Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa
File:                     3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa (raw, json)
Hash identifier:          OljOrSrPXnm3ObQ6tsJyLU3ybg2HxITCu2mn1t/wnjY=
Subject key identifier:   EF:C1:F3:27:89:22:CA:36:56:AE:B3:D7:66:DB:15:90:91:60:48:BF
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       22E284D6D5C053B3309F0D4F5EDCF6851ED25370
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa
Signing time:             Fri 12 Apr 2024 20:12:14 +0000
ROA not before:           Fri 12 Apr 2024 20:07:14 +0000
ROA not after:            Fri 11 Apr 2025 20:12:14 +0000
asID:                     266506
IP address blocks:        170.244.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e2:84:d6:d5:c0:53:b3:30:9f:0d:4f:5e:dc:f6:85:1e:d2:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Apr 12 20:07:14 2024 GMT
            Not After : Apr 11 20:12:14 2025 GMT
        Subject: CN=EFC1F3278922CA3656AEB3D766DB1590916048BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e2:23:76:bf:be:d4:dc:f7:6c:0c:66:ac:c2:
                    85:b0:67:14:4f:3c:9e:ba:84:e3:25:7a:b0:a7:52:
                    25:a2:a3:e0:97:00:d4:0e:2a:c5:ed:4a:b8:68:b5:
                    99:41:e4:69:6e:eb:55:c0:1c:a8:77:0a:28:2b:d4:
                    bf:8e:21:0b:6e:21:85:2b:31:64:9d:39:81:ea:c2:
                    5d:3b:4c:53:22:19:5e:7b:28:16:ea:0b:a3:bf:c8:
                    c9:4a:87:fd:e7:dc:63:5f:74:12:30:a8:79:53:a0:
                    b2:72:36:9f:ec:ff:30:85:2d:56:07:ef:48:6c:3f:
                    5a:71:ed:36:f1:97:77:ed:e6:fb:f7:39:83:a7:84:
                    73:0f:22:0b:8b:fc:70:e9:de:0f:69:3e:36:de:62:
                    16:4b:fe:81:89:fd:61:8a:24:fc:d3:69:d8:d2:88:
                    9c:ae:3b:ce:80:ee:02:fd:6b:f5:81:39:da:0f:76:
                    15:98:c0:72:93:66:b3:29:d9:4d:47:6e:b1:6f:48:
                    40:44:da:f0:3a:15:0a:c6:63:78:1c:3f:98:e5:b3:
                    0a:42:02:2f:69:04:3b:1c:4c:aa:26:f8:62:be:f3:
                    f9:fc:66:70:5a:a2:9b:eb:e7:c9:b0:4b:8b:32:a8:
                    df:bc:05:20:7f:05:c6:84:d9:f4:59:98:ea:ff:16:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:F3:27:89:22:CA:36:56:AE:B3:D7:66:DB:15:90:91:60:48:BF
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:dd:6e:15:41:91:24:83:6d:78:0c:e9:71:1d:fc:07:c5:e0:
         dd:cc:3b:3b:9a:c5:e8:b5:dc:04:66:fa:34:dc:d3:2e:61:c7:
         80:fb:92:0e:74:4b:81:97:81:3d:76:a4:87:1c:2c:ee:0a:3d:
         c1:cb:9a:f0:7d:60:1f:82:9f:d9:7d:aa:4e:64:d4:9b:1a:2c:
         a6:9b:a7:ef:8b:b4:cc:c2:60:f0:29:64:ff:cd:97:a2:f4:ac:
         83:a3:d6:d3:88:a6:e0:7e:7f:3d:e5:85:6b:1e:db:38:a8:fc:
         74:9c:c3:85:60:f1:8f:bc:c5:91:4b:97:ec:72:f9:e6:4e:93:
         2e:bb:fd:17:80:54:0f:c9:23:cd:47:99:92:7b:39:cf:63:2d:
         82:83:57:32:5e:df:8d:a7:b5:18:40:53:93:13:97:bf:ee:6a:
         73:8f:d2:23:79:17:52:4a:ca:60:ad:a9:39:78:ce:b5:85:12:
         39:1f:af:23:cc:c9:02:2a:cb:d8:bd:14:c0:36:ea:a7:11:22:
         39:fc:ed:c3:9d:e3:ec:5b:f0:d2:a1:4c:51:a4:d5:98:7e:0f:
         ba:9b:f9:84:16:f7:9c:fb:cf:73:82:8b:a9:a9:5b:9c:06:c4:
         c5:44:61:98:2d:e2:65:c7:c7:8b:1e:25:c1:37:28:0a:06:27:
         96:9c:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org