Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
File:                     3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa (raw, json)
Hash identifier:          uoXYdfDsJup4R7i3NB5VZSxbZtJfwdFn+MtSuIwH+s0=
Subject key identifier:   E2:69:05:D6:52:C3:C2:96:1B:B3:C3:22:EB:89:CB:BD:51:A0:EC:70
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       7A9ECF4C5C4F2B89C15B901357A04CDF4901B0AA
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
Signing time:             Wed 20 Mar 2024 00:46:31 +0000
ROA not before:           Wed 20 Mar 2024 00:41:31 +0000
ROA not after:            Wed 19 Mar 2025 00:46:31 +0000
asID:                     266385
IP address blocks:        170.80.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9e:cf:4c:5c:4f:2b:89:c1:5b:90:13:57:a0:4c:df:49:01:b0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Mar 20 00:41:31 2024 GMT
            Not After : Mar 19 00:46:31 2025 GMT
        Subject: CN=E26905D652C3C2961BB3C322EB89CBBD51A0EC70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:a7:9a:0e:a3:84:be:f7:e9:05:da:e0:e5:
                    dd:c1:da:9b:17:6c:1d:58:38:8d:f6:09:96:d6:85:
                    6a:8a:38:18:d3:e0:77:0d:2a:64:47:0a:4e:9b:fc:
                    ba:db:4f:65:ea:31:b5:42:f7:7a:73:1d:39:65:d4:
                    11:91:6e:f3:fd:e8:7e:93:dd:99:4b:96:2a:40:19:
                    b4:0e:cf:69:79:8f:7a:f3:dd:55:ed:5d:e8:a8:b4:
                    34:13:d4:3f:89:ab:55:3f:a8:c9:49:bf:02:50:83:
                    86:10:60:97:91:b5:7e:89:9e:8b:14:4b:01:05:82:
                    60:58:af:f5:dd:c1:44:ad:25:bc:e4:10:0a:37:40:
                    da:c5:6b:4b:15:67:06:c4:c1:24:40:ae:48:2a:55:
                    80:d7:b4:64:a7:0c:fb:c9:fa:dd:21:63:a3:8f:02:
                    bc:67:c2:84:02:88:a6:5b:7e:98:15:50:c3:4a:02:
                    c9:b7:f7:0f:48:32:1d:b9:2e:08:c3:95:88:c9:16:
                    93:be:3b:bd:a7:f6:58:ca:09:90:c7:51:8b:e5:16:
                    68:83:d2:90:93:5b:18:65:bf:d6:42:5f:37:00:fb:
                    32:2b:74:dc:8e:02:87:13:44:b6:27:98:fc:13:c3:
                    76:46:ea:c7:b6:49:61:ae:01:74:b7:57:95:ad:f1:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:05:D6:52:C3:C2:96:1B:B3:C3:22:EB:89:CB:BD:51:A0:EC:70
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:36:82:fe:8c:4f:c2:6d:cf:45:59:bf:18:7c:d1:09:52:64:
         9e:8d:16:f4:df:7b:f4:c1:d4:86:e1:91:23:39:82:82:db:56:
         d6:18:a2:60:18:76:09:26:42:d6:a0:9c:3a:cd:ef:cc:0b:32:
         84:15:06:cd:fe:46:8b:c6:6b:8f:c6:8c:cf:cd:49:ff:09:bc:
         24:10:52:f9:2f:d7:c0:5d:9e:a6:e3:42:3a:0a:03:20:43:c9:
         78:5f:01:02:34:3c:b9:fa:09:09:5e:e2:90:90:ae:4c:68:b4:
         66:cb:68:57:84:d0:ed:41:2c:54:b3:95:75:5e:8b:4e:22:ab:
         d0:ec:c7:dc:7a:cb:e0:db:b6:e4:90:b2:07:ba:5f:ef:d4:87:
         0c:c2:1c:39:71:4a:02:14:7f:4e:82:f4:47:f9:05:95:38:84:
         97:29:ac:71:eb:92:30:12:c1:d5:15:76:b6:08:67:c8:a1:1c:
         a3:42:5a:fe:2d:bf:26:09:8d:2d:81:4b:b0:70:49:a1:25:35:
         83:7d:0b:df:19:70:e6:a3:eb:14:cf:f6:ea:74:3e:0e:63:34:
         62:23:aa:d7:47:e8:99:d7:bb:ff:66:ca:a8:58:4d:ff:ab:d8:
         fb:bf:21:95:6b:fc:14:95:1c:f6:ce:e2:7e:1f:69:ed:41:4d:
         3f:37:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org