Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa
File:                     3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          2kfOJ/NSWBLuBjL9AsdcunisUCcU4gw+9wEC7VQ5ZG8=
Subject key identifier:   55:E2:7E:C8:CB:13:8B:82:ED:DC:0F:43:5C:92:43:55:89:01:87:64
Certificate issuer:       /CN=DAE2341ECECC35E3C1ED956DC635B6B853DE2C21
Certificate serial:       330BBB58C354BA1D16A0921EA7B980BF5AA5DE63
Authority key identifier: DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa
Signing time:             Tue 27 Feb 2024 16:00:00 +0000
ROA not before:           Tue 27 Feb 2024 15:55:00 +0000
ROA not after:            Tue 25 Feb 2025 16:00:00 +0000
asID:                     265016
IP address blocks:        170.84.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:bb:58:c3:54:ba:1d:16:a0:92:1e:a7:b9:80:bf:5a:a5:de:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAE2341ECECC35E3C1ED956DC635B6B853DE2C21
        Validity
            Not Before: Feb 27 15:55:00 2024 GMT
            Not After : Feb 25 16:00:00 2025 GMT
        Subject: CN=55E27EC8CB138B82EDDC0F435C92435589018764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:38:ed:fb:e5:2d:f5:90:58:54:11:9f:59:
                    d2:bd:26:65:86:e2:26:d1:27:5d:03:9b:8c:25:3b:
                    0d:5e:09:a1:84:63:98:a1:38:4e:f3:3f:f4:bf:40:
                    28:4e:44:25:74:38:ad:d1:2f:a4:ae:dc:87:e6:39:
                    23:41:af:b9:d0:0d:e1:cd:f5:e5:1b:cb:e5:24:5f:
                    47:04:a8:58:e9:e5:c6:e3:90:bc:69:29:10:f0:eb:
                    a7:21:1e:f6:93:3c:30:25:29:45:82:88:ee:14:5d:
                    47:f2:86:28:1a:d7:5b:b8:c6:ab:5d:97:f1:55:84:
                    0a:5b:11:0f:99:d6:f5:63:ac:ae:17:d3:3a:6c:d8:
                    60:22:df:f3:82:7d:0a:03:2e:15:f6:fb:39:5c:6d:
                    4b:7f:d3:8a:8d:42:c5:86:31:2f:85:7f:04:36:ab:
                    6e:e5:bb:b7:ce:bd:c7:e8:c0:a4:dd:00:0c:f1:f9:
                    3d:32:29:d4:6d:20:b4:8e:08:2f:76:a3:2b:75:ad:
                    ca:12:e9:d1:0f:4a:ca:6f:5c:7f:ed:45:43:35:1a:
                    a8:99:c0:58:1e:2c:7a:90:d0:74:b1:2a:b6:ea:d5:
                    a6:b9:91:7c:d3:90:07:66:f0:50:27:5c:ae:d3:64:
                    2c:4c:60:72:ad:2c:aa:ac:06:92:e1:7c:e6:6d:15:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:7E:C8:CB:13:8B:82:ED:DC:0F:43:5C:92:43:55:89:01:87:64
            X509v3 Authority Key Identifier:
                keyid:DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136372e302f32342d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:20:4d:ba:2d:f0:1f:83:b6:5d:48:cf:e5:80:0c:c9:3d:
         59:a9:ad:df:de:90:e8:7a:c1:55:5d:3c:34:9e:12:dc:5b:2a:
         af:ef:23:21:06:22:a9:e7:9e:65:df:33:63:db:df:16:fa:a0:
         35:b8:20:02:8a:92:9d:bc:be:c9:6a:a1:fd:22:cf:1c:61:69:
         36:aa:b6:3e:22:bc:c8:50:12:b7:0a:61:b7:06:52:22:04:99:
         d8:d3:19:c0:90:0f:72:05:fa:1c:e1:53:7c:ec:15:0d:d5:35:
         ce:da:06:e0:f7:9e:4e:6c:cc:f5:e7:b9:0f:04:3f:34:b2:42:
         e2:5d:3d:6c:8d:98:90:4a:de:3a:ba:a3:42:1d:3f:46:1d:47:
         12:02:2c:04:d5:6f:ec:0d:09:1f:20:09:f4:9c:c9:8b:59:aa:
         56:30:ef:e6:48:16:59:c8:f7:0d:89:93:db:f3:4a:1d:cf:0d:
         75:cd:2a:01:08:e2:76:41:0f:75:19:62:29:49:95:10:71:e8:
         b6:d7:ad:96:7e:2a:cd:99:eb:7b:60:4e:90:b6:75:fa:7a:51:
         e9:53:b6:f2:0e:61:7f:8a:7c:a7:ec:0d:81:e4:7a:68:34:79:
         da:9b:e4:0c:f7:13:43:d4:18:91:7c:1b:df:a8:2e:3f:05:62:
         52:9f:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org