6:8d:d9:52:80:60:c9:
                    ec:b7:db:90:67:28:13:7a:be:e7:5c:d7:a6:ac:0c:
                    b9:82:95:a7:c3:33:71:b9:c5:92:51:25:08:4f:bb:
                    db:f9:b1:bf:4b:71:24:1e:af:9f:c7:fb:1a:2e:13:
                    6f:4f:79:32:e3:00:04:06:c0:c6:94:34:bb:86:7e:
                    55:8f:e6:26:c2:c9:45:d0:d6:9b:bf:28:91:75:28:
                    38:a8:10:36:14:11:ac:76:0f:09:7c:10:ad:3c:fd:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4F:64:D3:B3:D5:F5:81:18:F7:FC:48:68:E2:23:4D:0F:20:F0:28
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33332e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:68:9b:f5:58:43:70:0a:b4:f7:d0:80:aa:3e:ab:a5:36:
         54:fb:50:22:dd:14:5b:1d:a1:ac:38:92:5e:c6:f5:17:47:95:
         40:ae:5f:5a:79:8b:ad:05:42:72:64:ff:3a:e5:34:01:58:63:
         10:53:cb:6e:a0:86:cb:13:e4:53:28:74:c2:c6:b4:b3:41:77:
         62:4c:a3:82:7f:5b:30:3c:d3:e8:2a:e4:6b:12:38:ce:5f:5a:
         ff:2f:44:97:54:0c:c1:e9:7b:55:10:13:33:56:ca:3c:d9:11:
         90:52:b3:79:af:4c:a4:5f:7e:0f:1c:96:28:96:64:b5:42:b9:
         e2:88:75:93:19:42:13:78:a5:d0:ac:5c:ca:e2:c2:13:ea:cc:
         58:50:d5:67:7d:a2:3c:20:6f:5f:4e:ef:2b:9d:6c:18:25:65:
         49:c9:05:dd:f0:77:92:49:c6:3e:df:26:4c:b3:68:9d:64:17:
         4d:49:82:42:3a:78:ad:72:1a:82:9c:97:a9:6a:d2:8c:15:c6:
         7f:0f:c7:99:63:e5:f0:78:e2:52:b6:be:71:5a:8f:91:12:af:
         ef:6c:85:3c:36:a3:ab:71:a5:bd:ba:cf:20:6f:2c:a9:09:21:
         fe:9a:79:c5:5f:9e:f6:c1:f1:c5:99:e7:11:e4:44:07:c8:37:
         4c:b9:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org