Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3234203d3e20323635303136.roa
File:                     3137302e38342e3136342e302f32332d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          cg+Ly3aBsvVoWT7p4kaiyRLbV9bItL7pQpxD06fJpOk=
Subject key identifier:   61:21:1D:B5:E2:EA:09:7D:8D:BA:01:8B:61:75:B1:C8:82:FE:6E:C7
Certificate issuer:       /CN=F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB
Certificate serial:       72085249EBDC585ED65EE5F03D35C7A03D155C8B
Authority key identifier: F0:6E:53:BF:4F:6A:19:18:3D:69:3B:CB:E5:D0:A4:A0:E7:1C:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3234203d3e20323635303136.roa
Signing time:             Thu 09 Sep 2021 17:14:00 +0000
ROA not before:           Thu 09 Sep 2021 17:09:00 +0000
ROA not after:            Thu 08 Sep 2022 17:14:00 +0000
asID:                     265016
IP address blocks:        170.84.164.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:08:52:49:eb:dc:58:5e:d6:5e:e5:f0:3d:35:c7:a0:3d:15:5c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB
        Validity
            Not Before: Sep  9 17:09:00 2021 GMT
            Not After : Sep  8 17:14:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:03:ab:c5:80:d4:4a:31:0a:74:dc:d7:42:
                    e3:39:ac:4e:a7:14:d6:53:6d:0b:10:48:84:17:cd:
                    22:b7:9b:6a:7d:c7:76:35:fb:de:25:f7:7f:a1:78:
                    68:f8:ab:4e:e5:83:4c:20:80:4a:ab:66:96:70:f0:
                    3c:de:f2:eb:ba:1a:3e:16:04:3a:3e:32:3a:f8:db:
                    03:51:7f:c6:6c:5c:4c:7f:cc:fd:70:ad:2f:4f:69:
                    d9:5b:87:d0:19:85:97:77:a4:d7:90:d8:9d:d0:04:
                    4f:74:d9:e1:f7:14:7d:3a:dd:fd:e6:7a:a4:a1:40:
                    ec:f9:28:f4:2a:20:14:3d:b7:e4:99:e2:5c:43:a6:
                    09:82:7d:28:18:22:1c:8a:e6:25:81:99:34:de:48:
                    24:5d:75:11:2e:cb:c7:cf:70:e4:ff:f1:b5:78:56:
                    f0:ef:46:2f:98:aa:b7:16:c6:b5:08:3b:dd:47:fb:
                    d1:66:94:d8:56:e4:26:65:a3:b2:1f:81:43:6c:43:
                    74:92:67:87:5b:f8:53:3e:84:56:1e:4e:84:10:1a:
                    7d:0a:ed:7e:6e:66:e6:fe:12:5e:69:96:b5:e0:69:
                    7a:01:45:5f:bc:a6:75:20:2f:64:70:98:b2:f6:cf:
                    50:16:d7:97:3d:20:bb:4f:11:42:9d:d1:23:93:32:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:21:1D:B5:E2:EA:09:7D:8D:BA:01:8B:61:75:B1:C8:82:FE:6E:C7
            X509v3 Authority Key Identifier:
                keyid:F0:6E:53:BF:4F:6A:19:18:3D:69:3B:CB:E5:D0:A4:A0:E7:1C:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:43:03:c6:aa:d7:44:4d:5c:df:7b:2c:80:cd:07:2b:e6:cd:
         ba:88:78:8c:15:35:d6:75:94:92:34:2d:d5:35:1f:04:29:ad:
         97:c1:71:36:fe:d2:1e:42:14:03:e7:d4:9a:7d:49:ab:c5:d9:
         c9:2f:7d:ea:28:e3:3e:6f:4c:a7:6d:a7:2e:80:65:5c:1a:1a:
         4b:fb:d3:2c:d5:74:08:89:b8:4e:e0:49:6d:4f:ac:08:ce:0e:
         0c:cd:8a:79:2b:94:23:26:95:ac:14:1f:50:c3:27:3a:57:93:
         9f:97:3c:d6:05:a5:4e:32:5c:67:de:73:8f:ef:23:65:c9:54:
         d6:f8:79:bb:86:a3:12:2e:bd:79:a4:30:8d:e3:c0:53:40:53:
         94:6b:78:a2:6b:e6:18:8a:8d:15:78:99:88:eb:de:1a:81:4c:
         71:89:5d:be:68:83:66:75:32:f2:ed:9c:d8:aa:7d:a9:8c:0c:
         65:9e:a0:0c:58:3f:04:22:8c:95:88:b4:40:e1:d7:f8:2e:9b:
         a8:f2:3b:e3:a6:ac:60:54:c4:7b:c4:c3:fa:d6:75:7e:b7:0a:
         ec:22:cb:0b:98:8b:87:a4:12:8b:21:67:28:15:4d:50:f7:7b:
         74:ac:f7:c7:dc:ad:0e:69:6d:f3:c0:69:fb:34:6a:0c:8d:3f:
         d4:21:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org