Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32332d3233203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32332d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          PDrdf9DXvuIfwqMMZM7PF8GtVKf30m+oxrMC6UUjOAk=
Subject key identifier:   2B:0B:AE:D9:38:16:FC:39:91:B6:36:13:19:FF:A7:F4:DB:F9:E7:49
Certificate issuer:       /CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
Certificate serial:       10D5F0F19061C1B794802978D019591B3EDB1E3F
Authority key identifier: 44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32332d3233203d3e20323635323234.roa
Signing time:             Fri 18 Feb 2022 12:27:21 +0000
ROA not before:           Fri 18 Feb 2022 12:22:21 +0000
ROA not after:            Fri 17 Feb 2023 12:27:21 +0000
asID:                     265224
IP address blocks:        170.239.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:f0:f1:90:61:c1:b7:94:80:29:78:d0:19:59:1b:3e:db:1e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Validity
            Not Before: Feb 18 12:22:21 2022 GMT
            Not After : Feb 17 12:27:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:10:d7:75:b4:e3:f8:b1:90:ed:bb:cd:7c:
                    4b:d9:73:12:04:9d:52:34:63:7a:2c:d5:bc:ad:0a:
                    03:34:04:5d:b4:bd:51:02:10:43:10:3d:27:43:67:
                    10:9b:79:06:47:3c:04:a4:1a:73:6e:e1:3e:68:92:
                    98:fb:d0:eb:d7:39:b1:42:70:d4:37:b0:82:8f:09:
                    3d:be:2a:eb:2b:b0:79:f2:65:75:ce:9d:6d:f7:4d:
                    12:f6:5e:66:2d:45:b4:9d:91:4b:e1:33:31:41:a2:
                    ef:f6:60:a1:d6:e0:ee:5b:6c:75:0d:d3:9d:a8:14:
                    bc:93:f7:d8:64:d3:7e:08:43:41:c8:56:bd:75:b2:
                    c8:4a:cf:2f:29:7c:ea:b1:83:02:25:80:cb:a8:e4:
                    ef:9a:13:09:86:ce:fb:6f:93:92:6d:a3:7f:a2:a2:
                    7d:ea:75:a0:41:39:54:3f:f7:d1:65:71:85:5a:53:
                    c7:74:d1:ef:86:4d:71:46:27:ac:4d:00:7d:04:7c:
                    7c:74:ad:d7:69:22:68:b5:7b:45:d7:94:6e:67:e1:
                    6e:94:2d:5f:18:17:3f:1e:fa:83:f6:86:36:5a:fa:
                    e3:0c:73:54:30:3d:4b:9e:73:5f:3d:a9:f1:b2:dd:
                    17:95:f7:96:c7:11:c0:38:f1:60:c9:65:5e:c6:34:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0B:AE:D9:38:16:FC:39:91:B6:36:13:19:FF:A7:F4:DB:F9:E7:49
            X509v3 Authority Key Identifier:
                keyid:44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32332d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:f5:7d:51:52:06:20:f2:18:d1:08:9f:b8:46:73:85:3e:
         53:13:55:ee:42:fc:7d:1f:1d:73:65:87:66:42:53:2e:47:6e:
         f3:be:0f:f6:2a:4c:30:10:0f:a3:c7:7f:96:37:df:9f:72:f6:
         4f:0f:09:ac:e1:49:97:83:6a:a1:b5:44:f4:d8:c8:99:e5:08:
         7e:1c:78:e4:11:81:f8:a9:e7:48:6b:c4:6b:b9:62:07:4e:d1:
         46:32:99:5f:a0:4d:b6:5a:14:7a:6f:ab:fb:b9:34:af:7a:16:
         8e:c3:40:a6:e0:c3:88:33:4c:6c:bb:4c:c0:4b:70:42:97:a2:
         54:e1:02:2f:17:ad:03:cc:19:3a:05:04:71:5d:32:5b:1a:78:
         7d:65:e0:f2:24:76:39:bc:21:81:3f:df:14:b5:3c:07:49:47:
         52:5c:3c:cf:69:51:93:a0:45:e9:f3:de:72:eb:28:a0:67:b1:
         c6:bc:2d:50:bd:a7:04:d1:d3:e7:1a:fa:d9:c3:11:41:3f:70:
         47:28:9d:54:e2:ae:fa:dd:98:6f:57:de:1e:af:a0:0e:68:80:
         e9:a7:60:ec:71:1a:4d:01:40:d8:5b:3a:0f:7c:17:0a:60:11:
         c0:57:b3:f5:83:20:4f:48:ec:ac:7f:75:46:ad:66:c7:81:01:
         09:38:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org