Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
File:                     3137302e3233312e38342e302f32322d3234203d3e203533303232.roa (raw, json)
Hash identifier:          lkqjC2h/MBnErHEcTEfaq3wdSX4FNsLeG/Vak4vBw8g=
Subject key identifier:   3D:21:33:23:35:5F:F9:2A:A1:A6:FC:C7:97:C4:AF:08:15:1A:B1:C0
Certificate issuer:       /CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Certificate serial:       090E386BB53522036C07AE92E476EEBEE6E93A82
Authority key identifier: AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
Signing time:             Tue 19 Mar 2024 14:10:20 +0000
ROA not before:           Tue 19 Mar 2024 14:05:20 +0000
ROA not after:            Tue 18 Mar 2025 14:10:20 +0000
asID:                     53022
IP address blocks:        170.231.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:38:6b:b5:35:22:03:6c:07:ae:92:e4:76:ee:be:e6:e9:3a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
        Validity
            Not Before: Mar 19 14:05:20 2024 GMT
            Not After : Mar 18 14:10:20 2025 GMT
        Subject: CN=3D213323355FF92AA1A6FCC797C4AF08151AB1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:0b:5f:43:68:ec:68:0b:f6:c5:50:67:68:
                    a6:a6:21:5e:6b:ee:aa:8d:54:e6:98:13:c0:92:b4:
                    7d:07:3f:6a:5b:69:5f:b2:3d:bd:71:1b:33:0c:13:
                    67:e8:b5:e8:73:d6:da:66:10:57:53:66:3f:e5:86:
                    6b:1a:5d:28:67:13:1b:7e:0c:6a:cb:54:5c:32:86:
                    29:72:aa:d2:0b:69:1d:94:62:bc:41:2d:de:f6:8a:
                    33:17:dd:73:f8:66:f8:ec:91:09:3c:b9:8b:b0:72:
                    7b:6b:8f:57:d8:5e:46:20:62:9c:ed:2f:99:f2:86:
                    ff:0a:2d:5d:73:f0:33:ab:8e:52:40:84:f3:7d:71:
                    6b:03:45:72:b1:54:5d:2f:82:72:a9:9d:38:9d:07:
                    59:4a:22:f3:8c:de:d9:e3:76:69:01:f0:e8:b5:bd:
                    4f:f6:3c:74:ca:a9:ac:93:19:1d:3f:1a:db:cf:2d:
                    ad:75:b8:b5:bb:22:4c:fb:05:1c:b1:0b:6a:7c:40:
                    e7:59:87:0b:17:d8:ad:3f:52:0c:90:c0:fe:df:73:
                    2b:24:8e:d0:b8:0e:91:23:bb:56:26:b4:ac:ae:cd:
                    f7:7e:ce:1d:2c:88:cd:31:27:66:ff:5d:cf:c3:a7:
                    64:ec:d4:c7:a8:c6:24:87:9a:f2:3a:6d:60:81:96:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:33:23:35:5F:F9:2A:A1:A6:FC:C7:97:C4:AF:08:15:1A:B1:C0
            X509v3 Authority Key Identifier:
                keyid:AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ee:d3:3d:1c:93:b3:df:39:6d:ac:4d:c1:91:9a:ac:47:23:
         6f:5c:24:74:aa:89:e5:fc:89:5a:dc:3a:e0:02:13:a1:22:8e:
         7f:36:48:9d:7a:72:4e:36:df:e2:94:16:18:3e:95:d3:14:b4:
         51:79:ed:2d:7f:e3:e1:4a:d8:be:ae:d1:b6:06:d0:8a:0e:58:
         34:72:db:29:bb:9e:5b:a6:e4:5c:87:e5:15:50:46:5a:85:39:
         0b:0b:95:8d:e5:1e:48:cf:7a:71:34:82:83:7d:d7:ab:e6:7a:
         d7:67:0e:01:19:69:4d:e9:a8:94:5e:f6:03:d1:0a:22:fa:6b:
         06:fa:63:94:e6:2e:f0:34:1c:5d:6b:7e:98:5f:34:9f:9c:a1:
         fe:7b:3b:b9:94:83:19:96:f7:fa:39:aa:d2:a4:3f:64:cc:e7:
         87:e1:96:e3:c7:91:0a:3c:51:fb:e5:e6:cd:bf:db:d3:ec:dd:
         5e:54:0d:56:80:a4:1e:89:49:b5:03:66:ba:11:55:23:28:21:
         c8:0e:74:ce:20:68:6f:3b:94:04:9b:13:9b:3c:99:c9:85:6a:
         16:04:cc:3d:cb:09:e2:db:aa:fb:af:2c:50:01:f9:97:8e:0e:
         84:d0:08:4e:c0:7f:82:14:bc:1b:27:31:7b:e5:b1:ec:44:11:
         ec:77:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org