Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3137302e38332e39362e302f32322d3332203d3e20323634353338.roa
File:                     3137302e38332e39362e302f32322d3332203d3e20323634353338.roa (raw, json)
Hash identifier:          XAM2mP+/0NWUC68D348cOB9u1Kor1eSyNY/JR+RwUnI=
Subject key identifier:   31:EC:32:E5:A2:FD:49:BE:49:51:CA:3E:BE:E6:6E:4E:3B:D7:DD:72
Certificate issuer:       /CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
Certificate serial:       5DAA2BAA6EDC5E7936BDC8F9F357F0E5C702D86B
Authority key identifier: A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3137302e38332e39362e302f32322d3332203d3e20323634353338.roa
Signing time:             Tue 03 Oct 2023 18:10:51 +0000
ROA not before:           Tue 03 Oct 2023 18:05:51 +0000
ROA not after:            Tue 01 Oct 2024 18:10:51 +0000
asID:                     264538
IP address blocks:        170.83.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:aa:2b:aa:6e:dc:5e:79:36:bd:c8:f9:f3:57:f0:e5:c7:02:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5517DDFA3CE9B3626553FD5F843D3B05D1626A7
        Validity
            Not Before: Oct  3 18:05:51 2023 GMT
            Not After : Oct  1 18:10:51 2024 GMT
        Subject: CN=31EC32E5A2FD49BE4951CA3EBEE66E4E3BD7DD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:60:03:ea:9c:85:e5:e1:38:7e:a6:02:a7:
                    5f:9e:44:cb:66:b0:8b:82:4f:ea:1d:27:5f:0a:43:
                    b6:89:6d:89:b3:f9:e8:84:ff:e6:90:68:6d:e6:cb:
                    bc:69:13:5f:55:b7:a0:fa:f2:b6:29:d3:19:96:29:
                    41:f1:7c:59:8a:61:49:24:35:d2:1e:04:bc:99:3a:
                    04:f5:18:42:f2:db:df:66:56:16:f4:e1:95:a2:b0:
                    7f:b6:77:eb:f1:93:4c:6a:b4:d6:33:7a:5e:2e:c0:
                    3a:71:9c:eb:3a:91:0b:13:80:4b:12:43:79:9b:c7:
                    63:a5:aa:c5:ed:2b:4b:4d:85:26:13:6b:63:64:50:
                    f4:fe:59:09:a9:0d:1c:49:c5:de:fe:c6:4e:d9:84:
                    c1:cb:d8:50:e8:59:6a:fe:d3:7d:ec:e4:ce:7a:02:
                    8e:80:5d:14:2e:59:97:e7:fd:ff:44:11:52:11:a3:
                    91:9c:45:df:c5:b2:f3:66:e2:51:34:f7:c4:e7:1b:
                    ff:e0:65:5e:14:8d:51:a5:93:cf:f8:eb:3c:11:06:
                    34:1f:03:db:cb:34:8a:b4:18:59:65:b5:be:fa:e0:
                    a4:fa:5d:06:5a:37:d6:91:fa:32:a7:96:1f:f7:0e:
                    fc:b3:1e:84:f7:e5:10:5c:24:f9:97:0c:2a:4e:1e:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:32:E5:A2:FD:49:BE:49:51:CA:3E:BE:E6:6E:4E:3B:D7:DD:72
            X509v3 Authority Key Identifier:
                keyid:A5:51:7D:DF:A3:CE:9B:36:26:55:3F:D5:F8:43:D3:B0:5D:16:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5517DDFA3CE9B3626553FD5F843D3B05D1626A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/3137302e38332e39362e302f32322d3332203d3e20323634353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c1:cf:e2:3e:a6:4c:78:ed:43:6f:64:e4:99:fa:b6:17:40:
         25:e8:44:83:aa:9f:dd:b1:04:f3:18:3b:34:27:27:de:21:e7:
         93:9a:4c:58:6b:6b:23:bd:82:ed:26:15:0f:12:ef:43:f1:d5:
         08:05:2d:ba:5c:ba:07:d4:95:30:b2:5c:e5:fa:53:12:62:bd:
         f5:5c:6f:c5:6c:57:84:60:79:bc:38:fb:b4:54:6a:d9:50:a5:
         a4:76:ec:89:f7:65:e6:91:25:43:06:0d:6b:3e:06:21:c9:24:
         01:55:59:16:a1:f8:a7:1a:26:6e:a8:75:81:ca:ee:5b:7c:16:
         5c:c7:0a:ee:1e:16:dc:f5:f2:44:95:ea:4e:19:ba:ec:63:d9:
         4c:d1:95:f4:a2:92:cd:c5:8e:96:df:b1:38:ca:b4:49:cf:79:
         20:84:f2:26:d8:14:5e:fa:2d:20:28:a7:55:c8:56:8b:3b:02:
         d1:07:f0:63:62:a2:ab:34:b5:db:16:94:d7:58:65:3e:8f:99:
         d9:1f:9a:e7:78:59:71:ad:dc:d0:f2:6b:94:8d:a2:47:b9:27:
         80:10:da:8c:55:e7:60:2a:88:4c:f2:fd:4a:05:08:72:a2:98:
         b4:71:1d:5a:35:25:f8:a3:dc:ab:6a:fc:09:a9:d3:d5:c5:8d:
         98:fe:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org