Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa
File:                     3137302e3234352e382e302f32322d3234203d3e20323636353139.roa (raw, json)
Hash identifier:          DKhrzm8gQSjY9M0UybWROpYwI390PWOOvtyURGxWIV8=
Subject key identifier:   AB:5A:CF:C7:29:B0:45:BC:6E:5E:A3:4F:E1:D4:7B:DF:CD:4D:68:AB
Certificate issuer:       /CN=3B1DCB1E2F97CA111572D90416CD86C22F0C9283
Certificate serial:       671860170AD3FA537735C1CFD2788EFC08A008F0
Authority key identifier: 3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa
Signing time:             Wed 24 Apr 2024 22:01:47 +0000
ROA not before:           Wed 24 Apr 2024 21:56:47 +0000
ROA not after:            Wed 23 Apr 2025 22:01:47 +0000
asID:                     266519
IP address blocks:        170.245.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:18:60:17:0a:d3:fa:53:77:35:c1:cf:d2:78:8e:fc:08:a0:08:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1DCB1E2F97CA111572D90416CD86C22F0C9283
        Validity
            Not Before: Apr 24 21:56:47 2024 GMT
            Not After : Apr 23 22:01:47 2025 GMT
        Subject: CN=AB5ACFC729B045BC6E5EA34FE1D47BDFCD4D68AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:83:b2:89:32:cf:ae:32:d1:bb:dd:ad:5b:
                    6a:89:14:96:92:8c:81:9a:be:ae:e2:6f:92:55:7f:
                    7d:2d:48:5f:25:6a:a4:9e:60:4f:9a:48:35:20:51:
                    9e:7e:69:d6:4a:cd:8c:07:55:ec:86:87:ef:bb:68:
                    f1:9e:2f:68:06:80:a1:66:9d:d3:4f:7d:8b:ed:17:
                    4d:aa:7b:1d:9f:f5:c9:ab:af:98:1b:4c:c6:01:30:
                    4e:7d:07:59:b6:af:df:14:50:3f:31:d1:a6:4e:ac:
                    ed:5f:cc:ef:bc:18:3a:e5:08:46:67:42:e8:4a:b0:
                    08:f3:6b:8b:69:fb:53:c6:88:47:ba:84:71:83:f6:
                    6e:78:10:9e:c7:d2:93:bc:19:10:9d:5d:c6:78:b8:
                    82:29:a1:37:9e:15:6a:d5:6b:31:72:bc:5f:2c:ad:
                    1d:45:19:bd:55:2d:c1:8e:ca:bd:06:af:57:24:23:
                    64:e0:a2:f1:52:28:b4:6e:03:70:16:e7:2c:fd:c6:
                    17:a1:3a:46:02:67:23:a9:ef:40:2c:25:6a:54:34:
                    77:8e:1d:d1:5e:c9:83:fa:d0:4f:2f:98:55:61:04:
                    8c:4b:9a:d6:3c:c9:4e:e8:f1:7a:be:08:20:dc:fd:
                    51:a8:b9:6e:31:ca:7e:5a:78:83:2d:ee:f7:19:b1:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5A:CF:C7:29:B0:45:BC:6E:5E:A3:4F:E1:D4:7B:DF:CD:4D:68:AB
            X509v3 Authority Key Identifier:
                keyid:3B:1D:CB:1E:2F:97:CA:11:15:72:D9:04:16:CD:86:C2:2F:0C:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1DCB1E2F97CA111572D90416CD86C22F0C9283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/2/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:1b:d8:86:40:09:3d:0c:80:e0:b4:ea:f5:01:a4:77:49:a2:
         5f:06:d2:96:d6:34:48:3c:4d:3a:84:b1:75:0e:32:71:c5:c0:
         de:54:0f:e9:a8:30:03:40:04:45:28:5f:7c:35:35:48:a7:0b:
         95:10:e8:87:c4:74:df:31:98:73:5e:d3:58:e9:a9:a5:c8:df:
         aa:a6:03:d3:e9:79:52:88:5c:f7:be:cc:7b:e3:24:71:77:fa:
         36:3e:cc:bf:36:ea:c7:d9:32:4b:69:34:59:a5:53:f7:8c:cc:
         df:fb:31:36:16:4b:b0:30:d4:96:98:84:2e:a8:7f:75:c3:bf:
         a9:57:64:79:1f:72:22:7b:e5:b8:6a:14:3c:db:e4:fe:e7:37:
         a4:a5:98:03:01:53:ac:0e:15:27:69:e4:2c:ea:7e:fe:77:14:
         8f:fd:f6:7c:56:7c:7a:29:19:45:58:36:05:02:00:d6:37:75:
         d8:b2:90:91:8e:ed:bc:62:79:5a:ab:46:ac:89:5a:6c:35:5f:
         f8:79:55:df:15:a9:4d:e0:d6:6f:0c:15:06:72:09:44:f3:8e:
         c2:25:0c:ed:ea:11:0e:b0:17:6d:3a:4a:66:06:90:ca:9e:38:
         95:b2:e7:84:ad:29:b0:1b:89:9e:e3:3b:9d:0e:21:a1:7b:d5:
         66:f5:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org