Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137302e38322e39322e302f32322d3232203d3e203238323230.roa
File:                     3137302e38322e39322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          RC8D3xBNHF1gHY2My61C9h5ATHhBlpk2MEvhOkSSs94=
Subject key identifier:   86:8A:95:EA:E7:17:D8:C4:85:51:F9:D6:10:72:2B:37:43:B0:84:DC
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       2FE79A6A15623F7ADD062D6A145EE9C7DAAAF518
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137302e38322e39322e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:14 +0000
ROA not before:           Tue 12 Mar 2024 19:46:14 +0000
ROA not after:            Tue 11 Mar 2025 19:51:14 +0000
asID:                     28220
IP address blocks:        170.82.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e7:9a:6a:15:62:3f:7a:dd:06:2d:6a:14:5e:e9:c7:da:aa:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:14 2024 GMT
            Not After : Mar 11 19:51:14 2025 GMT
        Subject: CN=868A95EAE717D8C48551F9D610722B3743B084DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:0b:93:32:ef:ef:42:7e:70:14:fa:c0:3b:
                    23:00:9d:57:41:ca:2c:92:da:93:4e:21:e2:83:41:
                    16:8a:fe:b1:e9:68:30:cd:03:cf:a7:cd:a6:2b:72:
                    32:e5:bb:01:f4:00:11:db:99:51:e4:91:92:28:4b:
                    f9:14:49:5d:e9:7c:c9:59:a9:d1:96:da:71:9d:31:
                    18:ef:b9:ec:01:f0:02:de:2f:a4:15:f5:01:44:07:
                    7a:a0:3b:57:42:11:cf:6d:db:52:da:1f:9f:e3:35:
                    2d:5d:7a:c2:ce:ba:a4:59:12:d6:fe:8c:3f:74:ae:
                    b5:55:17:a9:a4:90:88:a0:d4:73:5f:4f:cd:20:7f:
                    07:b3:dc:71:28:8e:88:a4:88:a8:51:31:3f:ab:8d:
                    dc:6b:31:c3:b4:6a:60:c8:49:10:3d:3c:3a:53:a5:
                    5f:25:98:8e:02:4d:03:bd:5b:c9:cf:7f:95:53:f9:
                    7b:f7:72:eb:2f:6a:59:3d:32:a0:f9:09:e1:19:28:
                    a2:1a:2b:04:77:92:fa:ad:71:3b:72:83:60:3c:e7:
                    7c:ff:ce:79:7b:76:0b:b6:4f:e8:a2:a8:32:fd:dc:
                    13:e0:d9:6d:8c:25:04:d9:54:82:d2:e8:5c:9f:78:
                    09:54:f6:3d:fb:d2:29:f7:ca:66:85:5d:9e:9d:ab:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:95:EA:E7:17:D8:C4:85:51:F9:D6:10:72:2B:37:43:B0:84:DC
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137302e38322e39322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:e2:d6:5f:ae:3b:1b:ae:20:97:1f:66:74:03:a0:3c:6a:
         91:ae:50:92:01:a2:2b:e0:58:3b:1c:65:dd:fb:1c:08:31:33:
         ba:1c:2a:45:c3:b0:bf:97:0d:85:05:17:fc:1d:20:f0:6d:66:
         a8:ac:4a:00:6d:74:14:f6:76:c1:ec:fc:7b:2f:72:dd:6b:8f:
         9b:47:4c:85:ab:d3:b5:e5:d5:75:70:b4:01:4f:9d:42:10:41:
         01:10:cb:ef:2c:ad:f5:cc:f6:a5:30:e7:03:f4:82:14:f0:05:
         63:fa:bd:e9:e6:71:83:97:41:db:0b:0a:86:bc:3c:53:11:cf:
         01:26:f3:0f:8e:cb:0d:0b:1d:82:b3:08:63:47:20:28:a7:df:
         f9:2b:ab:f2:8f:6b:22:31:e1:4f:09:29:07:d7:06:92:6c:75:
         93:53:08:3b:7d:23:bb:88:6e:c9:36:a2:b6:b1:a6:a9:5d:06:
         aa:dc:93:26:73:03:1d:eb:64:44:55:64:44:ba:f9:be:ff:9a:
         6a:09:17:5d:8e:d5:57:02:54:a1:eb:36:7f:fa:77:64:6c:9a:
         c8:2b:56:22:d0:5a:1d:83:d5:ff:0d:ee:97:5a:7d:0e:fa:6c:
         86:9f:b3:4e:db:d3:b7:34:af:9e:fc:c9:ca:50:7d:80:04:41:
         52:6b:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org