Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
File:                     3137302e3235342e382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          ulbhcgBuk9t0cRDSIBgTf8EsC6z6yD8Ma58thpLUWTU=
Subject key identifier:   EC:8A:0D:21:55:4C:56:57:97:AA:AF:87:93:A9:5F:C2:7B:E2:63:C4
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       5B0EECD91CA6ADAF0AA49630A102C5AF5ACB04E5
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        170.254.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0e:ec:d9:1c:a6:ad:af:0a:a4:96:30:a1:02:c5:af:5a:cb:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=EC8A0D21554C565797AAAF8793A95FC27BE263C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:23:0f:8e:df:f7:60:71:8f:a4:e1:d6:e8:
                    23:8e:0e:3e:ed:9c:ba:3b:07:2f:73:c1:17:dc:fb:
                    e2:75:c2:c0:af:36:3f:74:a4:98:ef:30:40:f2:47:
                    31:9b:fb:b6:ac:a3:be:3f:8b:cf:6e:8d:3d:ea:71:
                    5b:ad:e6:57:5b:31:11:f8:09:92:d9:4b:46:f5:f1:
                    a1:1e:15:76:fa:50:4a:47:60:70:f6:8c:4e:c7:ed:
                    6e:c1:62:9a:8e:68:74:77:a0:c5:09:ae:f0:05:d7:
                    ce:65:e5:99:d0:0b:74:18:1c:1c:5d:7d:e6:50:7b:
                    e9:53:2b:7d:18:98:83:ba:4b:82:40:b9:a0:ad:a0:
                    29:4d:05:3b:a1:40:a4:ec:9c:a8:36:9b:31:fb:e2:
                    fd:2c:0c:d1:a0:7a:59:9c:08:fa:ae:fc:9a:e5:3e:
                    c4:d2:f2:88:12:42:c4:b3:54:f1:88:c4:d2:c6:5c:
                    b1:c0:a6:4c:ac:e9:ca:ce:06:a7:03:3e:a4:05:fb:
                    34:3a:2d:7e:30:2e:13:ec:6e:53:55:1c:4c:b4:90:
                    22:fc:37:45:72:19:a6:a5:20:41:c9:dc:a1:78:3c:
                    ae:aa:22:60:12:39:a4:b6:55:cd:83:f6:2e:01:96:
                    70:ff:30:f2:25:de:b6:10:63:ae:51:80:46:1b:b3:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8A:0D:21:55:4C:56:57:97:AA:AF:87:93:A9:5F:C2:7B:E2:63:C4
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3235342e382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:b6:68:85:df:a9:58:22:3f:c5:1f:c3:64:ab:b2:20:a1:
         61:4b:cd:ee:4b:bb:fe:1e:80:75:eb:58:33:ba:dc:99:3c:5f:
         91:3c:83:7e:2b:9c:ee:c2:57:c9:d6:d1:d4:1d:e9:29:22:32:
         5d:53:e3:23:2e:c0:28:cb:08:27:b4:be:c2:68:27:89:e8:f0:
         6c:ad:d3:43:58:fa:8a:ee:80:0c:51:c8:1a:ff:7a:1d:87:d1:
         4a:25:ec:c7:6e:38:d8:50:2a:1e:e3:a9:5d:7f:94:67:cd:63:
         46:47:25:46:3c:63:f9:00:13:5e:29:79:f0:a0:6e:78:61:0d:
         18:9f:c7:14:be:4a:d2:7a:fd:33:bf:c8:31:c1:12:a8:e9:14:
         02:d4:e7:2d:9d:b4:35:9a:4e:31:29:36:48:1f:b8:81:91:75:
         8c:6e:b0:64:87:4a:0f:12:72:b7:1a:8f:c1:52:f7:95:23:69:
         33:70:4b:a1:9a:4e:0a:77:f0:fd:72:5a:a3:09:a0:71:db:e8:
         f1:76:3e:bc:71:21:59:5f:df:cd:d6:49:48:7a:2c:56:d4:6c:
         56:5e:a0:d1:6c:57:65:3a:9f:88:fd:0a:8c:39:f5:50:55:a1:
         7f:49:5a:70:59:a4:df:e1:56:61:90:7c:97:fa:e5:9e:c2:ea:
         3a:5b:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 02:17:08 2024 by rpki-client on console-fra.rpki-client.org