Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235332e302f32342d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235332e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          mH9sKVT7fxSUjIZY7qxOtZoATSsk45Z8by8AMOXso60=
Subject key identifier:   67:DE:D4:B3:C6:90:88:C8:B3:1A:90:EA:4D:EE:47:EC:6D:B7:4F:90
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       503D40F75E9C76D64ED74FE9C2E9477AE2C13C76
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235332e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     264491
IP address blocks:        170.247.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:40:f7:5e:9c:76:d6:4e:d7:4f:e9:c2:e9:47:7a:e2:c1:3c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=67DED4B3C69088C8B31A90EA4DEE47EC6DB74F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:01:f1:bb:a3:6f:c1:b4:8e:b5:39:6c:92:
                    55:5d:30:cf:fd:1d:84:da:03:41:61:88:9d:ce:d2:
                    7b:00:63:54:8b:b4:ba:ae:99:6d:ed:b1:08:7e:d1:
                    97:dd:2e:3b:5d:ba:cd:8b:1f:da:7c:45:44:ae:bd:
                    8c:58:6d:5e:a1:34:53:10:33:a4:06:06:5a:7b:df:
                    d3:7e:95:aa:d0:2d:65:2a:1e:70:29:b6:48:3a:f6:
                    ae:94:73:7f:a9:3a:63:6a:f8:e1:3c:13:87:91:bb:
                    2e:b7:74:b6:29:20:0f:9c:77:3f:cd:f1:10:e4:83:
                    36:fa:10:b0:3f:ae:fa:5b:b3:d3:3e:05:04:a4:df:
                    01:6d:ff:a9:91:55:fe:0c:ea:53:fa:83:cc:72:ef:
                    20:fd:9a:0b:ab:89:fc:aa:ff:ef:98:71:08:f0:53:
                    93:0c:cd:bc:94:34:85:28:92:ff:ab:c1:f5:87:f2:
                    19:57:a3:44:6c:c9:e6:b7:bc:63:d1:67:1c:eb:23:
                    c3:fc:d3:39:9e:20:3d:14:f9:7c:72:de:37:91:2a:
                    87:45:ac:20:b4:94:fd:03:e0:b0:62:59:37:a2:4f:
                    b6:fc:10:b2:8a:cc:a7:d0:51:8f:ba:05:42:01:98:
                    e9:68:57:cc:a7:1a:4c:a7:99:91:26:33:22:9a:d4:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:D4:B3:C6:90:88:C8:B3:1A:90:EA:4D:EE:47:EC:6D:B7:4F:90
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235332e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:86:37:01:e6:16:ea:de:de:9a:65:a7:6d:c7:98:c1:9a:
         c4:b7:ce:44:83:b1:c2:39:fe:3d:4b:15:2c:fd:5a:6e:3b:17:
         84:7e:16:aa:fd:8c:87:79:89:f6:41:d9:b3:c7:34:fd:da:13:
         6a:74:c1:81:be:b6:26:91:e0:11:19:ab:0e:9c:25:bb:33:b2:
         fe:cb:45:d2:9b:bb:b2:3f:50:c9:f1:66:8d:1a:69:f8:91:93:
         2d:33:9d:2b:cc:b4:83:cf:ee:16:2d:87:6f:e8:b0:58:02:e4:
         b6:b8:0a:9b:9a:74:d0:98:74:c7:01:c9:65:98:69:a2:86:61:
         38:3d:ea:58:41:79:6e:8d:ba:02:4d:81:9b:f3:cf:45:bf:f6:
         ad:34:18:e9:df:c0:f8:2b:18:8b:cd:a5:a3:6a:22:1c:16:66:
         44:48:ae:06:e7:a4:1c:4d:a4:48:7d:9b:8f:ba:30:d3:e2:72:
         4d:1a:bf:4a:2a:77:9a:37:be:c6:32:1b:79:61:1b:e5:ee:58:
         9f:0c:c1:0f:3e:85:bf:f9:cc:29:c4:93:7d:56:d1:6b:7b:80:
         39:3b:bc:70:be:18:c1:ba:b8:bd:b0:8a:74:9f:52:df:08:1a:
         0a:33:62:a3:af:c4:dd:c9:ea:a2:cc:2b:78:b7:b5:68:5c:f6:
         a0:b7:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org