Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          h0xFzbKbnu4r1qP0TGt5/a0Ipd+5eCpscp9GVvO4wQg=
Subject key identifier:   22:20:68:87:A2:16:FA:C5:1B:1B:2B:85:9E:7B:9E:96:3A:AA:05:E2
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       444397B7F544C38A4CEF759958C83E1FAFDA46AA
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:48 +0000
ROA not before:           Thu 04 Apr 2024 12:30:48 +0000
ROA not after:            Thu 03 Apr 2025 12:35:48 +0000
asID:                     262485
IP address blocks:        170.238.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:43:97:b7:f5:44:c3:8a:4c:ef:75:99:58:c8:3e:1f:af:da:46:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:48 2024 GMT
            Not After : Apr  3 12:35:48 2025 GMT
        Subject: CN=22206887A216FAC51B1B2B859E7B9E963AAA05E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:b4:7b:c2:4c:1f:c7:ac:ca:10:f1:b0:f2:
                    cc:8d:f5:57:35:97:46:ee:85:e3:a6:72:db:bb:49:
                    33:94:ac:df:74:a7:0c:8a:ef:c0:d3:b0:92:0e:2c:
                    cc:61:23:af:4f:81:d7:70:8a:48:3b:03:aa:59:e6:
                    a0:87:bb:15:10:db:a1:43:40:32:db:fa:cc:21:d6:
                    79:11:23:66:4d:18:c9:fe:5a:81:e4:78:56:0c:02:
                    99:02:6b:c9:ae:04:c7:c9:31:83:3d:85:5e:ff:70:
                    c7:9e:b4:d0:e6:52:5d:8b:9d:14:6c:47:a3:52:83:
                    25:45:df:38:60:54:79:93:a9:95:2b:86:0e:41:cc:
                    d6:0c:80:70:54:ff:40:d6:1b:50:73:a5:1e:df:d5:
                    a4:04:bd:0d:aa:26:37:81:5a:47:bf:04:be:68:36:
                    ae:3d:f8:86:8f:53:74:f6:f5:db:8b:c7:f8:8d:bc:
                    73:1c:81:ba:98:31:27:fe:ce:eb:7a:29:02:5b:74:
                    75:c1:a2:bb:66:84:78:8d:57:db:54:a2:1c:1b:99:
                    68:39:cf:0b:eb:76:4d:28:6b:92:e8:56:4c:e9:b0:
                    dc:3a:6f:d2:bb:93:e2:bb:27:60:ce:b4:b0:46:f4:
                    b1:93:05:20:09:44:77:82:a1:c7:58:39:1e:4c:78:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:68:87:A2:16:FA:C5:1B:1B:2B:85:9E:7B:9E:96:3A:AA:05:E2
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:32:ba:62:db:5c:fe:15:a7:c9:dd:c6:f9:a9:a6:dc:68:
         4f:3b:4a:ca:6b:72:16:c5:22:e6:b7:97:d4:a5:6c:69:de:84:
         90:b4:42:50:bc:63:49:7a:55:c1:d8:c0:a4:47:ae:ca:07:b7:
         71:9a:95:45:0e:6c:91:c3:75:5d:fd:b9:fb:09:67:ff:76:b9:
         60:e1:a2:48:91:f9:42:e4:e5:d3:e5:c2:7b:cf:56:7f:9d:ea:
         cf:d6:7d:5e:37:22:76:f8:4f:ac:f0:cc:2d:3c:7a:25:cd:bc:
         88:c6:15:ec:12:10:e0:bd:88:db:6f:ea:63:40:00:9b:43:42:
         77:04:fe:52:e9:fd:8c:77:5d:f5:51:ce:97:46:b0:55:59:ae:
         77:37:26:6f:f5:64:05:09:3b:f2:c2:d0:0e:3b:a8:8f:15:ba:
         b3:06:ec:c9:54:e4:08:56:2b:1d:b4:90:49:ca:0c:de:83:40:
         85:b0:2c:57:cc:14:f5:01:30:70:52:1e:1a:e8:7e:1c:cd:18:
         fa:2d:6b:46:6e:b7:86:79:45:3f:2e:26:61:d5:55:1c:40:15:
         94:65:62:b2:05:fb:30:99:6d:36:c0:88:64:ac:62:25:7d:5a:
         e6:73:24:bd:90:55:d5:e7:3c:11:f5:86:01:95:5c:80:ae:db:
         2d:6b:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org