Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33342e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33342e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          9hJFKw/pnc5rwQvmQGW3ummXqXIXwGHWAvJHNM/rWc4=
Subject key identifier:   53:71:F2:ED:62:A7:BA:D6:40:87:38:0B:2B:C6:8F:22:0C:1A:52:9F
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       578B0F4D887C9331DB58AC4A9573482D6B0B8CEE
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33342e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:03 +0000
ROA not before:           Wed 22 Mar 2023 21:55:03 +0000
ROA not after:            Wed 20 Mar 2024 22:00:03 +0000
asID:                     262760
IP address blocks:        179.106.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8b:0f:4d:88:7c:93:31:db:58:ac:4a:95:73:48:2d:6b:0b:8c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:03 2023 GMT
            Not After : Mar 20 22:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:54:0e:66:64:c5:ee:19:46:09:48:53:9a:
                    52:fe:96:4c:e2:d9:e9:0c:d8:db:5d:58:cf:b0:64:
                    7e:d8:8d:46:4a:72:48:c4:99:eb:8a:23:e1:35:52:
                    0f:3d:46:0b:35:c3:89:a8:46:21:a6:f8:f1:e7:27:
                    f8:c1:03:38:06:a9:fc:b8:d8:a7:fc:48:fa:78:16:
                    5d:e7:65:ab:ce:fd:51:bc:4a:1e:93:bd:6b:ab:62:
                    d7:8a:f5:22:5d:04:72:32:2f:b8:c6:ee:93:08:27:
                    2a:ed:71:d5:99:99:4d:63:a5:06:72:79:2e:5b:a3:
                    a4:c8:de:4e:56:ed:10:e2:69:65:61:ba:38:6f:03:
                    23:47:67:47:73:e2:33:4d:bc:f1:ec:25:84:2c:a4:
                    b0:20:a5:be:a0:a2:67:84:1d:5a:99:3c:78:05:ac:
                    21:7d:d3:c3:df:7f:2d:22:26:ac:66:35:c7:ef:a2:
                    91:32:89:52:f0:25:7f:39:6a:ec:42:8a:7c:22:4d:
                    b8:05:02:2d:ce:a5:b2:f7:44:4a:5a:cc:4b:c8:fa:
                    38:e7:4b:ed:07:16:37:42:07:ef:6f:c6:3a:d5:74:
                    ed:25:71:76:d2:79:31:ea:16:b4:bb:61:86:18:08:
                    64:e9:7d:db:8a:74:14:0a:76:2e:f8:78:b8:56:0f:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:F2:ED:62:A7:BA:D6:40:87:38:0B:2B:C6:8F:22:0C:1A:52:9F
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33342e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:de:7b:cf:3d:99:92:dc:26:a7:ca:62:93:23:b6:82:33:ec:
         07:af:78:a5:3c:b9:72:55:3f:86:89:9d:93:28:fd:35:21:f5:
         50:3c:dd:e3:d7:6d:65:80:dc:0a:72:c6:be:9f:d5:4a:93:28:
         80:40:ea:fe:c5:da:a9:79:23:78:2d:8a:8a:f0:10:2e:19:11:
         12:35:1f:a9:fc:fd:de:8a:30:85:ce:c7:67:25:d0:92:80:15:
         95:99:47:81:f7:1d:a9:bf:35:65:c3:1f:62:5c:98:85:bb:b3:
         48:22:ef:81:23:c4:a5:46:81:c6:7d:a3:b5:00:84:5a:bf:dc:
         3d:f4:ce:b9:49:6a:bc:b4:a2:90:80:d4:52:89:60:98:08:81:
         56:f5:62:5a:ab:27:6e:4b:a6:cb:08:53:ae:f6:54:73:15:79:
         2a:d8:a6:01:40:18:63:f7:d9:9c:db:1c:1a:63:ce:fc:da:7a:
         83:c0:d1:55:d8:3a:f3:97:05:78:0c:c3:4f:aa:38:f8:e2:16:
         8d:2d:e8:6c:55:c5:9c:91:4c:70:5d:d6:98:93:40:38:57:7c:
         3c:d9:3a:9c:74:26:d1:03:07:38:80:5a:b0:fa:0d:9e:1e:3f:
         b6:1e:65:e4:ff:0b:78:19:f3:ab:3a:a9:0f:e2:f9:bc:5c:4c:
         fb:fd:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org