Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36322e302f32342d3234203d3e20323632343638.roa
File:                     3137392e3130382e36322e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          ibks2Q+wk3KdpjGs4tMNbXE7X40/XG5aIztw89PowcE=
Subject key identifier:   BC:B1:D0:F1:19:D5:C0:D5:E5:F8:A3:B7:A4:A9:E3:26:4B:80:52:69
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       35C928B3088AFEC46D033BD55264CE3F4F53C88B
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36322e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:54 +0000
ROA not before:           Tue 20 Dec 2022 15:04:54 +0000
ROA not after:            Tue 19 Dec 2023 15:09:54 +0000
asID:                     262468
IP address blocks:        179.108.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c9:28:b3:08:8a:fe:c4:6d:03:3b:d5:52:64:ce:3f:4f:53:c8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:54 2022 GMT
            Not After : Dec 19 15:09:54 2023 GMT
        Subject: CN=BCB1D0F119D5C0D5E5F8A3B7A4A9E3264B805269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:66:50:de:2c:2f:8d:11:fa:43:56:49:6a:
                    24:0e:38:99:53:d2:19:6d:2a:96:15:fa:8b:ba:33:
                    30:fe:88:d8:5c:fd:82:6d:43:90:b7:df:ac:76:e2:
                    9d:76:63:b1:9d:05:05:0d:f4:f0:bb:d6:24:3a:65:
                    33:ce:a9:a1:2d:0d:5a:d5:85:c8:26:33:cd:a2:fc:
                    11:20:7f:71:a0:76:29:70:ed:f3:a0:5c:55:34:24:
                    40:5b:d8:e6:21:87:f2:ef:80:f9:98:1b:8a:d1:85:
                    09:c6:b7:ac:cd:1e:9c:52:d5:53:87:e4:f9:b0:d1:
                    36:42:ab:25:a2:d8:dd:2b:02:28:4b:1c:a1:05:84:
                    9c:dc:93:8b:a4:c4:34:71:28:79:e8:d0:e7:d2:b2:
                    42:a9:0c:c5:29:bc:31:b5:cf:e8:9d:30:db:8d:0a:
                    f5:d3:5f:32:e9:60:88:bb:e6:09:b6:b2:d3:15:f5:
                    4f:94:6b:60:be:96:d5:ef:dd:0a:a9:b6:ac:5d:c8:
                    69:de:02:fe:a4:8c:30:a8:bb:b9:e1:d8:c4:a9:2d:
                    8b:fb:c6:5d:0b:a1:e7:68:2c:6d:d4:4e:ef:89:57:
                    b5:d3:ed:75:41:8c:9b:5d:32:e4:36:27:45:0d:1d:
                    30:c3:9a:d9:9f:39:52:64:e3:8d:1b:f8:38:f2:d8:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B1:D0:F1:19:D5:C0:D5:E5:F8:A3:B7:A4:A9:E3:26:4B:80:52:69
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36322e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:08:db:1f:ae:fc:8f:61:71:82:48:39:bb:ca:8c:23:2b:
         c6:68:22:ff:b5:f4:28:bf:fa:81:bf:df:9d:d0:8c:6e:bc:3f:
         46:97:97:5b:c8:ec:a5:b8:80:6d:3a:a2:c4:93:5d:8d:24:a0:
         ec:67:e3:3a:12:29:b5:1a:d5:15:12:49:ab:b6:da:04:6d:23:
         8b:5c:bf:3d:e1:8b:e9:f0:61:03:cc:fc:e2:83:41:1e:54:20:
         44:d2:08:28:30:1f:a6:27:8b:c8:1e:0b:8b:5e:2b:43:2b:33:
         8c:09:46:2d:08:23:22:fb:a1:84:ef:f4:1b:95:dc:1a:14:ef:
         38:57:c8:66:c2:c2:b5:dc:b4:49:f8:c5:4a:1e:24:18:2a:3f:
         26:12:69:b4:e3:f9:12:d0:10:8f:e7:21:13:65:b8:c3:c7:28:
         2b:d0:39:b2:ff:7c:19:ff:ad:47:a0:71:dd:67:19:ee:d7:7e:
         3f:bb:2d:33:d3:70:23:b3:34:53:0b:19:be:74:88:a9:a9:64:
         a3:12:9c:3e:a3:31:d3:42:8f:e8:fb:fb:83:9b:ad:ca:e5:e8:
         7d:24:5b:a1:f2:4f:42:07:fd:3d:1f:29:92:24:d9:a8:04:45:
         bb:ac:f1:82:f6:5d:31:51:9f:9e:93:75:f9:b2:42:bb:ef:02:
         a7:6b:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org