Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa
File:                     3137302e37392e35322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          Ma1l4uC02JtJZpc/GCq+FZ/mf9ySDEe5PAMrcqMTCjQ=
Subject key identifier:   CE:4A:DE:DF:71:3A:CD:D2:DA:17:55:63:1E:25:24:34:69:D3:E0:99
Certificate issuer:       /CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
Certificate serial:       0A068D88DFF88B19B39A48A4FA9D7E51C317F329
Authority key identifier: A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 22 Feb 2024 17:18:50 +0000
ROA not before:           Thu 22 Feb 2024 17:13:50 +0000
ROA not after:            Thu 20 Feb 2025 17:18:50 +0000
asID:                     264552
IP address blocks:        170.79.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:06:8d:88:df:f8:8b:19:b3:9a:48:a4:fa:9d:7e:51:c3:17:f3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
        Validity
            Not Before: Feb 22 17:13:50 2024 GMT
            Not After : Feb 20 17:18:50 2025 GMT
        Subject: CN=CE4ADEDF713ACDD2DA1755631E25243469D3E099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:3e:6f:41:54:32:89:57:84:56:a7:1f:f4:
                    d5:7f:a6:ef:87:59:af:ae:cd:c4:e3:61:99:b1:0a:
                    b3:17:6d:d3:b1:b7:15:53:5a:a9:b2:58:fc:c7:2a:
                    09:10:62:2a:b8:d7:25:cc:0b:97:da:22:8b:59:e6:
                    13:97:6d:fd:df:d8:14:38:eb:84:15:f2:34:0b:00:
                    df:13:f4:6d:cf:b5:8d:e4:7e:fd:cd:d7:2d:02:63:
                    b0:df:d5:d1:cf:ff:e0:d6:b9:fc:84:16:68:ee:81:
                    74:57:39:41:aa:98:cb:36:45:fc:35:05:a7:68:ed:
                    6d:22:a0:28:99:04:18:65:a5:24:72:2a:ea:b0:1e:
                    41:6f:75:5b:a2:51:f5:e1:6b:2e:64:69:2e:b6:5d:
                    d9:d4:a1:52:df:a5:5f:b7:ce:53:17:1e:b7:71:17:
                    c5:45:f7:f0:53:b2:42:1a:47:fd:74:5c:c6:dd:77:
                    47:fa:73:41:80:d9:93:c7:0b:7e:11:c3:d8:5a:17:
                    be:cd:41:76:7e:d4:c0:48:2b:04:81:0f:a1:a5:f2:
                    0f:ff:eb:04:2b:78:83:2b:97:09:89:fd:cc:2e:b0:
                    45:c7:5f:95:17:96:6b:90:20:c6:99:f0:98:0e:a8:
                    98:6e:b6:83:13:4c:b5:90:4b:3b:4e:38:14:d4:49:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:DE:DF:71:3A:CD:D2:DA:17:55:63:1E:25:24:34:69:D3:E0:99
            X509v3 Authority Key Identifier:
                keyid:A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:02:fb:a5:1e:7f:e5:a9:71:d5:c8:38:bf:8c:37:23:c9:66:
         94:ec:7c:53:e7:d5:46:64:b7:88:0a:ce:3b:fd:3a:b7:b0:40:
         47:24:ed:40:20:bf:d0:70:a2:1f:4f:59:16:6e:76:20:61:d6:
         d2:26:05:c2:0f:f9:ed:83:09:8d:7f:89:a7:f7:fc:f9:a4:af:
         dd:88:cb:cc:cb:82:a5:c7:21:98:e7:f5:59:0d:c9:11:53:89:
         b5:4f:f3:ff:80:2b:fb:ea:21:79:f5:fd:30:42:2f:bc:88:b8:
         08:51:21:d3:6c:3c:b7:3b:7d:b8:0d:01:23:d0:6f:37:f3:58:
         18:5d:e6:b6:6b:5e:1f:46:a5:08:5e:e7:f7:c0:ce:88:54:3d:
         f0:83:b9:c9:75:89:fc:2b:b4:fe:21:1d:f6:9f:74:a6:00:b6:
         f4:3b:93:12:86:90:bf:71:af:6d:03:5e:35:11:db:8b:17:11:
         70:6c:44:50:7f:cc:f3:c2:d2:bd:68:3a:13:16:f3:e0:c7:0e:
         6e:ee:b9:98:4d:2d:6a:d6:e6:39:6a:b0:b5:a5:5f:a6:5a:6f:
         27:33:12:08:fd:d0:cd:d9:00:fb:6f:5f:28:6a:ee:e1:a1:c1:
         e4:ae:46:2c:23:4c:f3:17:ed:e3:ef:ef:4f:02:f9:d0:58:dd:
         47:a4:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org