Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3236203d3e203532383538.roa
File:                     3137302e3234372e3233322e302f32322d3236203d3e203532383538.roa (raw, json)
Hash identifier:          DE/0BSL+9z/kSYkE15phm/eFvueybLp1/Zb3QwzvbE0=
Subject key identifier:   1E:E3:C6:9D:29:E2:F2:A2:E3:68:9A:AB:20:6F:55:D2:D3:91:5B:35
Certificate issuer:       /CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Certificate serial:       3BBBB54EAAE0AE0399E137B0D42C42D058CB0971
Authority key identifier: 5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3236203d3e203532383538.roa
Signing time:             Tue 05 Dec 2023 15:44:37 +0000
ROA not before:           Tue 05 Dec 2023 15:39:37 +0000
ROA not after:            Tue 03 Dec 2024 15:44:37 +0000
asID:                     52858
IP address blocks:        170.247.232.0/22 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bb:b5:4e:aa:e0:ae:03:99:e1:37:b0:d4:2c:42:d0:58:cb:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
        Validity
            Not Before: Dec  5 15:39:37 2023 GMT
            Not After : Dec  3 15:44:37 2024 GMT
        Subject: CN=1EE3C69D29E2F2A2E3689AAB206F55D2D3915B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:b4:a7:50:35:b1:6c:eb:9a:59:57:0f:92:
                    bb:cc:e9:db:d8:74:3e:d6:97:e1:d6:7d:62:13:c7:
                    0a:14:1e:d1:6f:c8:c0:f0:8e:8f:3b:89:90:52:fc:
                    28:f2:4a:a5:31:e2:b2:74:28:7e:9a:c2:d3:45:c0:
                    42:d2:da:3d:35:25:f3:ae:82:3f:b4:24:8e:42:47:
                    48:ab:23:3a:c1:da:22:51:21:77:d3:6b:d6:ce:6e:
                    2a:92:72:52:19:12:28:42:ac:75:b8:0a:4b:48:8d:
                    5c:a1:ff:d1:0f:f0:aa:03:cd:3d:13:29:03:cf:f6:
                    3e:2d:50:45:72:b8:1e:5a:9f:60:35:46:19:c3:dc:
                    e6:0c:7e:a2:81:d9:6e:39:1e:9e:d5:04:6a:16:4b:
                    c2:e9:e4:38:84:55:43:b8:7f:25:55:4c:37:b1:3f:
                    a3:14:f8:40:5d:18:bf:81:91:71:e4:94:1b:b4:0b:
                    47:48:e5:91:96:87:87:d1:34:b6:5e:07:c4:41:b7:
                    cf:be:09:99:d6:61:9e:ee:7d:af:62:4f:12:d2:ac:
                    19:2a:5c:7b:19:60:55:f9:56:ea:eb:47:7d:7a:ed:
                    84:26:8b:2e:64:37:40:50:f3:8e:c9:45:3b:c9:61:
                    9d:6e:a8:7e:8f:a4:dc:26:5b:c0:b1:c5:7e:56:2a:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:C6:9D:29:E2:F2:A2:E3:68:9A:AB:20:6F:55:D2:D3:91:5B:35
            X509v3 Authority Key Identifier:
                keyid:5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137302e3234372e3233322e302f32322d3236203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:78:27:c8:8e:d4:52:89:e4:82:fb:d9:d5:af:8f:39:d7:be:
         6f:ef:a3:33:4e:08:2f:33:c8:c0:fc:64:99:36:44:29:44:99:
         3d:2d:2a:ae:f9:08:61:e6:3c:f6:e9:34:41:cc:0d:0f:60:00:
         ea:b0:71:5c:47:07:17:f8:35:c1:ef:b1:95:e9:41:0d:97:71:
         ed:21:8a:8b:ee:03:a8:72:53:fb:28:d4:28:64:92:04:e0:93:
         de:73:9a:9e:31:b9:4d:62:c4:4c:03:88:49:91:8e:0b:b8:be:
         b3:db:f4:b6:c2:c0:bc:a8:7f:b2:fb:52:3a:dd:95:73:d5:e6:
         32:7b:f0:6e:fd:73:c1:39:75:0d:5b:de:5c:9a:50:b3:4d:0d:
         9f:d3:0c:ef:8d:7b:f3:9f:27:ba:d9:65:fc:9f:69:d7:fb:fd:
         79:2a:f4:69:74:ff:42:52:b7:2b:6e:c9:2a:23:f0:58:0c:bb:
         67:4e:91:78:8a:26:59:11:87:fc:92:65:6f:ef:39:96:9a:1f:
         41:75:b5:86:11:1d:bf:b1:3b:17:0b:a2:1a:f7:8f:fe:12:93:
         22:51:32:74:b1:62:60:b9:17:96:3e:c5:e5:01:05:71:73:9b:
         a5:d0:fc:eb:8e:00:a7:81:1c:ed:40:ce:85:b8:bc:5b:34:ec:
         07:1f:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org