Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa
File:                     3137302e38312e36302e302f32322d3234203d3e20323636343031.roa (raw, json)
Hash identifier:          xVKWWg3dy4tzZ3dSEX5VATrBs3N7X4Wq29AFUIXl0Jc=
Subject key identifier:   A2:C8:65:5F:AC:03:9C:BF:A4:16:6A:7E:CA:AA:28:0B:CB:B8:EA:17
Certificate issuer:       /CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
Certificate serial:       3D60F5FA33FC13232E05C5664C0C0E26C1053CB8
Authority key identifier: 53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa
Signing time:             Wed 13 Mar 2024 18:03:41 +0000
ROA not before:           Wed 13 Mar 2024 17:58:41 +0000
ROA not after:            Wed 12 Mar 2025 18:03:41 +0000
asID:                     266401
IP address blocks:        170.81.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:f5:fa:33:fc:13:23:2e:05:c5:66:4c:0c:0e:26:c1:05:3c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
        Validity
            Not Before: Mar 13 17:58:41 2024 GMT
            Not After : Mar 12 18:03:41 2025 GMT
        Subject: CN=A2C8655FAC039CBFA4166A7ECAAA280BCBB8EA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:e4:1f:82:34:56:fe:33:ed:70:90:e0:14:
                    38:b4:99:ed:10:a2:8c:85:09:3a:6c:03:d9:7c:84:
                    13:6c:6f:61:c1:21:9b:4e:22:26:a3:6c:b7:70:dd:
                    ac:0c:8b:59:5d:04:d8:10:39:72:d5:82:61:61:d7:
                    03:6f:41:89:60:8e:89:cb:5c:1a:a1:50:55:5f:84:
                    6e:50:64:5b:e2:6d:ed:8b:00:8f:74:86:66:1e:2f:
                    2d:88:47:24:80:a0:e4:4e:84:47:7c:68:ff:d1:4a:
                    0b:1f:20:b9:fb:e3:cf:0d:7f:36:40:95:d7:cd:6a:
                    c4:af:1c:08:06:54:64:fd:1d:8f:05:4f:22:07:d8:
                    b4:9a:23:ba:bb:36:bb:ea:18:09:d8:0a:f8:33:41:
                    a9:42:67:20:16:ef:85:54:bc:d7:a7:7d:4b:19:15:
                    d2:da:19:15:2b:57:2f:c9:24:37:8d:53:a8:13:90:
                    79:00:75:c2:6c:ca:06:7b:f8:b0:9c:4f:eb:15:9b:
                    61:de:7f:d6:83:a2:be:e6:b1:3f:e3:87:64:f5:74:
                    21:77:73:b4:07:a8:35:4e:d0:67:7c:57:6e:18:7f:
                    27:d8:92:7b:5a:8e:52:d6:27:28:1f:3b:f6:6c:18:
                    9c:ff:c1:55:0a:2c:7f:8f:3c:cb:1c:cf:15:7f:3a:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:65:5F:AC:03:9C:BF:A4:16:6A:7E:CA:AA:28:0B:CB:B8:EA:17
            X509v3 Authority Key Identifier:
                keyid:53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:f3:04:3d:c2:65:71:12:bf:49:14:13:1b:97:6d:db:00:
         5c:d5:e4:34:04:91:10:49:b9:3c:f3:76:34:f8:d4:e6:5b:59:
         93:e5:28:39:63:3f:9d:ae:bf:75:53:20:d4:9a:63:15:69:04:
         20:74:08:eb:bd:20:f8:a7:56:0d:c1:b3:e3:0e:96:58:91:ea:
         4a:c1:61:1a:ef:08:02:9a:34:9b:a8:ac:2d:0c:22:6f:02:76:
         5a:e1:09:31:48:a5:50:68:3a:56:3b:83:2f:19:0b:ad:c0:49:
         98:53:92:18:6c:a4:4c:cf:66:c7:aa:69:8a:31:e5:f0:a3:f3:
         ca:67:d2:3d:99:c7:4a:1a:e8:85:07:19:05:78:4a:d6:d8:78:
         08:16:fb:67:1d:f8:68:f0:8b:98:fe:48:2f:0b:17:83:13:9f:
         63:d5:92:cb:0d:a6:4e:c1:66:3a:92:76:0d:5e:e2:87:7f:4f:
         cf:1f:5d:d7:d9:67:99:73:bd:0e:20:bb:bf:b7:c2:1b:2a:8a:
         8d:5d:70:5c:a9:6b:e9:8a:96:41:21:1c:30:2e:dd:e3:e2:e5:
         25:e4:c1:6f:98:8c:15:fc:ef:31:c9:cc:56:6c:e4:aa:48:c4:
         b2:fc:bf:68:38:72:29:80:5c:38:89:ce:91:41:c9:9a:94:0d:
         c6:b9:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org