Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa (raw, json)
Hash identifier:          +41fqiXEoUOJ6DKuv44sqhavxlpy/yr/KSKaf+Ehe8c=
Subject key identifier:   17:29:5C:33:CF:68:AE:20:C4:C8:C8:8B:B2:BC:86:11:98:47:1C:15
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       115137B3889738DE858DE711C46A4D138BAEC60F
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa
Signing time:             Mon 20 Nov 2023 00:57:44 +0000
ROA not before:           Mon 20 Nov 2023 00:52:44 +0000
ROA not after:            Mon 18 Nov 2024 00:57:44 +0000
asID:                     266385
IP address blocks:        170.80.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:37:b3:88:97:38:de:85:8d:e7:11:c4:6a:4d:13:8b:ae:c6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Nov 20 00:52:44 2023 GMT
            Not After : Nov 18 00:57:44 2024 GMT
        Subject: CN=17295C33CF68AE20C4C8C88BB2BC861198471C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:5b:0e:43:b0:a9:d6:af:d6:2e:58:f7:b6:
                    28:19:a7:41:db:fb:9d:00:3f:85:62:a9:74:60:57:
                    9f:ee:e3:b4:c0:44:b4:cd:42:2c:08:92:ea:17:50:
                    aa:5e:94:ad:03:25:53:7e:a1:2e:31:b8:80:dc:80:
                    c0:74:9c:e9:61:46:39:53:be:83:39:96:56:00:f0:
                    f9:99:a2:fa:7b:63:ea:fc:3e:a3:94:a2:da:17:d0:
                    fe:d7:61:c8:a9:ee:f2:81:c2:b8:51:e0:ae:2b:80:
                    d3:7e:dc:e1:7a:68:06:a1:0b:f5:b3:b2:d2:5b:8d:
                    49:ed:50:0c:93:ba:37:6f:bf:88:5c:5b:49:a1:74:
                    d5:56:ff:62:b0:d4:bf:22:f4:14:48:94:e5:e8:32:
                    4c:54:7a:9f:c0:8d:7a:15:a3:3a:64:29:45:0f:52:
                    1b:e1:53:87:52:aa:da:01:0c:b6:e2:85:10:da:7b:
                    8f:b2:75:23:45:81:55:fc:d5:84:87:ce:2b:59:5b:
                    e0:d2:33:ec:6f:09:fa:5b:80:4c:1c:a6:83:44:9a:
                    23:55:3d:a3:8b:a6:7c:83:43:4c:51:96:68:4e:fc:
                    0b:87:a9:13:37:c4:5a:e6:b5:6a:bf:a6:b2:20:43:
                    b0:5d:3c:c1:db:61:a0:42:55:b9:94:c4:8c:dd:fb:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:5C:33:CF:68:AE:20:C4:C8:C8:8B:B2:BC:86:11:98:47:1C:15
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:d2:f2:79:c9:6b:cd:54:cf:06:76:30:9b:a8:3f:7c:eb:97:
         96:37:af:b7:ee:d3:c0:0a:35:ec:98:98:e5:6c:65:bd:4b:76:
         ff:29:ab:4f:8d:e0:2c:09:6d:57:77:01:36:f8:d8:b8:6c:de:
         25:8b:4c:42:84:b1:80:b6:90:5b:a2:54:a2:04:e1:96:ad:09:
         3b:98:29:8a:98:f4:99:18:86:03:ef:02:d2:38:a9:82:60:fd:
         c1:12:f2:e8:0c:0a:2e:a8:1b:2d:4c:16:fd:37:50:cf:f3:25:
         c0:f7:8b:b6:9c:8f:7d:a1:d8:2a:70:f7:d3:c7:8b:80:32:7a:
         cb:1c:33:f8:92:6e:f2:45:0f:c3:3e:0f:c5:e5:25:48:79:4a:
         76:df:c1:a5:e2:38:82:68:aa:ef:59:ec:2a:be:11:6b:50:21:
         43:87:7f:6f:8b:3c:05:4d:83:18:69:e3:c9:4a:2f:c7:52:ec:
         81:1a:df:76:5c:f7:68:16:34:38:f3:d9:b4:5e:fb:87:53:d7:
         dd:4f:d0:7b:82:98:ad:6b:e2:7a:63:49:dd:39:2e:7d:9e:6a:
         5a:80:3d:cf:e2:01:5e:f8:f1:6b:3e:2f:a3:17:9a:e9:8c:5b:
         4d:23:70:43:e0:52:14:61:ff:34:62:29:6e:07:4b:fa:6e:fb:
         0a:a3:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org