Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32322d3232203d3e20323635303639.roa
File:                     3137302e3233312e3133322e302f32322d3232203d3e20323635303639.roa (raw, json)
Hash identifier:          IrXjFbx6EDhj0GA+yZVeqqane7X/kBheCVXK7V0ecnc=
Subject key identifier:   5F:9D:E1:3D:33:EA:AA:91:97:47:74:3D:17:48:FD:AB:E2:2F:78:C9
Certificate issuer:       /CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
Certificate serial:       5E8A3B79648464DA7FE67C2A0304B6FADC9AA46C
Authority key identifier: 17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32322d3232203d3e20323635303639.roa
Signing time:             Sat 26 Feb 2022 14:55:12 +0000
ROA not before:           Sat 26 Feb 2022 14:50:12 +0000
ROA not after:            Sat 25 Feb 2023 14:55:12 +0000
asID:                     265069
IP address blocks:        170.231.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:3b:79:64:84:64:da:7f:e6:7c:2a:03:04:b6:fa:dc:9a:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
        Validity
            Not Before: Feb 26 14:50:12 2022 GMT
            Not After : Feb 25 14:55:12 2023 GMT
        Subject: CN=5F9DE13D33EAAA919747743D1748FDABE22F78C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:7d:96:e9:2d:70:7f:77:36:25:48:79:c7:
                    9e:c4:99:bd:17:90:6f:94:4d:e6:87:11:7a:5a:5a:
                    a3:84:40:cd:49:e9:08:68:df:7d:17:ea:40:9f:16:
                    1b:b5:1f:de:25:c6:30:cc:11:34:a7:9e:42:a4:8d:
                    d3:c6:8d:2b:ba:70:21:9d:bb:de:8c:34:5b:95:8d:
                    57:5c:19:72:94:fd:38:d1:ef:d4:6f:3c:f3:8b:b3:
                    fd:06:02:b0:a1:9c:70:3b:f6:03:2a:a3:15:41:74:
                    95:46:1e:0a:21:1e:a7:cc:fd:dd:f6:14:07:e1:a9:
                    28:36:85:80:62:ac:8c:94:ae:dd:11:bf:24:d1:b6:
                    64:65:c9:1f:0f:3e:00:97:cf:12:29:2c:e3:6e:2d:
                    27:e8:36:b8:0e:34:8c:7e:75:20:a0:51:08:ec:d6:
                    22:83:18:c0:ae:e5:d7:86:09:4b:91:ce:16:da:1e:
                    11:ad:ba:6b:f8:48:60:51:cd:e7:f3:38:7d:00:07:
                    00:f3:18:c9:62:7e:cf:69:17:9e:22:f9:a6:28:1a:
                    5d:8b:97:dc:03:15:54:95:2b:eb:55:dd:d3:d0:33:
                    4a:71:26:a8:aa:58:91:fc:40:2a:0c:08:b3:cc:25:
                    38:fc:a4:4b:ad:1f:10:d6:e3:28:2d:48:a0:ad:7d:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:E1:3D:33:EA:AA:91:97:47:74:3D:17:48:FD:AB:E2:2F:78:C9
            X509v3 Authority Key Identifier:
                keyid:17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32322d3232203d3e20323635303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:ae:f2:ba:7e:df:3b:75:46:35:d0:b7:ec:00:19:f0:0c:
         5d:e8:fc:a9:58:6f:7a:d7:8a:6d:50:57:d1:38:d3:cc:4b:31:
         96:32:00:9b:f1:b6:af:bc:0a:df:39:54:a3:ff:ce:20:15:ac:
         3c:b3:ea:a7:c9:3e:06:c6:bd:ae:f7:f3:4f:4d:7c:70:4a:6e:
         97:f3:d3:e8:8f:92:78:91:73:7d:e7:ed:df:ac:37:30:e5:a4:
         a8:c7:9a:b0:d6:ff:63:46:ac:28:7b:6f:70:76:b7:b9:70:04:
         58:32:2c:7a:d3:00:c3:0e:12:9d:f0:95:32:b6:af:1e:93:d3:
         a3:cd:b6:56:bb:78:1f:28:fb:10:70:4f:d3:76:3c:6e:56:e5:
         f2:82:ef:66:23:94:d8:c7:bf:ab:27:5d:2b:54:3e:a8:70:7d:
         2a:f3:d9:0a:7f:27:5a:68:47:1d:0b:23:09:d5:1b:f9:bd:4f:
         e4:e0:96:fb:1a:71:5d:40:b0:8f:b1:4f:fe:2c:05:01:eb:11:
         19:de:77:5f:3b:06:08:69:fc:31:28:f4:a8:7c:a2:2b:50:7b:
         11:83:4e:e4:1c:f0:ed:d9:54:53:d1:e5:08:dc:de:97:91:b8:
         27:d5:1c:b7:d9:31:ff:0a:62:a8:79:ca:d4:a4:72:90:9c:88:
         71:c7:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org