Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32322d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          80fTxogi1gLZzJ7dn92wi/hjCcm6dXaiNWCtptyvLRw=
Subject key identifier:   4B:01:B8:5E:86:F6:50:DC:6D:8F:C6:07:41:5F:4C:E9:2F:CC:23:90
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       28EAEAEE360B67A15275DCE01AD1B794D9BFE366
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3234203d3e20323636333438.roa
Signing time:             Fri 04 Mar 2022 16:34:25 +0000
ROA not before:           Fri 04 Mar 2022 16:29:25 +0000
ROA not after:            Fri 03 Mar 2023 16:34:25 +0000
asID:                     266348
IP address blocks:        170.239.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:ea:ee:36:0b:67:a1:52:75:dc:e0:1a:d1:b7:94:d9:bf:e3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Mar  4 16:29:25 2022 GMT
            Not After : Mar  3 16:34:25 2023 GMT
        Subject: CN=4B01B85E86F650DC6D8FC607415F4CE92FCC2390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:94:64:9a:51:da:ee:60:20:0e:f6:d9:04:
                    bd:46:7a:93:85:00:25:22:ab:9e:a2:e7:85:cc:60:
                    58:20:0b:f9:49:31:12:9f:ac:d6:3b:03:cf:15:33:
                    cd:08:ce:85:b8:46:a6:df:e4:30:e0:f6:50:42:7d:
                    31:2e:0d:a8:28:b2:27:dc:d1:03:b6:14:ab:c6:49:
                    cb:12:79:9b:f8:48:6c:88:6d:c0:56:32:2e:00:29:
                    59:99:f9:36:ef:85:f8:8e:73:5b:16:22:01:fb:4c:
                    55:4b:e4:0c:24:ae:7d:83:d8:2a:7c:40:e1:98:6e:
                    a7:0e:a7:b2:84:be:cc:b9:3c:8a:6f:67:65:b6:31:
                    69:0f:2a:d7:c5:68:61:c6:76:6b:96:a2:af:20:2a:
                    63:6d:2f:fa:93:c8:17:98:67:9c:bc:56:9d:30:b7:
                    c7:31:2d:09:3a:3b:5f:2f:01:b3:1f:e2:6a:00:4f:
                    ca:04:61:49:20:be:9a:02:06:bf:2d:d8:25:61:e3:
                    7f:eb:a4:f5:42:dc:53:07:b9:0c:64:cf:d7:b6:39:
                    97:e8:6a:79:c7:05:d3:e4:78:f8:e7:89:ac:31:80:
                    d4:d7:81:cc:d9:08:28:ac:23:1d:83:7b:9e:c5:9c:
                    c6:bc:81:42:1a:ed:20:36:c0:90:f4:ff:85:60:1c:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:B8:5E:86:F6:50:DC:6D:8F:C6:07:41:5F:4C:E9:2F:CC:23:90
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:db:03:8b:6c:3a:91:c4:be:a0:c0:b9:30:51:81:6a:9d:fd:
         8f:78:29:52:82:73:7d:18:16:6d:82:55:d9:4e:2d:85:f6:15:
         03:5e:7b:cc:51:0b:6f:91:e5:40:08:e5:9f:9b:0f:95:29:ac:
         10:af:56:78:84:88:65:31:b6:a7:49:88:22:11:a9:d3:cf:a3:
         54:29:62:25:8a:c3:f4:04:64:3a:e3:4b:a6:58:53:43:ea:63:
         69:ad:81:8b:2c:3f:bb:23:8c:3e:27:a2:f8:7c:b0:b6:4a:2d:
         0a:8a:d1:0f:59:78:87:cd:47:a9:34:60:de:da:16:7a:01:b6:
         fe:4d:42:8a:2d:b0:ed:c5:48:ed:8f:42:08:34:25:d8:3f:e4:
         22:48:34:d4:6a:b0:96:c6:be:f0:30:fd:20:55:e8:28:56:3f:
         28:cd:36:eb:60:f6:32:7b:73:22:e3:7b:3b:a8:e4:55:4f:88:
         ef:65:a4:08:82:9e:f1:c5:19:94:86:50:70:9b:a2:fb:df:21:
         91:74:98:bf:2e:8f:54:df:81:7a:03:2b:5d:b0:ef:36:24:d4:
         9b:09:58:7a:47:45:13:86:9b:59:1c:65:21:3e:f6:a0:78:45:
         49:8f:3c:0f:ba:a9:79:8f:6c:34:3d:b5:11:c1:4b:d3:ce:d4:
         9b:74:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org