Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36352e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          upuKeXjECtzhey2bq9MbQ9vJUtZka25Fsyrq/3HLFTc=
Subject key identifier:   F8:89:F0:15:41:1E:29:F6:9F:A4:CF:62:62:60:27:B5:5E:B6:91:6A
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       319A121EE5694AB3E3C982D16FCF08F0DCDBD928
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:20 +0000
ROA not before:           Sun 19 Mar 2023 13:21:20 +0000
ROA not after:            Sun 17 Mar 2024 13:26:20 +0000
asID:                     262514
IP address blocks:        170.80.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9a:12:1e:e5:69:4a:b3:e3:c9:82:d1:6f:cf:08:f0:dc:db:d9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:20 2023 GMT
            Not After : Mar 17 13:26:20 2024 GMT
        Subject: CN=F889F015411E29F69FA4CF62626027B55EB6916A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:bb:48:9f:f9:a8:21:6c:f4:01:70:a1:89:
                    04:32:86:56:e6:65:48:0e:1e:fc:71:4c:13:27:2a:
                    14:10:5d:38:d2:17:ff:e4:b3:bc:0f:da:17:48:31:
                    ed:ca:0f:90:c8:37:90:2b:96:18:70:9c:8c:76:7d:
                    f4:39:79:c0:e4:aa:f8:b2:df:f0:1b:e2:ea:8f:28:
                    d8:6d:d0:22:ae:62:d9:39:3c:92:93:08:8c:ea:fe:
                    db:ef:c5:f4:23:c4:c2:eb:40:bd:33:59:8c:a7:59:
                    4c:cd:9d:34:9d:7f:36:a8:68:3a:0d:b0:93:02:78:
                    d1:4b:06:e9:06:f0:91:05:07:1d:4f:c6:f4:51:1d:
                    4f:9a:4a:11:28:58:ab:37:4a:56:9e:98:b7:83:22:
                    82:44:08:58:34:b3:9c:89:2a:90:24:97:76:b8:68:
                    52:97:07:e9:7c:6f:cf:bc:1b:8e:50:88:b8:3e:51:
                    f7:03:64:5b:ac:a4:f7:94:0c:3e:91:c3:c3:43:ea:
                    2a:bd:e7:70:35:87:12:d8:33:3f:06:0e:1f:39:37:
                    68:cd:53:cf:e1:4e:47:31:d1:ec:a5:06:b1:8d:3c:
                    ca:66:28:95:6f:16:3a:33:3a:4c:42:f0:ed:d2:67:
                    7b:74:cf:1a:8a:9e:2c:55:97:cf:2a:17:4c:c3:80:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:F0:15:41:1E:29:F6:9F:A4:CF:62:62:60:27:B5:5E:B6:91:6A
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36352e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:38:13:8e:ca:84:03:90:2d:52:99:5d:29:eb:fc:9f:fe:da:
         d2:4a:3c:f1:f9:9c:8c:8c:ef:8f:a9:45:f0:5e:0f:db:4d:2a:
         6d:5b:c6:7f:9c:77:c7:c4:c7:22:9c:af:4f:1a:73:1f:0c:ee:
         ea:5d:c5:a1:a5:7b:41:7d:a4:aa:97:7a:a7:76:dc:c4:59:a1:
         1d:ea:4d:b6:7f:c8:af:7a:0b:22:b9:46:69:70:f4:51:1a:b1:
         b6:00:8b:da:88:5f:80:0a:a8:25:e0:b7:34:dd:88:1d:04:17:
         dd:bf:ec:27:65:df:6c:4c:91:5e:83:c5:f7:55:74:07:4a:93:
         81:2f:9b:68:83:3f:2a:b4:c0:53:f1:32:b0:70:84:a9:e1:8b:
         66:c4:57:e3:4d:a1:3a:77:e2:1a:4a:c0:d8:fe:c0:72:11:71:
         40:6f:8e:cb:af:58:cd:e0:80:1d:ec:42:1c:10:4a:15:99:9e:
         1f:47:b5:f7:bc:71:b7:1b:82:42:1e:d1:7f:4b:a4:18:a1:d0:
         9e:9b:e4:2e:01:88:be:ba:d9:a1:42:51:7c:71:29:eb:8a:7b:
         56:38:32:08:fb:48:06:23:bf:d3:4c:ae:a0:08:70:cb:b1:ee:
         fd:9a:fe:c2:90:f3:64:3b:4a:73:0b:b7:5d:78:8a:08:b2:08:
         f1:fb:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org