Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          ZxHR1i/3jydt+xtJmwJwGY967ztwVcv/Doz8MJHdsgc=
Subject key identifier:   3F:DA:E0:37:01:57:3B:FB:9E:24:F6:D9:D7:7E:F0:E6:B8:54:43:50
Certificate issuer:       /CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
Certificate serial:       2E05EC2B05FCD85B1F152D096EADB58C968DDF54
Authority key identifier: 3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
Signing time:             Wed 03 Apr 2024 13:02:31 +0000
ROA not before:           Wed 03 Apr 2024 12:57:31 +0000
ROA not after:            Wed 02 Apr 2025 13:02:31 +0000
asID:                     265224
IP address blocks:        170.239.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:05:ec:2b:05:fc:d8:5b:1f:15:2d:09:6e:ad:b5:8c:96:8d:df:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
        Validity
            Not Before: Apr  3 12:57:31 2024 GMT
            Not After : Apr  2 13:02:31 2025 GMT
        Subject: CN=3FDAE03701573BFB9E24F6D9D77EF0E6B8544350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:13:34:70:89:94:46:dd:cf:06:11:e1:65:
                    c1:d6:e5:31:bd:3e:f4:8f:92:60:65:2a:34:e1:1b:
                    f3:43:2a:26:b8:ad:86:7b:5b:d1:44:bb:7b:5b:ab:
                    66:e4:1c:59:b8:c7:7c:28:2c:42:09:ce:26:12:c0:
                    d2:91:32:4a:f3:c2:36:7f:95:1f:03:ed:c1:7b:52:
                    64:90:69:5e:50:86:4d:c9:2e:e4:9c:eb:3e:33:cb:
                    f9:a5:6e:42:49:b8:7f:ac:59:d4:f5:53:41:73:28:
                    94:6d:a1:18:d5:53:d9:31:73:13:d9:f3:fa:9f:fc:
                    04:6c:cd:ea:18:d9:75:6e:c9:90:72:78:ac:2c:cf:
                    e3:c0:be:8e:5e:23:bd:fe:d6:28:9b:c1:f5:5e:c3:
                    8a:20:7b:9a:fa:22:0f:8f:36:38:12:b9:3c:d5:d5:
                    03:91:ab:9f:84:4c:74:c7:ff:f4:86:31:0f:e3:54:
                    4c:83:ae:d7:89:8f:bc:ca:c4:5d:7e:28:8c:4d:75:
                    1c:1f:98:a0:71:a1:8c:10:32:0f:1a:4e:e9:b6:84:
                    df:c2:40:43:33:e4:86:7a:61:f5:0e:89:17:8e:56:
                    2b:f2:dc:fb:bc:66:a8:32:45:0f:11:82:ad:e1:2f:
                    fe:fe:9b:38:07:3f:f1:22:22:67:de:03:20:53:0e:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DA:E0:37:01:57:3B:FB:9E:24:F6:D9:D7:7E:F0:E6:B8:54:43:50
            X509v3 Authority Key Identifier:
                keyid:3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:b9:07:4c:a6:74:b5:a1:79:23:49:db:17:46:e9:6d:0d:
         7f:ce:af:7f:10:45:21:d7:e6:fb:12:d8:a3:7f:b8:70:8e:2a:
         94:62:37:ae:40:03:d2:ee:35:25:79:d8:8f:af:5a:63:f5:a8:
         f1:84:1e:ca:cd:00:08:7f:be:b4:a8:76:13:47:0a:dd:79:10:
         b4:06:7b:5c:31:d9:5e:f2:29:c8:2e:6f:90:f7:68:aa:e5:a7:
         d5:4c:12:50:16:97:47:54:40:dd:01:7c:76:91:1f:96:17:f1:
         f2:4e:1f:ec:0c:e1:7f:36:34:1e:fc:25:c0:79:b8:57:6c:43:
         6e:90:82:ae:d4:41:d9:c7:e5:09:7e:31:7d:92:5b:44:2d:0f:
         e6:b1:35:9d:7e:c5:38:cc:81:b2:50:bd:73:1e:04:ff:43:7c:
         32:f0:f2:90:2d:80:07:60:23:36:97:cc:ef:b6:06:67:9b:f7:
         72:f4:84:11:23:e5:ad:1d:db:10:0e:8e:2a:8c:3a:ce:b1:93:
         95:e4:38:48:68:4c:c8:a5:b8:53:b8:3f:48:ce:9e:78:3f:a4:
         9c:56:0a:ad:a0:00:b7:18:41:97:23:ca:cd:fd:19:9b:15:8c:
         0f:85:46:fb:e6:77:44:05:b1:d0:67:ec:67:12:89:41:3f:44:
         be:d6:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org