Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          rVjtNvFykChJVpf5r9rzNtSAZRBIviRONG5yEMceXjM=
Subject key identifier:   35:36:71:38:0F:00:8E:2D:A7:5F:DC:BA:9C:FA:8C:75:DC:88:5E:D8
Certificate issuer:       /CN=FB525337D26D99E0349C464F7EFB30E81515732D
Certificate serial:       3C229AC695E5E1BD9C7482CA0251D8B5978155B8
Authority key identifier: FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
Signing time:             Wed 13 Mar 2024 12:39:42 +0000
ROA not before:           Wed 13 Mar 2024 12:34:42 +0000
ROA not after:            Wed 12 Mar 2025 12:39:42 +0000
asID:                     52765
IP address blocks:        170.239.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:22:9a:c6:95:e5:e1:bd:9c:74:82:ca:02:51:d8:b5:97:81:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB525337D26D99E0349C464F7EFB30E81515732D
        Validity
            Not Before: Mar 13 12:34:42 2024 GMT
            Not After : Mar 12 12:39:42 2025 GMT
        Subject: CN=353671380F008E2DA75FDCBA9CFA8C75DC885ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:39:17:e1:96:ac:7d:1c:db:c7:cc:35:04:
                    4e:91:89:f5:31:50:26:b8:69:37:21:bc:7a:ac:7f:
                    8f:8c:ca:07:a9:b5:94:4f:79:cc:fc:5a:20:d0:6d:
                    12:00:ea:f8:be:1c:37:83:5d:55:96:43:39:ed:71:
                    49:44:44:e4:ee:37:fe:b6:d7:f5:c3:63:f3:39:f0:
                    7c:90:4d:42:5f:7f:bd:1f:d0:0c:a1:3f:27:20:f1:
                    e6:65:3d:eb:38:f7:ca:86:4a:56:6c:1f:a8:10:59:
                    53:cd:9f:19:e6:fd:8f:6e:45:dc:ac:08:9c:f6:4c:
                    4f:48:6e:6e:38:9b:53:02:51:eb:91:66:b0:55:bd:
                    76:da:58:68:35:99:c7:87:27:8a:d3:cb:da:11:89:
                    2a:6f:6d:9f:14:71:b6:f3:64:93:e9:75:8f:4f:45:
                    0b:8b:d7:9b:7e:6a:0f:b4:51:ab:33:11:d8:ac:29:
                    99:fc:b7:7d:96:22:05:b5:b8:23:85:e9:39:b6:9b:
                    f6:11:09:5e:d9:b3:b3:ab:da:34:d6:b1:c0:4b:f8:
                    23:a3:91:08:6b:99:ab:7f:6c:da:89:fb:58:60:6e:
                    c8:2a:f2:3f:4d:6b:8f:3b:35:21:09:af:c4:f9:48:
                    3d:77:04:10:e9:63:05:f7:e8:9c:be:6b:a0:ef:ab:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:71:38:0F:00:8E:2D:A7:5F:DC:BA:9C:FA:8C:75:DC:88:5E:D8
            X509v3 Authority Key Identifier:
                keyid:FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/FB525337D26D99E0349C464F7EFB30E81515732D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:65:ad:4d:56:b3:5f:37:1d:eb:d6:78:58:39:fe:d3:ca:51:
         3a:8a:65:13:25:26:db:52:7c:1a:ef:da:e0:75:3a:b6:28:90:
         0c:4a:8b:2c:c0:a9:5a:ae:ba:a4:48:42:4d:a7:7a:23:c5:17:
         c9:f7:8c:5e:3a:c1:11:3e:1b:8f:c4:3a:10:f6:80:ca:5b:3b:
         90:fe:0d:96:89:27:9c:17:ad:53:29:47:35:ea:dd:7a:2b:26:
         51:be:26:b1:72:bd:99:9c:99:b5:19:66:ed:3f:2d:84:0c:9f:
         60:49:bd:22:80:0d:20:54:e7:70:b4:11:91:a2:d2:92:b4:c4:
         16:0c:1c:26:9a:1b:60:c4:09:c9:2a:60:00:8a:f4:60:2a:83:
         f7:03:8c:a1:e8:f3:fa:ef:ac:e3:63:4a:30:17:59:a0:c7:87:
         e9:be:44:cd:fa:8d:05:ad:d8:79:27:2f:35:b3:1e:c9:aa:c5:
         49:be:41:5e:a6:ad:31:dc:2d:81:01:8e:a0:54:9d:21:08:55:
         e9:4f:85:f5:6b:48:a6:dd:1f:d1:c2:b7:fa:5b:3f:10:06:7c:
         6d:2d:cf:cc:ba:55:52:9f:e9:98:d2:2e:22:cb:b3:ca:f1:70:
         83:f1:02:52:db:c3:2f:99:3b:4b:09:a9:c4:5e:61:a5:3e:02:
         22:a7:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org