Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33392e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33392e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          tw8SylcEh2+Z3Zp0Gbz1PSqdAW79Uin4bAxscLcpVao=
Subject key identifier:   D1:9B:22:D8:B3:31:FD:F2:B6:D4:BC:F6:49:89:32:AF:5D:ED:58:65
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       6718B929F1D01A87AAD0FB5CA17AA38772E913DD
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33392e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:01 +0000
ROA not before:           Wed 22 Mar 2023 21:55:01 +0000
ROA not after:            Wed 20 Mar 2024 22:00:01 +0000
asID:                     262760
IP address blocks:        179.106.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:18:b9:29:f1:d0:1a:87:aa:d0:fb:5c:a1:7a:a3:87:72:e9:13:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:01 2023 GMT
            Not After : Mar 20 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:e3:38:c0:8e:82:55:cf:9a:51:82:cb:28:
                    39:86:f9:ee:45:7e:3a:03:76:eb:fb:64:90:53:cf:
                    8a:dd:80:c4:55:b3:32:d4:86:f2:ce:32:69:73:e8:
                    ad:02:c6:28:24:d2:cc:16:56:7e:3a:00:24:d0:fc:
                    b4:4f:3b:89:29:a8:c3:1e:5e:90:fd:8d:bf:3d:61:
                    01:80:9e:69:89:98:ef:d7:1a:f6:27:eb:fd:4c:46:
                    6a:78:7f:dd:28:97:c1:da:23:81:3b:e2:cc:62:d3:
                    48:49:96:6a:36:d9:47:8c:41:4d:45:94:f4:6b:f2:
                    99:59:8b:74:bc:54:9f:e8:59:e6:24:ff:d1:a6:a7:
                    d3:00:52:da:ae:64:10:aa:a2:c3:ed:91:3c:30:51:
                    36:88:43:60:44:64:da:8c:ee:d0:eb:7f:2d:03:f2:
                    6b:14:c4:26:1b:ad:64:18:9e:c9:c2:fe:42:bb:9e:
                    25:2d:36:38:fa:f5:75:18:5e:75:fa:e0:bd:76:a6:
                    3c:9a:40:1b:cd:c5:29:fa:86:8f:88:89:05:2f:9c:
                    f8:2b:25:18:a7:8b:38:49:cd:f2:3c:3a:ab:45:5e:
                    54:9e:77:52:8d:4b:bd:58:a7:58:0f:77:ac:4e:94:
                    fb:71:22:e0:84:99:92:ff:2f:3e:e1:61:3f:34:12:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9B:22:D8:B3:31:FD:F2:B6:D4:BC:F6:49:89:32:AF:5D:ED:58:65
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33392e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:69:a9:9e:47:1e:17:15:0b:89:01:bd:34:13:63:fc:85:f1:
         99:dd:4d:ae:5d:df:69:84:2d:8f:ae:c3:c4:c6:19:fe:53:90:
         a2:63:c6:da:ac:dd:66:58:fc:ac:45:ef:2f:53:1e:b7:81:16:
         43:0e:49:e4:7a:77:73:4a:35:c6:d1:73:8d:a4:70:9e:c8:65:
         90:43:ba:1f:aa:87:5e:03:50:e1:f4:7c:8d:bc:e1:d6:76:b0:
         1c:5f:92:16:86:3d:df:54:f6:4c:bc:b4:73:d6:40:94:dd:4e:
         f7:84:12:cd:3d:cf:8c:09:ed:ab:aa:b6:cd:f1:9c:9f:28:0e:
         dc:55:d4:e1:7e:b8:dd:2b:ad:41:a6:4a:38:3d:65:c5:e0:05:
         04:59:4c:d8:e3:d4:c4:59:6e:a6:13:98:e1:2a:21:24:e1:39:
         9b:b3:e3:4d:05:ff:1d:04:52:fa:fb:7e:59:3d:73:41:20:3a:
         25:46:ca:c8:57:92:4a:11:1d:e3:87:a0:31:6e:74:5d:6d:6f:
         4c:b1:30:aa:d7:6e:30:8a:6f:c2:b0:50:6c:ff:7d:b9:ad:ab:
         af:18:61:85:82:36:46:87:17:36:ad:d0:fa:3b:1e:84:f6:cf:
         f5:00:35:05:f1:71:3d:06:eb:d1:55:38:e5:eb:42:34:18:87:
         b7:38:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org