Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34302e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e34302e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          ODLhVpXKR0g0g0wGINh3PDnR0BTZkHgz0ric3H59O74=
Subject key identifier:   E7:46:E1:CA:89:B5:70:98:72:ED:9D:BA:E7:15:4F:00:72:5A:53:4A
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       7A785628EA06AF0E4C414A82FE8607A2E89FA9BF
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34302e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:04 +0000
ROA not before:           Wed 22 Mar 2023 21:55:04 +0000
ROA not after:            Wed 20 Mar 2024 22:00:04 +0000
asID:                     262760
IP address blocks:        179.106.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:56:28:ea:06:af:0e:4c:41:4a:82:fe:86:07:a2:e8:9f:a9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:04 2023 GMT
            Not After : Mar 20 22:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:09:82:09:f4:90:c0:73:68:ca:9e:01:b6:
                    15:9b:1f:62:4c:21:24:fb:c7:3c:85:74:a9:7b:6c:
                    ed:43:32:13:ae:f6:76:86:9d:e9:b9:fd:77:07:18:
                    81:74:bb:db:1c:15:76:bb:32:d2:24:e2:97:3c:44:
                    02:ea:40:3e:db:c3:de:1a:44:a2:3e:aa:6c:47:e5:
                    1a:ec:99:52:9e:7f:5d:e0:af:a2:4c:d8:7c:fe:7a:
                    32:52:98:e6:ef:23:69:58:3f:24:6d:60:4c:e6:aa:
                    eb:02:27:03:80:43:cb:6a:1b:ee:44:41:d3:e2:95:
                    59:0c:4e:92:4a:ed:b6:2e:80:5a:37:74:1f:52:86:
                    e4:db:e8:12:91:b6:45:31:dd:3b:e0:ea:68:d6:67:
                    02:51:fe:a6:7f:cd:57:c8:71:15:a0:71:b8:4f:29:
                    f2:fe:83:c6:99:a9:b3:3b:ad:da:3a:c2:26:97:62:
                    08:b5:0e:7a:77:1c:3f:12:43:26:d6:5d:72:42:2c:
                    0f:9c:3c:f2:f8:8e:ff:fa:ed:dd:e1:49:b5:73:ec:
                    e2:ab:9e:73:3e:0b:7e:96:12:ac:66:fe:f8:d2:ca:
                    aa:71:bf:75:18:27:a3:cc:78:f2:3e:d3:0e:d6:69:
                    35:3c:d2:3f:1a:1b:6c:37:4a:58:02:98:d1:a5:aa:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:E1:CA:89:B5:70:98:72:ED:9D:BA:E7:15:4F:00:72:5A:53:4A
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34302e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:b4:5f:14:92:f4:a8:0f:24:d6:62:99:35:8f:32:02:22:
         ad:54:81:da:3b:c3:26:f0:22:c2:36:d2:72:91:8d:ab:1f:82:
         10:98:82:6a:4b:9f:83:f2:69:38:87:d4:64:08:23:72:a3:01:
         bd:1a:c9:06:28:3a:7a:08:bb:30:25:7c:ce:11:74:af:aa:d8:
         6d:95:0d:9a:4b:03:2c:1d:ab:56:a5:45:b2:66:61:e2:a6:e8:
         1d:66:26:34:9d:72:f9:68:db:46:83:e0:f5:7f:01:04:c3:03:
         da:1f:fa:9a:f1:84:56:d4:68:a5:b3:d8:d0:34:2f:52:d5:d1:
         d7:6d:6e:98:d4:c2:18:6c:66:4d:8e:84:7a:a2:46:30:58:eb:
         48:bb:31:8c:78:1a:ee:8a:3a:e3:29:cd:15:14:48:32:3c:09:
         b3:b8:7e:68:de:f4:05:6b:1d:3b:e7:71:b3:ba:a6:31:c4:af:
         1f:67:2c:9b:54:b9:eb:7d:3b:8a:9b:86:87:ea:a0:a7:e5:70:
         18:39:48:34:26:6a:df:c9:63:ef:2f:c1:81:cf:c8:1f:0f:cf:
         77:de:3a:ba:ca:7f:22:6f:25:e3:17:d9:d6:be:f2:b2:fe:e4:
         0e:05:d8:11:f8:bb:8d:77:1d:54:d3:15:b0:a7:1a:02:bf:39:
         ef:c8:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org