Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3233203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32322d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          ZQBJDm38ijynliTYp2VOd/zV0VuSwHTdhkLZKmZ7BmU=
Subject key identifier:   F6:F7:AA:D9:F3:78:BF:0D:A4:AC:0F:02:BE:EB:B9:7E:92:9D:6E:D8
Certificate issuer:       /CN=FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC
Certificate serial:       0CCA0E0F529BAA7B674D179A5C237D823A9C18AA
Authority key identifier: FC:AF:90:04:53:3E:19:B4:86:B8:FF:F3:F7:4B:2F:01:D7:DD:FB:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3233203d3e20323635323234.roa
Signing time:             Thu 27 Jul 2023 18:25:40 +0000
ROA not before:           Thu 27 Jul 2023 18:20:40 +0000
ROA not after:            Thu 25 Jul 2024 18:25:40 +0000
asID:                     265224
IP address blocks:        170.239.40.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:0e:0f:52:9b:aa:7b:67:4d:17:9a:5c:23:7d:82:3a:9c:18:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC
        Validity
            Not Before: Jul 27 18:20:40 2023 GMT
            Not After : Jul 25 18:25:40 2024 GMT
        Subject: CN=F6F7AAD9F378BF0DA4AC0F02BEEBB97E929D6ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:31:fe:86:fc:fa:7f:43:bc:bc:91:91:63:
                    9f:20:03:da:cb:71:e3:68:9f:19:d3:51:06:01:8b:
                    1a:32:67:5c:90:89:55:55:4f:7e:6a:49:07:67:d9:
                    01:dd:23:ec:b4:5e:5b:bc:ed:bb:03:36:3f:dd:e8:
                    16:ea:c0:e6:d8:aa:b8:18:d6:af:f3:4a:ac:ff:ee:
                    06:30:43:95:3f:68:f1:31:48:a0:5f:d1:04:5d:6d:
                    bf:73:c4:2f:55:e8:c4:75:ee:b2:d3:b8:d2:0d:a9:
                    c5:ad:24:e3:95:ff:7f:8e:09:22:a7:5a:2f:4a:8b:
                    3e:da:bc:7c:c1:40:6d:f2:45:3d:69:ba:41:b8:68:
                    f5:c9:59:f6:a6:c7:08:f1:50:20:f4:eb:f6:88:30:
                    21:a6:7b:4a:07:2b:82:1d:51:50:f8:4b:5e:1e:20:
                    a1:e8:bc:1b:25:84:45:70:52:e8:47:40:77:22:ab:
                    ca:10:28:f5:29:ef:42:bd:e5:70:69:1d:3a:9c:8f:
                    95:62:76:ad:9d:0e:35:ef:47:72:74:e6:f8:fa:69:
                    e3:fe:fb:ef:17:8d:cb:fe:8e:0a:50:0d:20:4e:84:
                    3e:7d:6a:47:8d:e5:07:83:99:6e:c5:f6:be:26:8f:
                    4c:5e:90:0e:4a:e6:92:5f:8f:fe:ad:8b:a2:66:df:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:AA:D9:F3:78:BF:0D:A4:AC:0F:02:BE:EB:B9:7E:92:9D:6E:D8
            X509v3 Authority Key Identifier:
                keyid:FC:AF:90:04:53:3E:19:B4:86:B8:FF:F3:F7:4B:2F:01:D7:DD:FB:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCAF9004533E19B486B8FFF3F74B2F01D7DDFBEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:70:a1:35:08:5e:14:0d:7b:63:b1:f3:e5:9c:bf:2b:54:27:
         92:72:87:98:a6:c2:3c:30:92:8b:64:ac:14:29:64:56:7c:31:
         52:6b:ca:fd:e6:53:f9:e8:c0:56:c6:99:1a:aa:33:ec:6f:80:
         60:07:fd:cf:53:4e:af:09:55:7e:62:0f:af:86:53:3a:7e:7c:
         f2:5d:07:67:e0:b3:d2:5e:c3:7c:3a:e0:85:8d:90:2a:0c:b8:
         d4:e1:bb:f7:20:73:6a:a3:f1:d8:3d:6c:82:04:48:f8:35:a8:
         d3:1c:93:52:a0:4a:a7:2e:76:e2:3e:ed:7a:8c:02:b7:32:de:
         0c:5b:23:82:49:19:a3:d6:3d:fa:f6:f3:b6:46:97:77:eb:2e:
         39:4a:13:79:1f:29:26:21:eb:90:54:76:5f:1c:ad:9c:19:c7:
         ed:42:cb:41:57:1b:90:b5:0b:98:2e:b4:25:58:f8:d9:7e:2c:
         89:30:be:1e:be:95:09:d1:ef:82:b6:9a:ed:e6:00:76:e0:91:
         84:0f:fa:ae:87:d9:da:91:15:65:07:bb:33:83:e6:a9:89:bd:
         7f:9a:c7:7b:67:7a:5b:8a:d5:26:aa:d1:b3:24:11:35:04:bf:
         55:dd:ce:71:e7:64:bb:11:dd:b6:41:0c:fc:7b:2d:3b:b4:f6:
         3d:4e:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org