Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
File:                     3137302e3233392e36382e302f32322d3332203d3e203533313639.roa (raw, json)
Hash identifier:          efMJ9HpO/QvbLelC5zC/iRCzQjbAhWSU2NDWg9NfpvM=
Subject key identifier:   33:31:9B:DE:45:2D:0B:A1:D0:60:0C:B4:29:76:27:34:8F:AC:99:E3
Certificate issuer:       /CN=82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE
Certificate serial:       558BD3D5286E74E1E508FCB1051F7E9236CC6235
Authority key identifier: 82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
Signing time:             Wed 17 May 2023 20:02:45 +0000
ROA not before:           Wed 17 May 2023 19:57:45 +0000
ROA not after:            Wed 15 May 2024 20:02:45 +0000
asID:                     53169
IP address blocks:        170.239.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8b:d3:d5:28:6e:74:e1:e5:08:fc:b1:05:1f:7e:92:36:cc:62:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE
        Validity
            Not Before: May 17 19:57:45 2023 GMT
            Not After : May 15 20:02:45 2024 GMT
        Subject: CN=33319BDE452D0BA1D0600CB4297627348FAC99E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:fc:85:90:5a:7d:6e:ac:88:11:d0:77:67:
                    85:91:8f:80:f7:87:61:cb:0f:fc:8e:5a:60:ed:98:
                    62:95:02:d0:58:81:90:ae:66:e8:92:6b:fa:d5:6b:
                    84:5a:80:ba:77:5b:22:ee:c4:73:19:26:80:27:54:
                    e5:66:91:fb:00:4d:58:9e:01:b0:52:f5:a2:01:92:
                    85:1e:8d:f8:fd:de:24:85:27:2c:e3:8a:f0:72:cd:
                    a8:9c:bf:95:7a:f8:89:17:26:1b:76:7b:81:7e:08:
                    dd:c3:49:12:1e:7b:59:3f:f5:01:6e:8e:90:94:f4:
                    8a:38:3e:7c:75:f6:97:9a:0a:1e:6d:64:5f:fb:72:
                    1c:f8:eb:8c:f1:fc:57:ee:45:b1:16:c2:a3:e9:06:
                    84:b6:af:6e:42:38:6d:6c:ea:c9:6f:3e:04:9f:dc:
                    bf:29:ba:48:13:af:f2:6c:63:8f:96:18:e7:24:2e:
                    44:eb:63:f4:22:e6:af:62:5a:2f:27:db:f6:97:ad:
                    65:0a:7f:1d:7d:9f:21:c9:56:b7:bd:3f:15:65:ba:
                    79:54:a8:bb:c0:77:b3:90:55:73:11:45:5e:95:71:
                    4f:02:aa:c5:1e:d8:7c:f9:28:eb:e5:47:57:24:65:
                    47:9f:eb:ed:c8:b8:97:be:39:7e:45:2c:61:fc:4b:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:9B:DE:45:2D:0B:A1:D0:60:0C:B4:29:76:27:34:8F:AC:99:E3
            X509v3 Authority Key Identifier:
                keyid:82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:48:3a:68:67:59:e8:ae:43:cd:f7:3f:74:77:2c:3a:46:
         6f:30:88:d5:80:3c:95:0b:93:9c:eb:60:aa:4b:a2:39:bb:de:
         ea:c1:5c:e3:18:55:9c:84:0d:16:56:10:83:59:66:7e:b5:94:
         42:79:66:35:9a:3d:77:83:1a:25:4b:db:3d:96:f1:c2:f8:75:
         f7:68:ad:f2:69:8e:fb:c7:ff:6c:5a:20:72:2a:fe:a8:59:c8:
         30:12:e4:4f:bb:69:fa:57:d6:c0:4c:54:9b:a7:9b:e7:bb:10:
         53:53:f7:1f:29:90:8e:3c:69:27:6d:41:fb:02:e6:b7:0f:cb:
         c5:a6:5b:11:ce:0f:9c:d6:c4:7e:94:2d:1e:b6:02:9a:ed:81:
         3f:39:87:34:3d:ae:3d:92:e6:f0:64:49:06:6f:0b:51:13:c6:
         2b:82:ef:90:de:fe:42:ba:9e:21:1f:51:f8:b8:89:59:31:65:
         6f:f5:83:95:ef:41:be:dd:3d:a5:88:68:cc:7d:22:41:d1:ff:
         47:b1:fc:47:c6:91:b6:fd:f8:af:42:27:0e:1e:f0:14:fe:a5:
         46:b0:cc:bd:7f:de:c9:81:a2:15:38:99:f9:05:3a:90:ff:80:
         57:13:e5:de:59:51:7a:20:6e:f1:ac:d0:05:d2:92:0e:24:b5:
         15:4c:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org