Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37342e302f32332d3233203d3e20323632343931.roa
File:                     3137302e38312e37342e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          LQ7OmYoe337gHMHsQ8ZBAIy67TqykUJg0AvB+FS8qLI=
Subject key identifier:   B8:EC:BF:00:5D:E1:82:02:AE:17:F4:79:53:D8:0C:62:33:2A:E2:E7
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       1279E5E4CFF6E0C950D04B3EAB965DBD9E6013DA
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37342e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:03 +0000
ROA not before:           Sat 26 Nov 2022 02:41:03 +0000
ROA not after:            Sat 25 Nov 2023 02:46:03 +0000
asID:                     262491
IP address blocks:        170.81.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:79:e5:e4:cf:f6:e0:c9:50:d0:4b:3e:ab:96:5d:bd:9e:60:13:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:03 2022 GMT
            Not After : Nov 25 02:46:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:43:ba:79:a4:0d:e4:f3:ca:0c:17:94:3d:
                    69:c6:d5:33:33:6f:a1:25:cf:71:d6:ff:f2:8c:5c:
                    f2:5b:1e:40:07:d6:1d:3a:00:f9:b9:f0:d8:93:b8:
                    49:f6:39:e8:cc:a2:51:8a:60:6b:00:d5:93:13:bd:
                    5a:91:f6:8f:c1:f8:9c:15:5d:a9:d2:7f:8f:d2:c1:
                    17:6f:f8:7a:97:c7:e3:04:36:07:03:74:19:f9:15:
                    02:1e:d5:89:f3:23:67:63:cc:72:33:1c:34:e0:b9:
                    fd:9e:fb:19:75:02:3a:34:0a:89:88:9e:00:c3:4b:
                    c4:e9:c7:2a:0f:55:96:42:1a:6d:d2:e1:fc:99:5c:
                    74:5f:4d:d5:10:51:80:ba:d3:81:37:23:04:d3:bf:
                    b0:ac:ce:cb:8e:0e:a6:47:d9:60:c7:38:cf:0c:13:
                    1c:45:af:80:12:2f:d6:c2:8d:af:80:2c:a5:b5:d9:
                    d2:33:b5:86:30:de:b3:fb:33:67:ff:8b:a9:84:b3:
                    32:b0:e8:22:0d:e8:fa:c0:49:4c:d3:38:5c:6b:a3:
                    03:87:e7:42:d0:b5:09:d4:e3:7d:8f:0a:3e:c2:f4:
                    f8:e0:bc:0d:57:ef:18:b2:84:49:6b:32:ad:b0:eb:
                    16:2a:e0:1d:46:5e:58:5d:8e:c7:be:7e:15:95:b1:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:BF:00:5D:E1:82:02:AE:17:F4:79:53:D8:0C:62:33:2A:E2:E7
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137302e38312e37342e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:f6:41:4f:0f:a7:e7:6c:c6:5c:1f:86:98:c3:f0:39:3b:
         72:32:10:50:de:39:88:5b:38:d3:53:55:57:05:be:3b:0a:94:
         e5:d3:fe:0b:b7:d0:f4:39:92:f0:28:f6:a7:5f:56:ae:f4:54:
         81:e4:29:50:db:e2:9f:7c:3b:26:58:a5:b7:78:4b:0e:c8:b0:
         b8:2c:7b:16:54:10:08:d5:e5:23:21:bd:fc:91:09:a1:b4:d1:
         66:22:c3:fc:cf:a0:55:18:2c:c6:57:49:83:c1:60:f5:0e:6a:
         ca:46:79:a8:91:a4:73:2c:eb:98:fd:b5:9d:ee:bc:0f:4d:f6:
         3b:08:16:60:0f:cd:c6:f5:c0:9b:ad:6f:6b:ab:76:a4:84:17:
         69:62:6d:cd:37:cc:43:10:57:f4:4b:db:3e:a7:d7:83:6c:6d:
         9c:cf:43:92:47:f4:5c:e4:83:d0:4c:f6:eb:08:3e:3e:c8:d5:
         7b:02:3f:ec:ff:c7:f5:85:4a:d0:17:50:c5:f3:b3:1a:86:9e:
         d4:79:a5:b1:8f:85:42:78:91:43:39:2d:f4:23:43:66:26:56:
         44:02:6e:7f:7e:14:09:38:6c:5d:fb:85:cf:4c:b5:95:0e:da:
         34:70:5d:4d:46:47:9a:8c:d3:0d:e4:17:61:ed:a1:93:04:75:
         f5:fa:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org