Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36372e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          wUvgkRcOjuznzb1BZQUuwLfDqalSVAei6WukMSnrxJ0=
Subject key identifier:   0B:4E:E3:4B:07:F2:97:8D:F8:48:33:7F:96:DA:8F:BE:93:A0:E3:8A
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       35850344574CB127DFC11E197EF93DAC932D5C11
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 14:21:06 +0000
ROA not before:           Sun 19 Mar 2023 14:16:06 +0000
ROA not after:            Sun 17 Mar 2024 14:21:06 +0000
asID:                     262514
IP address blocks:        170.80.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:85:03:44:57:4c:b1:27:df:c1:1e:19:7e:f9:3d:ac:93:2d:5c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:16:06 2023 GMT
            Not After : Mar 17 14:21:06 2024 GMT
        Subject: CN=0B4EE34B07F2978DF848337F96DA8FBE93A0E38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:2a:95:94:d3:e7:89:4f:e8:2f:34:9f:6d:
                    ad:94:50:70:69:d8:e2:c4:04:b4:82:6f:0b:a4:c8:
                    ae:25:87:75:17:67:75:4f:da:2b:cc:32:4e:0e:00:
                    9b:10:2a:10:3f:53:57:0d:b1:5b:79:04:d4:e9:f7:
                    27:c5:e7:17:d9:f7:86:c9:f2:0a:b1:b7:39:95:4d:
                    9a:06:bf:8b:0f:35:1a:07:44:9e:e0:4a:8a:51:6c:
                    9d:a2:f2:c8:1d:06:83:a4:b8:d8:f5:cf:22:94:81:
                    2c:cf:75:7b:42:b0:0e:11:20:cb:0e:3c:58:ea:ff:
                    6b:7e:c9:14:f7:88:1d:a2:a5:a0:5c:ff:91:6f:d3:
                    02:fb:ac:74:93:bb:77:6c:dc:b1:28:87:51:98:ac:
                    c2:03:56:94:74:82:35:fa:e3:60:be:41:8e:18:6b:
                    4f:e2:7d:24:be:35:29:61:87:81:14:8f:8a:09:6a:
                    c5:60:84:f5:19:70:26:98:f9:10:c9:54:03:70:c7:
                    58:7b:a4:00:28:42:ed:14:7b:3f:e3:41:f3:19:9a:
                    ed:3d:99:f3:cb:45:a9:d7:ba:16:aa:6c:76:73:26:
                    5c:b4:e0:16:c8:a9:1e:4d:fb:e3:8a:98:0b:d4:2d:
                    b4:01:c1:ce:8a:6b:85:05:93:08:82:c2:7d:b1:44:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:E3:4B:07:F2:97:8D:F8:48:33:7F:96:DA:8F:BE:93:A0:E3:8A
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:08:c9:9b:3d:60:86:f3:ed:7e:58:aa:00:f4:b2:41:b3:68:
         54:15:52:a4:13:f9:a0:70:93:31:b5:e6:d5:ce:77:c5:47:cd:
         cb:6a:5f:09:ef:a4:c6:b8:d9:c9:a5:e4:0d:13:cf:7e:c8:b6:
         c7:e1:48:b9:c4:58:3b:03:3f:91:38:8a:e6:d5:e8:36:f3:58:
         af:ad:81:07:05:e9:85:4b:3f:4e:ef:d7:16:ee:fe:0d:16:4c:
         ff:a2:ee:85:1c:d0:05:d2:a8:49:80:dc:e2:c2:ec:a4:40:be:
         06:b9:bd:fe:f1:de:76:1b:cf:74:60:aa:37:88:75:3d:2e:7a:
         a8:ad:25:35:86:ef:d1:14:07:16:ee:d9:39:54:e2:04:52:0a:
         a9:58:61:dc:5c:0a:83:06:6a:41:22:79:4a:0d:07:9c:09:e3:
         9f:e0:44:a8:3e:68:c0:1f:ee:a9:7a:49:ca:a0:71:05:8d:c1:
         97:bd:b4:89:91:8f:15:ef:56:18:cd:da:af:aa:19:f4:95:30:
         1e:7d:cb:c4:2f:b0:2d:58:88:62:45:53:1b:d0:d8:fc:84:7d:
         68:00:ff:4f:48:99:71:b4:f5:82:dc:41:98:3a:06:38:98:7a:
         c5:5e:83:9d:b7:82:60:18:a6:f5:33:72:d0:89:e7:63:8e:86:
         67:fe:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org