Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235352e302f32342d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235352e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          iEcco/lXZB8hja0G+yAsYEhKLSs4dsjA/Z3R+0PqP2M=
Subject key identifier:   C6:32:03:5F:40:95:CC:71:5A:CF:1A:26:F8:5D:F3:A0:5C:0F:63:4A
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       7AA27F8187CC53DF75665A94ECBC3BABEE3DFFDA
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235352e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:21 +0000
ROA not before:           Mon 07 Feb 2022 12:04:21 +0000
ROA not after:            Mon 06 Feb 2023 12:09:21 +0000
asID:                     264491
IP address blocks:        170.247.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:7f:81:87:cc:53:df:75:66:5a:94:ec:bc:3b:ab:ee:3d:ff:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:21 2022 GMT
            Not After : Feb  6 12:09:21 2023 GMT
        Subject: CN=C632035F4095CC715ACF1A26F85DF3A05C0F634A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:1c:a3:cf:de:f1:78:6c:a1:94:b7:e8:0e:
                    e4:29:19:1f:eb:68:89:b4:58:d3:70:be:94:18:b8:
                    e9:35:38:95:f4:30:e7:92:f8:15:d1:5d:88:6f:78:
                    31:32:2a:84:c7:12:87:5c:de:f9:24:58:70:4f:bc:
                    63:8a:fc:b6:d9:95:a2:ff:0a:0b:5b:49:81:0e:37:
                    61:e1:f0:29:53:3e:b7:06:e4:08:d4:71:50:c4:84:
                    5e:d4:fc:e2:cc:73:f6:85:ca:c8:cd:58:f1:a9:14:
                    72:40:46:a1:15:7a:e2:e1:0b:42:67:4c:1e:79:34:
                    41:3d:73:c5:54:bb:2f:3b:92:b9:c3:95:c0:b9:31:
                    89:dd:cf:70:e9:3b:23:bf:88:6c:48:c9:3d:0f:bd:
                    53:80:4c:48:00:a5:ba:4e:b3:90:ae:d9:79:63:03:
                    2f:30:27:13:09:b6:3a:ac:5c:64:d1:68:7a:cc:22:
                    69:f1:b8:a8:31:d0:80:a8:49:84:dc:a4:e9:28:22:
                    87:f3:93:c4:0e:fb:be:e3:36:f6:51:07:e1:ed:c5:
                    31:cd:65:75:49:70:91:ab:03:59:f6:4e:5c:36:de:
                    ee:63:5e:b1:f6:2c:84:43:ce:f7:1b:81:a1:f4:a0:
                    91:86:1a:ad:23:e0:d7:58:4e:e4:af:54:da:38:8c:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:03:5F:40:95:CC:71:5A:CF:1A:26:F8:5D:F3:A0:5C:0F:63:4A
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235352e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:92:e9:ad:0f:2b:6f:fe:d8:78:96:96:cd:ab:11:59:6e:
         42:8f:d8:fe:69:e0:2f:d3:ee:6f:f1:cb:e7:b7:80:d5:7d:01:
         56:a3:e5:a0:5d:78:25:1c:b0:bd:3e:ba:8f:7c:16:8a:00:66:
         1d:03:db:56:5c:f1:75:7c:64:99:43:cd:7f:5b:6d:04:c3:02:
         4c:7f:ad:54:17:8e:02:b2:48:b6:b8:65:b8:f4:ca:2f:28:47:
         d2:f8:41:69:a8:1d:ba:ea:63:16:15:fb:3c:60:b1:4f:be:c1:
         68:42:f5:06:af:42:ef:c8:01:9e:43:c0:b1:ba:c0:d0:be:9d:
         7c:6d:48:ab:a5:7a:a6:7f:80:c9:e4:4f:9a:84:54:57:6b:4d:
         11:12:8e:8c:50:54:5a:fd:d4:44:6e:d1:82:30:d4:c4:19:11:
         58:01:68:7a:98:08:03:4d:9b:85:46:14:a6:44:cd:01:3a:2d:
         2a:44:6f:0c:07:23:21:42:ff:72:11:15:6e:89:c8:03:5f:d3:
         30:c1:9e:be:86:e5:59:10:55:24:73:68:c1:4e:ba:e5:4f:ef:
         00:f3:51:ca:92:23:39:6f:b0:48:74:57:8a:b8:61:6e:eb:1d:
         07:72:e6:a2:ec:d4:c2:32:e5:58:0b:25:66:96:82:e8:6b:93:
         c1:50:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org