Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3234203d3e20323635303938.roa
File:                     3137302e3233332e3233362e302f32322d3234203d3e20323635303938.roa (raw, json)
Hash identifier:          Lz3ddQuTgmDXWoFnIu/hEfpy4S+OwlWT1wsQ1eNqiHw=
Subject key identifier:   64:60:5C:56:2B:23:95:45:8F:3F:33:1A:2F:5D:19:84:18:E2:19:82
Certificate issuer:       /CN=3B6FF1683D201F90D697B0A5A29C84440B11C4CD
Certificate serial:       2D3C8ACBBF47BF1EC1E79B41EACB747307DFBECB
Authority key identifier: 3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3234203d3e20323635303938.roa
Signing time:             Thu 27 Jan 2022 12:50:50 +0000
ROA not before:           Thu 27 Jan 2022 12:45:50 +0000
ROA not after:            Fri 27 Jan 2023 12:50:50 +0000
asID:                     265098
IP address blocks:        170.233.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3c:8a:cb:bf:47:bf:1e:c1:e7:9b:41:ea:cb:74:73:07:df:be:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FF1683D201F90D697B0A5A29C84440B11C4CD
        Validity
            Not Before: Jan 27 12:45:50 2022 GMT
            Not After : Jan 27 12:50:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:f9:d4:6e:5e:34:08:c7:60:e3:73:56:2f:
                    89:6c:9a:ec:a4:9b:d2:14:69:6f:13:1f:44:d6:37:
                    94:5c:57:29:10:9e:33:a5:61:0a:21:92:5e:89:a8:
                    30:31:f1:8b:7c:96:04:e9:e3:c4:10:73:10:1c:5f:
                    a1:3f:05:02:ae:92:a9:8f:c7:24:c6:d3:08:e2:a8:
                    9c:2b:7c:f2:df:f2:86:f4:fd:50:ae:8d:46:25:65:
                    7c:7c:0a:8b:55:97:6e:0a:c8:78:6c:ca:11:68:f3:
                    05:dd:33:79:b6:8a:0a:a8:a6:e1:7e:15:69:5d:33:
                    f2:84:2c:a6:c3:44:f7:fd:70:7a:e6:a9:58:89:04:
                    23:fc:a3:65:48:61:00:f9:89:63:13:d3:44:55:88:
                    12:ad:97:d9:f0:48:f8:7c:e9:b2:91:1d:28:17:ee:
                    f1:ba:a9:d0:44:71:03:77:dd:73:04:c0:50:54:3a:
                    dc:d9:3e:f6:d6:0d:8f:a3:5f:9f:58:91:c7:52:3e:
                    09:dd:c6:f3:f2:3c:8f:9f:27:af:5f:59:11:07:61:
                    b8:ef:a3:63:45:bc:fc:83:e9:4b:99:b7:2e:2a:6a:
                    6d:3c:30:77:f2:fd:f8:b8:03:17:af:33:f8:54:af:
                    62:e2:d6:56:30:6c:ff:d2:13:5d:85:90:59:30:69:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:5C:56:2B:23:95:45:8F:3F:33:1A:2F:5D:19:84:18:E2:19:82
            X509v3 Authority Key Identifier:
                keyid:3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3234203d3e20323635303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:39:3f:d6:29:9d:9c:6f:38:d6:7e:d7:5a:40:33:be:1e:
         65:4b:51:9a:ee:bc:24:56:ad:96:eb:d1:c7:b7:5a:07:49:9f:
         fc:b3:1c:e0:30:d7:a2:5c:ef:ff:08:fe:c9:25:1f:ea:04:d9:
         ba:55:7a:ba:14:4b:d7:a8:4a:97:4a:79:33:35:5d:f0:f4:14:
         60:25:0b:d5:dc:49:f6:03:ea:8f:0b:f1:9e:69:03:3a:05:f4:
         e7:9b:6d:da:03:5e:41:59:09:9d:f6:7a:68:2d:7c:be:2f:d3:
         a2:8a:32:be:cb:8d:89:63:e0:4c:88:bd:0f:fa:b8:11:e0:71:
         17:6d:66:76:9c:7a:77:7b:e0:ff:07:2b:a1:1f:a9:03:35:38:
         51:41:49:90:c5:24:7d:c2:a3:6c:79:29:c6:b2:b7:bc:5a:ef:
         42:cc:a9:3f:6c:5d:75:08:a1:09:2c:8e:88:d3:dc:ac:62:f2:
         75:26:d1:bc:23:23:c8:7a:f5:7d:63:fb:e4:2d:42:5e:94:2a:
         57:fa:14:67:40:7a:ed:dd:95:19:6d:f5:ef:31:97:e8:62:ca:
         aa:f9:20:7e:f1:a4:0b:fb:20:5a:09:51:85:5a:9f:10:a5:49:
         74:57:d4:0b:98:7a:aa:ee:22:51:f0:17:c8:fe:0e:05:f6:fa:
         d0:70:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org