Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
File:                     3137302e3235342e382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          8r0nGaQbk7MM8CyzA+6wOHSRx5FyowSoo8GI/zkiZ60=
Subject key identifier:   41:CD:FC:BE:F3:D7:0F:F5:22:98:73:6A:58:CD:50:74:68:B0:3D:CB
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       61B18B8B658B14129DBB169EA081211B3640999F
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
Signing time:             Mon 29 May 2023 16:14:05 +0000
ROA not before:           Mon 29 May 2023 16:09:05 +0000
ROA not after:            Mon 27 May 2024 16:14:05 +0000
asID:                     52573
IP address blocks:        170.254.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b1:8b:8b:65:8b:14:12:9d:bb:16:9e:a0:81:21:1b:36:40:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: May 29 16:09:05 2023 GMT
            Not After : May 27 16:14:05 2024 GMT
        Subject: CN=41CDFCBEF3D70FF52298736A58CD507468B03DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4d:61:f1:ba:7f:28:69:b1:ba:a4:6c:77:a8:
                    54:c4:95:fe:74:b6:d4:41:f5:4c:e0:07:bf:00:50:
                    f7:1f:91:6f:6a:07:8c:20:e2:0c:60:c2:f3:41:ba:
                    43:81:d1:5c:5a:c9:b4:fe:20:f7:08:2f:d4:e8:62:
                    dc:a9:a7:6f:44:47:a2:01:8a:f7:07:51:88:69:ce:
                    52:a5:63:3a:9b:e7:42:3c:30:ef:f3:76:0b:0b:2b:
                    03:13:79:31:4d:71:28:b8:02:96:3b:d4:75:a4:0a:
                    09:fa:a8:a7:2f:e5:d2:f7:e1:ea:aa:f4:16:43:20:
                    1d:fb:80:32:f0:3e:79:c0:28:5b:76:c2:11:30:ba:
                    5d:b9:8c:6d:44:45:18:78:27:26:33:35:26:f5:36:
                    83:ab:ef:36:95:78:c6:4c:41:48:03:68:74:e2:9f:
                    d5:0e:71:e3:be:b8:92:60:6b:73:c3:83:97:7c:06:
                    75:8a:1c:ff:c3:dd:cb:ac:e9:97:bf:f7:6c:ae:aa:
                    e6:34:09:72:b5:ee:27:c0:c2:29:23:c2:29:7b:66:
                    b6:54:f5:c8:06:4e:3f:6a:5e:d2:28:83:d5:05:e9:
                    3c:38:04:91:4e:ad:0b:1f:ab:05:df:0d:a2:c6:22:
                    1a:e8:6c:57:9c:92:74:b7:30:ff:0f:9b:63:54:5a:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:FC:BE:F3:D7:0F:F5:22:98:73:6A:58:CD:50:74:68:B0:3D:CB
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:71:45:7a:52:4a:28:43:30:a0:dc:bc:15:a8:c2:82:22:57:
         29:7f:25:f0:4b:92:00:b4:77:34:ef:34:b6:62:73:f3:6e:9a:
         9e:71:63:55:38:aa:57:3e:6d:1d:f3:b9:23:78:55:ce:41:96:
         3e:00:76:b8:50:e5:f6:7b:0d:45:f0:66:8a:be:00:9d:c9:85:
         cd:47:99:39:dd:54:65:d6:f4:d8:a9:54:a1:e4:72:b0:36:a9:
         71:55:3f:bb:57:84:aa:fe:5a:2c:63:7f:ba:58:d8:ce:d1:4e:
         0b:8b:71:1b:d4:85:2f:c1:c9:56:45:bc:83:6f:fb:aa:c8:8b:
         1e:80:2b:4c:1f:32:3a:ae:c0:24:9b:90:45:06:84:55:7c:b7:
         19:83:22:70:18:35:14:55:59:e4:d9:99:4b:63:2e:c2:19:8c:
         e7:53:0c:d9:67:d5:56:de:ab:3b:2e:bd:36:d6:97:c2:69:f4:
         a3:f5:39:92:e3:88:16:d7:76:b4:37:55:88:df:6e:66:ad:a0:
         78:16:7b:ad:a6:60:b9:4b:d3:fe:20:30:00:06:be:b3:cd:7b:
         60:1f:f7:3d:2c:e5:7f:5c:c8:56:c7:e3:78:f0:58:f9:ba:b7:
         0b:22:49:d2:af:77:7c:a0:5d:82:e9:63:a7:0d:6e:6d:4e:34:
         b9:10:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org