Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa
File:                     3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          LqaEl9XmNApEIiuvKeUJOckmB9xLmGr0CSqKudxEYDw=
Subject key identifier:   05:68:82:56:84:B3:A1:30:2D:2F:4F:72:87:84:56:A8:AF:7C:B7:4B
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       131F1151DDBB3275282492B12F715C9F9389AE8F
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa
Signing time:             Fri 23 Jun 2023 20:06:46 +0000
ROA not before:           Fri 23 Jun 2023 20:01:46 +0000
ROA not after:            Fri 21 Jun 2024 20:06:46 +0000
asID:                     265274
IP address blocks:        170.80.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:11:51:dd:bb:32:75:28:24:92:b1:2f:71:5c:9f:93:89:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Jun 23 20:01:46 2023 GMT
            Not After : Jun 21 20:06:46 2024 GMT
        Subject: CN=0568825684B3A1302D2F4F72878456A8AF7CB74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:83:65:8f:a3:7f:5e:76:2e:f6:e2:26:8a:
                    4e:09:cd:e1:b5:7c:de:70:6c:a6:2f:9f:a9:2c:de:
                    f9:72:59:2f:45:8f:7f:28:74:83:b9:d7:39:11:75:
                    76:fd:9d:85:2d:c8:73:93:a9:e1:31:56:d1:6b:48:
                    94:76:92:b2:66:1c:95:b0:0c:f2:19:3b:8e:94:a7:
                    3e:3e:15:12:31:d1:e6:b7:e9:f1:c6:3d:f7:78:35:
                    b4:4e:05:7f:a2:8a:95:dc:10:7b:c9:64:68:99:11:
                    dc:36:b3:4c:3d:db:1b:8a:49:b0:38:e6:99:9b:e6:
                    27:21:b1:12:a5:f5:1e:eb:c8:43:a5:21:4b:18:64:
                    20:4a:e6:82:09:49:ee:7e:bb:8c:c0:4d:e5:5f:2d:
                    da:ef:92:f7:e1:c4:aa:4b:10:72:38:d1:db:f5:12:
                    4a:4a:4d:d0:21:22:43:5a:41:bd:d0:9b:e0:2b:54:
                    2e:79:04:f6:75:11:9a:5c:b2:7e:ef:a0:9d:8e:3f:
                    98:9f:b5:a7:96:ca:39:04:e7:9a:e2:4a:35:b5:15:
                    d2:dd:61:7f:c9:df:ce:31:62:85:52:e3:99:94:bc:
                    73:e9:46:ad:85:42:26:f4:c2:8e:c6:82:59:9d:29:
                    79:2b:ae:b5:99:8c:03:5d:7b:be:28:33:57:6a:0b:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:82:56:84:B3:A1:30:2D:2F:4F:72:87:84:56:A8:AF:7C:B7:4B
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2c:25:a3:a8:6a:fe:f3:08:28:d5:30:1c:bb:1f:07:fc:9d:
         c9:8e:8d:d0:bf:39:b3:94:7d:ab:b5:41:f1:de:87:62:a4:53:
         3f:ed:07:14:b6:04:a5:73:2b:15:c1:8b:b2:38:6a:2a:69:62:
         06:b8:a8:46:c2:4a:53:ca:c5:72:9f:5f:0e:fa:b9:f8:60:3e:
         03:8a:2e:48:b5:2b:af:45:a0:ba:3c:a3:7a:6a:06:88:77:2f:
         45:ba:3e:e5:49:b8:0b:31:87:1e:6a:b0:6c:73:33:9f:10:ef:
         c4:77:09:87:72:d6:0a:db:af:4e:77:8d:e5:93:24:0f:f1:42:
         89:e2:94:d7:19:0f:71:cf:e7:a7:91:c3:02:99:0c:cf:7f:da:
         37:66:f4:6c:39:52:e2:e3:8b:9c:17:ef:bf:fa:85:3b:55:d9:
         0d:bc:8a:db:cd:8f:db:91:84:98:05:90:23:da:5f:4f:fe:eb:
         84:6a:09:91:89:47:bf:76:5e:6b:ee:e8:cb:69:3c:d3:5d:0d:
         e0:e3:a4:1e:40:3d:e6:09:3e:e8:05:45:49:39:d5:f2:4e:2f:
         13:27:71:45:79:af:03:72:d6:82:e9:c2:19:21:b3:91:44:9e:
         b4:d8:26:a8:6f:eb:5d:8a:98:6a:ba:3d:f3:a5:bc:41:37:01:
         e9:3a:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org