Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32342d3234203d3e20323633393234.roa
File:                     3136382e3233322e3137342e302f32342d3234203d3e20323633393234.roa (raw, json)
Hash identifier:          j8csUTh8Ncs6NCYtuOIbYNziWy7dMu3W+1iCYx20n8w=
Subject key identifier:   3A:3B:49:73:EA:0C:59:4A:2A:AC:33:BB:A7:65:54:78:9F:4C:A2:85
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       3B62746249552F2D5BDBDF86506F379E03117F19
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32342d3234203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:19 +0000
ROA not before:           Mon 07 Feb 2022 12:04:19 +0000
ROA not after:            Mon 06 Feb 2023 12:09:19 +0000
asID:                     263924
IP address blocks:        168.232.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:62:74:62:49:55:2f:2d:5b:db:df:86:50:6f:37:9e:03:11:7f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:19 2022 GMT
            Not After : Feb  6 12:09:19 2023 GMT
        Subject: CN=3A3B4973EA0C594A2AAC33BBA76554789F4CA285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:28:9b:b6:02:7d:11:16:5f:cc:de:d0:21:
                    2b:2e:ce:8d:5f:f5:ab:62:74:71:61:db:3d:8c:f3:
                    d2:b9:ce:7b:5b:7e:d2:5d:c5:91:24:3d:c9:4a:29:
                    85:78:e1:00:0c:89:8f:91:50:fa:5f:39:0d:8a:7d:
                    ee:8d:e2:32:b7:87:01:ca:eb:11:18:9d:17:b0:79:
                    18:51:fb:67:62:60:c3:66:1b:ee:a7:84:41:d5:41:
                    a2:8e:01:aa:94:06:22:88:6b:7b:d4:e2:dc:c3:32:
                    dd:92:7d:55:0c:69:96:f4:50:ec:4f:3c:cf:aa:bb:
                    e6:12:91:bc:b2:6f:fe:2a:3f:19:b6:8f:01:bd:57:
                    45:68:68:a0:9d:f1:a8:82:71:78:af:bf:87:4d:da:
                    81:6e:4f:b9:35:0d:71:2c:d4:a4:4c:70:41:bc:b1:
                    65:26:92:54:4e:c4:04:7e:4e:cd:05:eb:06:55:77:
                    c5:84:41:e5:8e:17:48:10:30:65:62:54:8a:29:c2:
                    b9:aa:09:e2:4c:93:2c:d2:20:b2:90:49:7d:2b:86:
                    73:30:60:73:63:1b:27:e9:15:ae:73:d1:cd:ea:de:
                    64:8c:bb:03:63:9d:56:44:18:c0:c7:84:f2:ec:40:
                    a5:8b:67:1d:63:70:b9:71:ac:bd:51:47:be:bf:49:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3B:49:73:EA:0C:59:4A:2A:AC:33:BB:A7:65:54:78:9F:4C:A2:85
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32342d3234203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:4e:49:58:36:83:fa:56:eb:15:cf:4f:2b:dd:4a:4b:a4:
         14:81:f5:b8:8e:f4:40:27:c9:8f:58:15:97:f8:ff:f6:f9:27:
         e2:18:78:fe:9d:b4:b8:a2:8d:25:c7:71:a5:06:0e:e1:1c:b7:
         17:1e:7c:c8:e5:c1:60:e6:67:a7:72:b2:c3:ed:5d:9c:31:b7:
         3c:38:57:30:93:67:13:91:d4:81:81:a1:0d:2c:a7:c7:66:30:
         8d:b3:d5:11:56:f9:6a:2f:e5:7f:d0:69:b2:e9:8d:12:af:c6:
         e7:f3:57:eb:2d:27:84:81:06:3c:70:8e:9d:98:be:54:37:37:
         7d:2e:de:55:9f:9b:18:8b:98:28:f5:71:f4:21:9f:e9:76:62:
         a0:5c:08:4a:c9:d0:94:2a:f4:93:0c:45:98:f7:20:9f:4e:c8:
         44:01:43:26:47:27:39:ef:3a:2c:61:e7:16:55:1e:39:64:0b:
         5e:c0:9a:99:32:e1:18:dc:45:86:02:9b:6f:3d:e2:38:dd:7b:
         1a:26:be:d4:95:27:a9:3c:f6:52:d1:b7:be:6b:0f:7b:f8:50:
         fe:92:79:1d:14:1e:75:73:58:58:92:6f:3b:78:a4:f2:65:9d:
         11:3a:a8:00:f4:32:99:6c:36:ac:ef:0b:6f:79:2b:09:90:85:
         46:09:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org