Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa
File:                     3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa (raw, json)
Hash identifier:          poLI+KyP10e1u5AlLsE/M7O3m+y/kLtq4GhJQ3SbGm0=
Subject key identifier:   A1:84:83:D6:B8:5D:EF:ED:D8:56:27:BC:DD:26:FF:3F:0F:58:FB:72
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       726251488B14FE4D9A1B469F9BEBD1FB67CE0FB2
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa
Signing time:             Wed 27 Dec 2023 04:56:35 +0000
ROA not before:           Wed 27 Dec 2023 04:51:35 +0000
ROA not after:            Wed 25 Dec 2024 04:56:35 +0000
asID:                     266312
IP address blocks:        170.238.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:62:51:48:8b:14:fe:4d:9a:1b:46:9f:9b:eb:d1:fb:67:ce:0f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Dec 27 04:51:35 2023 GMT
            Not After : Dec 25 04:56:35 2024 GMT
        Subject: CN=A18483D6B85DEFEDD85627BCDD26FF3F0F58FB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:9b:fc:55:cb:36:5e:fe:2a:8a:2d:55:7c:
                    46:73:49:0a:de:02:d0:6c:0a:37:23:d4:70:aa:65:
                    e7:e8:7e:ab:6f:ef:0c:cb:6f:3e:b4:72:7f:53:3b:
                    39:e8:73:4a:d3:c8:11:98:3f:f8:90:ff:13:6d:f0:
                    e0:de:03:aa:a1:01:d3:4e:23:8a:8a:52:87:55:70:
                    47:96:64:e7:22:86:58:82:eb:7b:b3:3a:95:c1:55:
                    3b:ea:18:59:63:a9:dc:52:12:64:22:4f:dd:ac:4b:
                    d8:eb:b4:29:f6:e4:04:ae:e0:49:cb:02:60:2e:0a:
                    e9:da:fd:f9:2d:00:5a:4e:6b:52:4e:78:73:2b:b6:
                    29:18:ee:55:dc:bf:f8:27:78:11:60:6d:1c:6e:f2:
                    12:f2:d5:73:19:6a:7c:c6:6f:b7:3f:2e:e6:69:de:
                    26:02:f7:84:d7:05:35:4d:1a:02:9e:b6:3a:52:78:
                    28:d0:e5:5e:46:63:69:11:97:3b:a6:ac:91:94:ac:
                    92:79:49:cd:e2:15:04:1a:ff:27:04:1a:01:1a:53:
                    4e:38:ce:72:4a:20:29:81:a8:b8:34:c7:03:e4:00:
                    7a:09:96:cd:ec:06:55:01:c8:75:4f:b5:31:ec:0e:
                    3b:fe:92:33:7a:3b:77:f7:6e:f6:79:87:f6:75:07:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:84:83:D6:B8:5D:EF:ED:D8:56:27:BC:DD:26:FF:3F:0F:58:FB:72
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:8d:76:e0:8f:38:55:2f:89:c1:83:b2:2c:67:2b:88:4f:57:
         cc:15:25:60:19:c5:44:8b:28:9a:83:88:5d:21:1b:06:da:0a:
         c5:4e:05:f9:d9:c3:fb:82:fb:32:0c:9a:18:3e:9e:19:c0:83:
         d9:44:de:4a:e9:43:69:dc:9a:11:22:cf:cc:8f:5c:c8:db:c1:
         82:f0:97:04:92:bb:36:a2:9d:f1:d0:75:00:2b:51:15:29:93:
         c5:67:d5:70:2f:b8:f4:c5:9b:f2:38:b8:57:a8:74:ab:ae:36:
         b4:c6:21:60:cb:17:5b:87:68:04:1d:23:47:40:b1:c6:b9:65:
         34:bf:33:33:a5:49:c3:ae:4f:91:f5:7d:a1:80:c3:f5:51:f6:
         6c:7c:36:cf:01:3a:51:02:49:54:19:a7:29:35:17:1b:2d:74:
         bd:cc:16:31:30:28:a5:04:a9:e9:be:53:52:e2:37:20:62:c0:
         69:bc:40:98:95:8d:69:a5:79:85:ee:f8:9d:81:f7:f0:a1:37:
         f8:2c:dc:59:7a:e0:7b:4a:70:81:21:9d:ee:8f:74:09:ac:af:
         ad:f0:6e:33:47:e1:96:45:d0:fa:15:33:27:da:b6:65:6b:2c:
         1f:70:94:0f:15:da:a5:84:ba:3f:f1:3b:40:c8:e2:d2:9f:52:
         63:df:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org