Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323636343533.roa
File:                     3137302e38332e33362e302f32322d3332203d3e20323636343533.roa (raw, json)
Hash identifier:          b0eFW6yUCeknMf4XXMbJlG5JNunLLiKOY4z7w4lcpPw=
Subject key identifier:   6C:86:5C:6E:50:BE:84:49:A5:7D:50:D7:CD:FC:D9:77:73:5C:AA:88
Certificate issuer:       /CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Certificate serial:       1D178A6A3B12F6C7D592A124FE2E9B0356CCDC9E
Authority key identifier: 54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323636343533.roa
Signing time:             Thu 22 Feb 2024 13:09:24 +0000
ROA not before:           Thu 22 Feb 2024 13:04:24 +0000
ROA not after:            Thu 20 Feb 2025 13:09:24 +0000
asID:                     266453
IP address blocks:        170.83.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:17:8a:6a:3b:12:f6:c7:d5:92:a1:24:fe:2e:9b:03:56:cc:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
        Validity
            Not Before: Feb 22 13:04:24 2024 GMT
            Not After : Feb 20 13:09:24 2025 GMT
        Subject: CN=6C865C6E50BE8449A57D50D7CDFCD977735CAA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:a4:c3:32:a2:03:9d:a9:33:73:5b:39:bb:
                    eb:d9:dc:3e:af:d2:87:c9:6b:c6:1a:0a:02:74:58:
                    c8:e7:76:f1:bd:48:13:19:c2:3b:26:33:47:c7:e7:
                    a3:87:0e:85:8f:81:19:21:43:f9:07:58:64:0f:97:
                    94:42:73:aa:99:29:72:96:76:95:75:f8:a6:fb:c9:
                    ad:51:0e:e8:2b:4c:c3:c4:7f:d5:de:b4:21:19:6d:
                    cb:f4:04:99:3e:79:63:ab:bd:87:7a:2f:b2:b1:94:
                    3c:37:51:4a:5d:47:0c:2e:1d:b5:e2:bd:27:1e:4f:
                    fd:0c:93:83:de:d1:ef:a6:1b:78:9c:ff:5a:21:a7:
                    cc:52:27:27:29:ef:02:c4:f0:d5:ab:f7:02:0e:6e:
                    4c:d1:7d:44:9c:d2:cc:f7:74:ec:e8:b5:cd:5f:2c:
                    1f:62:d4:46:20:72:69:56:a2:3c:dd:0a:76:65:d1:
                    3a:4b:c7:b4:c6:29:57:a8:53:d0:6d:06:fe:9f:54:
                    72:d6:b7:81:5b:1f:9a:3a:40:81:9c:97:ff:60:99:
                    40:2f:cc:d2:03:d4:b6:5d:b9:da:a8:82:4d:10:41:
                    5d:de:11:6d:33:9b:c5:6e:f4:aa:49:66:7d:a7:d1:
                    55:29:de:db:8b:c1:1b:8b:6f:0a:fb:24:5b:bb:95:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:5C:6E:50:BE:84:49:A5:7D:50:D7:CD:FC:D9:77:73:5C:AA:88
            X509v3 Authority Key Identifier:
                keyid:54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323636343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:b0:69:64:a3:92:9c:06:70:b4:6b:70:2d:86:7a:65:2f:
         c1:06:31:5e:ca:2a:e8:79:14:f9:f2:8e:cf:62:b6:bc:1a:d7:
         83:6e:c6:5d:a2:a3:53:c7:ab:ae:df:89:c7:9b:de:94:b0:41:
         57:7a:33:6f:31:4b:1a:89:90:e4:10:83:39:77:ff:3f:64:e8:
         5c:47:ac:17:09:41:06:31:66:e1:06:85:0c:94:99:1a:2e:7b:
         cb:3c:b6:bc:c2:12:bf:31:87:e4:44:08:a6:84:8f:d6:07:06:
         d5:79:3f:93:b9:53:6a:97:75:64:f8:8a:fa:30:73:1d:41:94:
         3f:38:7d:6a:e9:3a:da:d0:86:34:26:e6:cb:61:47:a2:53:58:
         81:ed:a6:09:47:8d:30:6f:c4:7a:53:95:e2:d9:37:7b:0f:93:
         7b:bd:f0:19:bc:e4:08:15:5e:d3:d3:2d:32:e1:63:99:52:3e:
         e3:e9:82:77:3e:e4:f3:94:76:82:46:8c:fa:f9:44:27:43:2c:
         f5:ce:7c:48:8c:0c:b7:82:a3:52:64:74:ed:85:98:98:f9:30:
         21:f0:46:70:68:8a:ea:af:04:c7:2e:82:40:51:6d:8c:35:3a:
         02:b8:ac:b5:ba:a4:f2:8f:7f:a8:1c:70:71:ae:f5:85:42:fc:
         38:98:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org