Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          Ze3Jn7WGKnEHcpB7D4PMM6lGFBd2FOb7ABUlNJfug+E=
Subject key identifier:   0F:C0:AA:FB:36:5B:27:3C:21:92:FC:FA:54:47:EF:67:DB:78:AF:A1
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       42482ECEAC5EAA6AE37576977D184B36A609407D
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
Signing time:             Tue 06 Jun 2023 23:19:52 +0000
ROA not before:           Tue 06 Jun 2023 23:14:52 +0000
ROA not after:            Tue 04 Jun 2024 23:19:52 +0000
asID:                     266385
IP address blocks:        170.80.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:48:2e:ce:ac:5e:aa:6a:e3:75:76:97:7d:18:4b:36:a6:09:40:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Jun  6 23:14:52 2023 GMT
            Not After : Jun  4 23:19:52 2024 GMT
        Subject: CN=0FC0AAFB365B273C2192FCFA5447EF67DB78AFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b6:75:68:53:81:ce:95:cb:73:06:96:9c:b9:
                    ac:22:f0:14:52:84:cb:04:48:c4:da:57:48:cc:c6:
                    b7:99:d5:4f:73:db:08:14:d6:92:15:28:8a:0d:e9:
                    47:10:29:61:1c:09:d0:69:c9:1f:33:5f:47:ea:49:
                    d3:a0:1b:2d:3e:96:f3:d0:cc:36:9e:4b:c3:dc:20:
                    69:7b:f7:33:4b:87:92:44:3b:3b:9c:15:a9:8b:fc:
                    86:e0:32:c0:68:d9:29:a3:da:47:96:4d:b6:26:3c:
                    f6:59:0a:51:14:c3:e3:1f:53:32:66:0c:8e:b6:0d:
                    e9:d4:de:a3:c3:3e:73:21:15:d8:b4:4c:90:86:7a:
                    7d:57:bf:01:77:58:16:1f:f1:dd:33:a8:fc:06:dd:
                    ea:b1:b3:81:3a:a3:d6:16:1b:a9:b5:80:f2:5c:f8:
                    95:7d:29:fd:ed:fc:ee:6d:6d:02:53:b4:3a:bb:66:
                    f5:ad:0f:46:a9:a8:c3:be:ca:d3:d9:3f:95:30:37:
                    95:7d:ce:81:8e:5a:76:c9:55:0d:38:3a:48:86:72:
                    ea:4f:a7:8a:d4:2f:72:c4:1f:d4:44:9d:57:03:e0:
                    7a:09:53:da:c9:f6:9b:73:77:90:62:81:46:63:de:
                    c9:4a:87:01:77:32:c9:1d:7a:cb:a3:ce:e4:3d:89:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:AA:FB:36:5B:27:3C:21:92:FC:FA:54:47:EF:67:DB:78:AF:A1
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:21:45:11:9d:c9:7b:66:b6:05:fb:61:0d:32:f4:0f:12:
         c6:68:1e:de:af:c0:b9:2f:b5:c3:03:c0:79:b0:21:5c:c9:3c:
         1a:83:bd:79:15:44:3e:1d:9e:5c:37:b1:f8:23:7c:86:59:5f:
         fe:72:d9:60:12:f4:f3:b9:a2:4f:37:83:f5:47:20:b2:f3:08:
         96:1c:24:ba:f6:67:08:c6:e8:28:2b:95:a4:ac:d9:ed:34:57:
         df:d9:aa:bd:f3:2a:0c:36:0e:8a:44:d5:2d:42:10:51:da:c7:
         a3:f0:d6:1d:97:63:6e:f7:d8:b7:ed:a0:b5:2d:03:56:58:0c:
         d3:b1:e1:44:a5:72:01:00:18:31:99:7c:29:a6:bf:9f:eb:a7:
         89:f8:dd:f0:18:68:8b:b3:70:b0:f6:5a:5b:65:04:c7:21:61:
         e1:06:e0:25:11:d4:3a:7e:f1:26:e9:34:80:04:ad:69:98:4d:
         d7:22:0a:e0:98:0a:43:0b:eb:7c:2a:21:db:2c:a1:54:25:ec:
         c9:f8:d1:08:98:ce:eb:a2:ce:1f:a7:b3:26:62:b6:8e:1e:bb:
         79:15:9d:ff:15:df:4d:e5:4c:21:20:e9:cf:fa:b6:af:81:a8:
         71:fe:b3:26:4a:e8:58:18:d7:de:20:f4:54:3e:49:10:d7:7e:
         ca:1f:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org