Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137392e3130362e38382e302f32312d3232203d3e20323632373332.roa
File:                     3137392e3130362e38382e302f32312d3232203d3e20323632373332.roa (raw, json)
Hash identifier:          Ba6J/stGfhLey+RRid/jBy3RZpyQzkVftCY9fQ+c4og=
Subject key identifier:   29:95:39:F8:81:38:DC:88:50:00:74:B7:41:AE:F0:A2:CE:7D:D7:DA
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       64E1A2D4D98D42FF56C64F14CECA4FFD96C22948
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137392e3130362e38382e302f32312d3232203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:30 +0000
ROA not before:           Fri 02 Sep 2022 03:09:30 +0000
ROA not after:            Fri 01 Sep 2023 03:14:30 +0000
asID:                     262732
IP address blocks:        179.106.88.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e1:a2:d4:d9:8d:42:ff:56:c6:4f:14:ce:ca:4f:fd:96:c2:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:30 2022 GMT
            Not After : Sep  1 03:14:30 2023 GMT
        Subject: CN=299539F88138DC88500074B741AEF0A2CE7DD7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:91:75:6b:ca:8b:80:88:0e:61:70:6b:91:
                    57:86:a3:0b:12:4d:03:63:1f:95:64:bb:a2:68:44:
                    df:d5:fa:16:48:90:6a:e3:4a:df:07:07:5e:ca:cc:
                    a1:64:85:78:d2:40:df:9c:11:65:15:7c:c7:9c:cf:
                    be:75:cc:d5:5a:5b:ae:21:26:5f:b0:b4:d5:83:9d:
                    45:fe:3c:36:db:64:ab:c5:35:83:ab:28:5a:ad:4c:
                    5b:1a:43:76:c7:ba:7f:ab:34:60:b1:19:55:55:4f:
                    52:ae:8e:bd:c6:77:f2:65:fb:ba:3c:ba:af:e8:31:
                    4a:ab:e4:5f:62:6a:9d:f0:6e:57:3a:52:6e:e1:34:
                    d5:ef:5b:35:92:f3:5d:23:fc:a9:c1:b5:b9:81:92:
                    47:28:e8:85:c7:dd:f0:aa:71:00:21:3d:6d:a4:ce:
                    83:d7:43:96:77:e8:d4:01:f9:f5:82:6d:f3:9c:3c:
                    99:ac:fd:5d:55:fb:47:f0:03:86:cf:01:74:ed:03:
                    64:cb:8b:97:2e:30:c2:72:01:6c:fc:92:c8:f7:c4:
                    58:ae:fc:78:33:06:36:9f:29:17:db:97:5b:b5:b8:
                    1b:3d:15:c7:cb:cd:a1:f1:2b:97:f5:82:96:6e:39:
                    58:05:d5:8a:88:5c:c9:e3:6f:97:19:80:40:d2:9f:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:39:F8:81:38:DC:88:50:00:74:B7:41:AE:F0:A2:CE:7D:D7:DA
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137392e3130362e38382e302f32312d3232203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:e4:2e:d6:52:32:7b:b6:8a:33:58:b1:22:f0:29:a4:e7:
         17:7e:fa:91:6b:da:e5:4b:f1:87:16:50:e8:6e:b3:96:27:38:
         10:38:59:1e:48:e7:41:27:ed:f1:f9:bb:51:02:07:50:1a:2f:
         45:45:5d:7f:0f:06:09:fc:8e:cf:ef:bc:40:8c:5b:dd:66:3e:
         1d:97:4b:6a:ff:90:c0:aa:c6:87:cb:29:30:03:d9:41:94:dd:
         78:45:ac:4e:e7:b0:4f:8c:66:8d:ee:76:4e:9f:e7:75:59:82:
         6b:c9:ea:13:55:0a:57:a4:3e:4b:2d:cf:28:e9:9e:ab:a0:98:
         a7:31:ad:cb:0d:a1:ae:3b:1a:75:a5:00:e7:6c:67:fa:cf:15:
         65:5d:96:8d:d2:d9:20:a8:81:15:db:73:2e:f7:06:70:cc:fb:
         d3:70:1e:96:4c:c2:7b:5b:70:b2:32:3f:19:cb:28:e5:27:50:
         aa:c2:a2:49:11:f7:38:44:1c:96:87:3a:8c:dd:46:c6:70:31:
         89:de:90:1a:a1:f3:8d:a5:9a:9e:90:8a:02:a4:c2:23:9e:67:
         45:9a:64:ae:31:cc:3c:9e:4d:1c:e2:4f:e2:f2:a4:bd:5e:4a:
         f3:52:9f:dd:ca:2b:46:e4:2d:98:f5:41:ed:cf:56:61:0a:bd:
         93:9a:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org