Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234352e32302e302f32322d3234203d3e203238353830.roa
File:                     3137302e3234352e32302e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          po8Eg5SZDInvDAL0mAVIaiwFZ0f/dmM1c62vFv9X2I4=
Subject key identifier:   B3:26:C7:2B:69:A6:ED:FB:60:04:7D:A9:10:BF:4E:85:74:29:47:58
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       43585C543CF29A71FB08549A8ECCCC5ECBF1C310
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234352e32302e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:04 +0000
ROA not before:           Thu 19 Oct 2023 19:10:04 +0000
ROA not after:            Thu 17 Oct 2024 19:15:04 +0000
asID:                     28580
IP address blocks:        170.245.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:58:5c:54:3c:f2:9a:71:fb:08:54:9a:8e:cc:cc:5e:cb:f1:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:04 2023 GMT
            Not After : Oct 17 19:15:04 2024 GMT
        Subject: CN=B326C72B69A6EDFB60047DA910BF4E8574294758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:83:40:47:8e:1f:88:b0:8c:7c:73:9b:fb:
                    7c:3c:81:49:d4:6d:10:2a:12:11:4b:0d:dc:2c:16:
                    c8:5a:b0:2e:96:c6:46:3b:64:3e:a4:fc:ff:c8:76:
                    44:57:a0:f7:21:c7:2a:1d:2d:03:bd:ac:c9:8a:c3:
                    17:e1:f8:5e:60:f6:3e:18:7d:a8:72:dd:7d:4c:71:
                    42:99:9d:be:55:14:63:34:94:af:26:bb:9f:8b:35:
                    f3:ca:85:3d:87:ce:49:d6:77:9c:52:a5:16:21:3d:
                    e9:aa:af:87:e5:d4:47:52:dd:4b:da:9a:09:0d:89:
                    56:0f:a3:10:38:87:92:e2:cf:79:f7:2e:f9:56:e4:
                    10:58:cc:0a:02:8c:1e:16:57:55:b7:2f:97:f0:e4:
                    e2:18:09:10:42:1f:d4:8b:e4:8c:a2:86:ee:2c:60:
                    9e:1f:bc:4c:bd:66:f0:35:d2:f2:29:54:37:34:0a:
                    d7:ef:c5:ea:58:e9:33:a5:dc:16:ef:ac:f3:50:03:
                    43:4e:4a:b9:cb:9a:8e:17:d6:97:10:95:cf:6a:50:
                    54:1f:4d:d0:91:75:0a:1a:72:a9:71:32:fc:da:38:
                    58:3f:2c:d0:a8:d0:c4:a4:6b:b9:83:a7:0f:68:64:
                    c0:d5:84:04:bf:d6:ac:80:de:1a:7d:f9:a9:d3:70:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:26:C7:2B:69:A6:ED:FB:60:04:7D:A9:10:BF:4E:85:74:29:47:58
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137302e3234352e32302e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:1c:52:1a:8e:67:01:eb:a9:dc:aa:71:d9:87:08:1a:6c:
         6d:b1:1b:6c:cf:4b:cf:67:e8:f8:b7:ec:58:05:cc:51:3c:87:
         ec:2f:b5:7d:d0:be:ce:93:e1:96:9a:3a:a5:65:b0:f4:18:e0:
         f2:cf:c4:a4:16:50:ce:4a:e8:7f:42:39:a1:8a:2e:68:15:96:
         61:61:dd:95:75:a0:0c:7c:ce:4d:a5:7b:91:cc:3b:1a:1a:f0:
         14:98:7c:0b:45:d1:b6:65:81:e4:96:35:ce:ba:75:9e:2a:72:
         1e:72:d5:ba:86:01:91:0b:68:5d:a0:1f:4c:ed:21:12:77:7d:
         b2:7d:22:d6:d0:c1:d5:f7:66:86:d9:2a:f9:e3:9c:ba:21:93:
         61:3e:cc:99:75:e5:c4:5a:33:c6:0b:3d:02:fd:cb:f4:f2:53:
         da:49:62:1a:7e:0e:44:c0:ee:5e:0e:a9:99:ed:4e:68:df:8f:
         5e:21:6e:ec:e7:ee:8f:97:4c:89:9d:43:d9:8b:69:c1:87:34:
         fe:da:cd:9c:28:25:18:ce:6c:d9:b9:58:0c:10:79:a2:ab:93:
         61:3e:d3:c0:d2:8c:1c:85:65:7f:ff:da:b2:ae:0a:46:18:13:
         a1:60:27:e5:c2:7f:f4:dd:50:07:3d:54:a3:3c:06:f8:92:29:
         e3:e7:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org