Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32332d3233203d3e20323634303232.roa
File:                     3137302e3234352e3137322e302f32332d3233203d3e20323634303232.roa (raw, json)
Hash identifier:          GyaBuV10Q8J5XG9pJUZ+1oJsR75hUKsZd4CMHbIVFns=
Subject key identifier:   70:58:90:1B:67:37:98:1A:8D:35:D1:9C:44:42:11:C2:ED:BC:83:78
Certificate issuer:       /CN=08CF95B96B5DA80570E1CFE1518C8E0519AB0869
Certificate serial:       1238668E22441981815972CB404DF804FE32928B
Authority key identifier: 08:CF:95:B9:6B:5D:A8:05:70:E1:CF:E1:51:8C:8E:05:19:AB:08:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32332d3233203d3e20323634303232.roa
Signing time:             Mon 13 Jun 2022 22:14:57 +0000
ROA not before:           Mon 13 Jun 2022 22:09:57 +0000
ROA not after:            Mon 12 Jun 2023 22:14:57 +0000
asID:                     264022
IP address blocks:        170.245.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:66:8e:22:44:19:81:81:59:72:cb:40:4d:f8:04:fe:32:92:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF95B96B5DA80570E1CFE1518C8E0519AB0869
        Validity
            Not Before: Jun 13 22:09:57 2022 GMT
            Not After : Jun 12 22:14:57 2023 GMT
        Subject: CN=7058901B6737981A8D35D19C444211C2EDBC8378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:75:a6:de:62:e5:46:fc:88:ac:9d:43:52:
                    7f:e5:e6:fe:8a:97:9b:3e:25:da:02:d6:42:60:b3:
                    73:bc:78:7d:cd:62:ab:24:3b:d0:d1:a9:09:b1:e3:
                    16:36:32:7d:5e:70:02:71:4a:56:f4:28:32:f0:86:
                    a1:db:ef:0d:cf:ae:8a:78:61:b8:a9:fb:27:4e:c6:
                    9c:2b:6d:c3:8f:7f:27:aa:7b:be:f5:eb:7f:80:a3:
                    b0:55:c5:d7:91:dc:3d:79:da:5b:f5:6a:1e:05:c6:
                    3c:52:fa:c3:a2:a6:18:de:8a:c9:50:50:f6:cd:ce:
                    54:4e:17:21:b0:15:88:cd:7e:ee:e5:01:25:ae:ba:
                    e5:4a:6a:84:66:d9:79:e3:f7:b3:90:42:38:d6:df:
                    e5:24:2d:cd:1c:34:f9:d9:df:30:7d:0b:13:c3:7d:
                    a8:4c:1a:c2:21:98:a8:67:41:83:22:dc:20:3d:34:
                    e2:e6:8d:a1:68:1a:05:c9:56:cd:8c:80:00:17:59:
                    6a:0b:24:b1:f5:14:72:bc:7e:1e:93:6d:9f:33:9c:
                    e1:4e:4e:1d:1f:fb:aa:ec:41:b5:8d:b5:46:bc:f1:
                    05:dc:35:08:c0:19:0c:3d:36:06:78:52:aa:fb:02:
                    59:c8:27:8f:00:f7:d2:1a:da:40:d5:86:42:32:4e:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:90:1B:67:37:98:1A:8D:35:D1:9C:44:42:11:C2:ED:BC:83:78
            X509v3 Authority Key Identifier:
                keyid:08:CF:95:B9:6B:5D:A8:05:70:E1:CF:E1:51:8C:8E:05:19:AB:08:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08CF95B96B5DA80570E1CFE1518C8E0519AB0869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32332d3233203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:21:a9:d5:1f:ba:ed:a2:1c:bc:8e:c8:94:fe:88:7d:e0:44:
         c4:5b:17:64:e6:2a:70:f6:9b:68:0b:fc:46:ce:79:2e:1c:82:
         1e:ce:37:c8:e9:c6:ac:16:a9:c0:a6:01:57:76:3c:34:8b:94:
         f5:8a:3d:b5:9a:bd:1b:ab:e6:89:f2:86:dd:2a:bf:f0:75:2b:
         18:0e:20:c4:ac:3b:38:c0:84:c9:a0:a7:f6:53:73:58:da:3a:
         2c:79:4a:f4:31:78:7c:59:16:16:3d:a6:d2:4a:2e:f6:7d:7c:
         20:cf:b7:2d:eb:6c:45:b9:b5:da:bd:c3:9b:23:e7:db:78:2b:
         54:d8:7f:d9:6b:c1:74:5d:ca:6b:76:d6:8a:a6:34:30:dd:c1:
         31:8f:d0:5a:c1:58:78:e6:3c:55:9d:b2:b0:84:ea:94:7d:d0:
         9a:17:38:ee:e4:13:0e:50:1d:8e:79:89:d2:f3:18:5c:70:68:
         fe:3c:29:b6:77:eb:a2:7b:c5:ad:79:46:b0:94:f1:8c:3f:3a:
         44:cf:d9:be:07:98:07:7b:47:4c:a9:b9:d2:b4:b7:87:82:54:
         87:f5:2b:6b:4d:42:0d:94:3c:e7:4f:13:86:52:4e:02:67:2e:
         0c:ed:8a:e9:73:bf:21:bd:ff:47:23:f8:8d:c4:76:1f:7c:de:
         a7:07:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org