Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34352e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e34352e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          ewqeJIqGZg3q/ykfOkxhw/Ik4txHgISrktOM6M4TRhs=
Subject key identifier:   4B:1C:07:BD:8E:ED:9D:B6:36:EE:E9:EA:B6:63:09:C6:3A:80:F5:E6
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       72896F3474D19A5833D394E6E8B6A172DA26BE7C
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34352e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:02 +0000
ROA not before:           Wed 22 Mar 2023 21:55:02 +0000
ROA not after:            Wed 20 Mar 2024 22:00:02 +0000
asID:                     262760
IP address blocks:        179.106.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:89:6f:34:74:d1:9a:58:33:d3:94:e6:e8:b6:a1:72:da:26:be:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:02 2023 GMT
            Not After : Mar 20 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:dd:3e:0d:49:52:2d:12:4c:ac:45:1e:75:
                    b9:d6:5e:f4:34:7b:f0:3c:62:27:35:2c:44:11:cf:
                    81:cb:3e:a3:49:ba:c9:5c:1a:80:32:a8:f1:f4:5c:
                    ac:37:ba:5b:22:74:37:2e:7f:cb:7b:55:63:f6:8c:
                    12:8e:b0:f1:eb:31:7a:4f:54:22:6d:54:78:15:5e:
                    b3:8b:5c:23:3d:82:dd:5f:eb:cb:b2:27:46:7e:0c:
                    20:df:e9:68:6f:d3:aa:4c:76:45:b1:fe:a9:b0:5d:
                    aa:41:50:1c:bc:19:05:ec:6a:c9:d9:ca:5a:49:ee:
                    b6:4c:71:60:83:9c:a9:a5:cb:ee:24:d6:04:71:6d:
                    d7:7f:58:d6:58:51:5f:80:83:57:fa:b9:68:73:68:
                    29:ae:7c:0a:29:52:86:4a:7e:5a:ee:f8:46:1d:61:
                    cb:06:b1:2c:00:c9:ff:0e:55:03:fb:27:a7:30:eb:
                    7f:c3:8a:dc:5b:ee:8c:7e:4f:42:50:89:97:1e:7f:
                    cf:4b:2f:67:a2:7e:92:94:d3:a0:f0:71:32:8b:22:
                    27:05:ca:5b:50:42:a7:07:9f:06:0f:33:85:40:84:
                    5d:74:d2:59:5b:d9:d9:58:a3:a4:d6:97:1c:3a:63:
                    ff:5b:f6:3f:94:97:2b:a4:63:e2:6b:7c:ad:6a:1d:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:07:BD:8E:ED:9D:B6:36:EE:E9:EA:B6:63:09:C6:3A:80:F5:E6
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34352e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:e0:e8:9c:12:dd:e1:ac:9b:f0:45:e2:f4:05:ba:6c:9f:
         c4:39:20:cd:6d:13:c3:55:91:43:08:3b:d5:c7:2a:93:ed:88:
         7b:03:1f:61:5a:9f:05:e7:ae:a3:02:fc:a0:16:2b:10:29:f1:
         d7:4b:dd:c4:29:07:c8:71:a4:18:e7:db:07:46:7c:ad:b1:09:
         8a:de:1c:b1:17:a8:c5:fa:c6:c7:89:7a:ea:15:75:9c:89:f6:
         6d:db:ff:da:5f:76:c5:6d:f5:b4:07:cc:13:74:da:30:4e:e5:
         d5:25:f5:4b:af:07:e5:71:30:48:6f:b7:b8:29:d8:76:76:dd:
         44:bd:3a:e3:02:31:a8:63:8e:f1:bc:6c:01:ca:a1:b3:61:97:
         91:87:d6:1a:f6:4b:62:e3:4b:98:d0:44:06:96:5a:cb:ca:c4:
         34:16:26:4f:5d:dd:00:0d:81:e9:47:2e:b6:0f:93:e4:b8:9c:
         40:dc:3b:a2:72:3c:88:f5:e8:68:4d:df:98:05:d1:ef:10:d4:
         01:cb:37:a0:1f:7d:6a:8c:f9:5f:6c:d2:4c:a8:a3:9a:02:3e:
         06:a6:79:fa:a3:60:62:54:b2:f9:21:9e:60:63:db:7a:b6:bb:
         92:8a:05:d6:8e:79:61:2f:39:91:8f:31:bf:40:73:72:f2:e8:
         12:93:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org