Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32342d3234203d3e20323730353834.roa
File:                     3138372e39342e362e302f32342d3234203d3e20323730353834.roa (raw, json)
Hash identifier:          lyXoQtrEIbmit72PBK2mMPdXoLp6rkJJFssBTjI8Wts=
Subject key identifier:   67:42:A5:A9:96:AD:4D:72:43:04:2D:78:12:22:DC:A8:33:53:8E:47
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       6B88BB31362BBB85F79C6A6A93684AF43B63AC19
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32342d3234203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:21 +0000
ROA not before:           Fri 31 Mar 2023 16:27:21 +0000
ROA not after:            Fri 29 Mar 2024 16:32:21 +0000
asID:                     270584
IP address blocks:        187.94.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:88:bb:31:36:2b:bb:85:f7:9c:6a:6a:93:68:4a:f4:3b:63:ac:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:21 2023 GMT
            Not After : Mar 29 16:32:21 2024 GMT
        Subject: CN=6742A5A996AD4D7243042D781222DCA833538E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:fe:4c:06:0f:17:ee:8a:66:99:d3:7d:ea:
                    b0:1f:17:72:c6:0d:f0:f5:79:39:62:af:ce:07:da:
                    aa:ee:b3:0e:3c:3c:41:90:85:4c:70:6a:5a:95:7d:
                    36:e6:02:b4:41:fc:f3:d0:45:50:31:c8:74:ab:fc:
                    49:f7:57:29:b5:0c:e4:a2:52:5d:05:91:55:ca:a7:
                    dd:98:a5:0c:52:0b:bb:8d:5f:66:ce:77:9e:72:66:
                    9d:e1:10:e3:64:fe:32:a0:3f:ac:cf:a8:64:3a:1e:
                    a5:5e:1b:f6:05:6e:75:0b:9e:df:08:4f:f2:9a:dc:
                    7d:da:f8:96:66:4e:57:95:87:73:47:7f:9d:8c:8d:
                    c6:7a:5b:85:6b:77:78:0d:67:ab:b3:29:16:92:3a:
                    2b:63:96:a6:4b:f0:01:9d:a3:76:29:94:c4:3e:56:
                    16:21:2a:c8:36:97:31:57:92:1d:62:ba:7e:a1:a6:
                    3d:c6:c5:0d:32:f8:07:4b:3b:c8:a4:7b:23:9f:f0:
                    72:ca:3c:db:20:74:f0:cb:7f:a8:84:ba:3b:41:70:
                    53:a9:00:58:20:26:85:62:b1:75:b3:71:85:1a:38:
                    6e:99:9d:74:1a:07:a7:b1:6a:7a:e4:dd:0b:6e:49:
                    40:d2:21:af:43:6d:18:b6:33:96:ee:0d:5f:79:5b:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:A5:A9:96:AD:4D:72:43:04:2D:78:12:22:DC:A8:33:53:8E:47
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e362e302f32342d3234203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:38:43:5b:ec:18:3a:75:6e:93:be:57:31:d0:dc:ca:0c:
         41:b5:a4:ab:79:8d:5f:5d:49:d7:55:7f:fc:c0:81:1e:31:31:
         30:97:d6:1c:6e:f7:2c:ac:d4:e3:23:42:f2:9f:76:dc:3e:ba:
         c4:1d:1a:ab:a8:c5:21:8a:d9:62:02:5e:93:7d:c7:39:2a:d0:
         7a:12:78:74:51:a8:85:17:4e:0d:72:58:5b:1d:e2:b0:01:eb:
         ef:8c:54:9f:f9:df:f7:78:40:40:2a:82:17:aa:b4:b5:1d:ad:
         07:f2:49:1b:7d:a9:96:86:dc:9d:48:e3:f9:97:ff:6e:c2:fa:
         21:39:04:7b:3a:7b:7a:56:19:72:7c:77:94:b8:5a:3f:9e:aa:
         35:48:72:23:dc:20:10:2a:1b:1e:17:54:b5:41:14:14:d6:8a:
         f4:33:b7:2f:62:39:b7:11:ee:98:0c:19:03:43:a9:9b:8f:ef:
         c0:29:05:64:b7:b3:24:c3:0d:72:6f:cb:a1:1c:07:5f:4a:46:
         e0:e6:f7:2c:c4:93:0d:12:ef:a5:d4:a2:f7:57:4d:13:67:a5:
         f4:e8:6b:b0:7b:77:11:e3:27:79:40:7d:68:24:c2:fb:16:ea:
         ca:f9:e1:1f:24:af:e8:fa:6c:5c:e0:0e:81:1b:b6:f6:5d:f6:
         1d:ad:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org