Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa
File:                     3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          r5RQ+kHIYghqQARAc+0GJQWQzmW4d1YUC7mGwXgk7GM=
Subject key identifier:   CA:44:5E:80:6A:F1:F1:12:7B:1D:2A:78:97:A2:BC:3F:79:D0:E5:9C
Certificate issuer:       /CN=F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB
Certificate serial:       061AF500AA48E5A450E43020E637850AC5F9904E
Authority key identifier: F0:6E:53:BF:4F:6A:19:18:3D:69:3B:CB:E5:D0:A4:A0:E7:1C:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa
Signing time:             Thu 09 Sep 2021 17:14:00 +0000
ROA not before:           Thu 09 Sep 2021 17:09:00 +0000
ROA not after:            Thu 08 Sep 2022 17:14:00 +0000
asID:                     265016
IP address blocks:        170.84.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1a:f5:00:aa:48:e5:a4:50:e4:30:20:e6:37:85:0a:c5:f9:90:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB
        Validity
            Not Before: Sep  9 17:09:00 2021 GMT
            Not After : Sep  8 17:14:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:f5:01:43:07:0e:ea:79:74:03:e0:12:4b:
                    ae:9d:c6:b4:7b:3a:4f:c0:7b:e2:0c:e0:7f:2f:9c:
                    79:ba:0f:3f:b7:82:22:46:1a:19:a8:e5:60:23:d7:
                    c2:4a:4c:30:e1:7d:50:71:52:11:20:02:80:31:14:
                    51:2c:48:29:14:0c:71:bc:e2:fd:a6:ee:7d:45:e6:
                    4f:2f:9c:fa:a1:80:81:b5:48:c8:58:23:8e:61:6d:
                    a2:68:a4:78:b7:2f:3f:de:62:b7:32:7e:b2:6d:91:
                    37:ed:94:64:df:28:57:7e:aa:94:6f:62:8c:45:6a:
                    30:8f:8c:00:b8:0e:a4:10:91:df:5a:47:6b:5e:56:
                    b8:24:ea:78:b4:93:e9:2a:ac:72:3d:a7:2d:2a:20:
                    6a:61:8c:86:32:fd:18:be:26:fc:3e:e2:76:b7:a7:
                    91:5b:3d:1e:de:47:5c:6b:25:f5:64:ad:18:1b:33:
                    9b:88:0e:2a:0a:ee:a1:84:8a:95:b0:a7:4a:2d:b2:
                    12:f2:3a:06:df:d8:57:a3:fb:b0:5d:7d:22:d4:55:
                    54:0a:eb:9c:38:d0:14:58:38:74:12:45:32:cc:f9:
                    55:77:20:ba:b7:75:5b:a6:c0:42:03:b9:1f:a8:09:
                    1b:68:23:55:8d:83:ae:50:37:2d:cc:c1:97:8d:18:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:5E:80:6A:F1:F1:12:7B:1D:2A:78:97:A2:BC:3F:79:D0:E5:9C
            X509v3 Authority Key Identifier:
                keyid:F0:6E:53:BF:4F:6A:19:18:3D:69:3B:CB:E5:D0:A4:A0:E7:1C:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F06E53BF4F6A19183D693BCBE5D0A4A0E71C4CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:b2:4e:48:ac:f5:ef:45:de:6b:fd:ea:42:51:bc:16:ba:
         11:07:63:b0:b5:cd:96:c6:86:6a:3f:fb:4c:27:39:52:b6:ad:
         d3:53:24:98:ad:ee:49:fc:50:15:e1:26:9f:da:d5:ff:78:d1:
         5d:83:ad:75:73:6b:ac:4a:70:37:32:d9:34:ea:ec:dd:06:4d:
         a6:83:19:b3:f7:d5:1c:03:66:13:d6:c0:5c:9c:b6:06:25:39:
         14:86:b1:ca:2f:1c:26:de:ca:ec:28:ad:17:85:d6:50:94:55:
         e3:21:8f:04:ef:0f:b7:c8:e0:ec:22:4b:10:4b:3d:d6:cd:9c:
         a2:da:f8:f3:3a:0f:cd:55:c2:3d:b9:d6:b1:d0:79:49:d2:b3:
         82:78:34:0e:1e:cc:32:60:fd:33:67:50:e0:c8:4e:5a:ea:b2:
         29:f9:e0:bc:01:99:7f:83:01:d6:01:a7:c7:4e:84:af:10:89:
         10:d1:d0:fd:46:4d:68:e2:d5:9b:4a:e6:08:01:0e:5f:92:03:
         ae:dd:6c:3b:c3:28:b1:ce:86:9a:07:c7:c5:ba:af:d6:19:04:
         79:d7:f1:82:77:17:f3:ed:be:d2:d4:8e:51:41:67:17:8d:b6:
         61:03:15:b5:76:67:7b:40:df:66:b1:42:fe:d8:d0:56:c7:9f:
         e7:7c:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org