Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          3L7QanoTVsc+S8LZVmEn6P7Zqo8I+Xtz+1PzGTs0PE4=
Subject key identifier:   87:68:B8:92:CC:B7:81:34:E1:0F:BF:6F:EE:4F:CE:18:B3:75:A2:CF
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       6C4E67E837AC5F201B379A2381D759BDFA7E503D
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:19 +0000
ROA not before:           Mon 07 Feb 2022 12:04:19 +0000
ROA not after:            Mon 06 Feb 2023 12:09:19 +0000
asID:                     264491
IP address blocks:        170.247.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:67:e8:37:ac:5f:20:1b:37:9a:23:81:d7:59:bd:fa:7e:50:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:19 2022 GMT
            Not After : Feb  6 12:09:19 2023 GMT
        Subject: CN=8768B892CCB78134E10FBF6FEE4FCE18B375A2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:41:c1:bf:89:4e:56:bf:58:74:ef:f0:5a:
                    d9:bf:53:bb:13:e1:af:1a:62:7a:f2:1b:79:e4:50:
                    e1:00:39:ad:d4:71:90:07:9c:2c:d4:47:23:bc:0e:
                    82:65:43:06:81:c9:4a:b9:b2:ed:f2:18:58:6a:a2:
                    62:25:e0:2c:93:38:45:5a:15:5f:5c:ac:8d:39:2b:
                    85:c5:d3:55:02:b4:ad:ef:7e:68:aa:1f:70:56:88:
                    e5:4f:44:60:46:17:f7:be:e6:4a:fb:ca:23:fc:1b:
                    e7:17:e5:16:71:f9:a0:a8:0e:49:b5:fc:72:02:c8:
                    37:90:40:7c:12:34:63:da:92:92:80:48:3d:7f:16:
                    cd:5a:dd:a9:db:fc:7d:db:2d:18:64:fb:ac:36:96:
                    12:55:4b:a3:2a:5d:b9:05:b0:aa:c8:b6:9d:cc:73:
                    6f:2f:04:d4:30:1e:34:1d:79:f3:36:b3:f6:64:a7:
                    db:64:95:ff:78:03:e6:6d:10:e7:91:ac:7d:d5:75:
                    74:b1:45:9d:ca:0e:a7:a0:9a:05:80:a2:06:06:8f:
                    84:67:f4:f8:0e:3c:8a:08:6b:2e:ca:cb:cc:0c:23:
                    1f:36:90:55:56:a3:98:aa:a3:38:af:a3:59:45:39:
                    1a:5d:25:2d:38:44:0a:23:59:79:00:5b:4f:2e:47:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:B8:92:CC:B7:81:34:E1:0F:BF:6F:EE:4F:CE:18:B3:75:A2:CF
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:2d:a2:3f:ae:22:ec:eb:45:78:b5:16:c4:bb:67:38:28:
         b9:98:d5:0b:95:e6:ca:61:d0:d3:cc:09:88:73:80:70:78:9d:
         80:f6:35:05:f6:9f:65:62:ed:f0:2b:8e:1f:61:8e:25:67:67:
         57:b6:22:87:28:a8:e4:2a:63:ec:ed:82:46:71:a0:58:d7:95:
         35:5e:80:bf:fb:ae:93:ef:cb:84:97:2b:ef:69:7f:7e:84:b1:
         e5:5c:bb:4a:48:e8:e5:dd:9a:7d:54:4e:9d:6a:25:0f:9e:82:
         d8:94:5d:9c:5d:01:ad:04:4c:14:6f:80:0d:dd:44:c2:30:d0:
         ae:4b:59:96:d7:c3:b0:a9:89:74:75:05:97:f3:27:ff:7f:14:
         e7:17:dd:bd:14:41:55:90:46:12:54:b5:11:49:60:75:e3:7f:
         a4:06:c9:65:08:57:96:dd:8c:6b:e8:73:99:a6:63:68:c9:e1:
         11:23:54:fe:cb:46:85:bd:3d:fd:e6:0c:f9:4f:b7:7a:56:ae:
         52:fb:2a:c5:a3:87:a2:02:03:b4:f4:08:a8:6c:5b:fa:ed:95:
         f8:e0:af:6f:02:5e:52:31:2f:c1:4d:2f:f8:1d:c2:3f:32:55:
         31:1f:3a:d5:fa:65:52:60:2a:c8:fa:47:6d:10:0c:ad:9c:70:
         80:78:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org