Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e20323632333333.roa
File:                     3137302e3234352e3231362e302f32322d3234203d3e20323632333333.roa (raw, json)
Hash identifier:          tUavEJVj+1Uz+8PGbo7GA9/uAwIYfi/4mUl/ZYBmFoE=
Subject key identifier:   FD:8C:6E:6F:E2:42:A0:14:B9:BF:08:01:28:87:07:3D:E2:61:60:21
Certificate issuer:       /CN=1C59C959F078E431B9CFA56B9F699727769D35A1
Certificate serial:       735A2EBCEFDDAAA5E1FD3A9AB260469A567EBBD4
Authority key identifier: 1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C59C959F078E431B9CFA56B9F699727769D35A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e20323632333333.roa
Signing time:             Tue 23 Aug 2022 14:27:38 +0000
ROA not before:           Tue 23 Aug 2022 14:22:38 +0000
ROA not after:            Tue 22 Aug 2023 14:27:38 +0000
asID:                     262333
IP address blocks:        170.245.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5a:2e:bc:ef:dd:aa:a5:e1:fd:3a:9a:b2:60:46:9a:56:7e:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C59C959F078E431B9CFA56B9F699727769D35A1
        Validity
            Not Before: Aug 23 14:22:38 2022 GMT
            Not After : Aug 22 14:27:38 2023 GMT
        Subject: CN=FD8C6E6FE242A014B9BF08012887073DE2616021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:35:cc:95:fd:b8:ff:34:e7:3c:19:a4:76:
                    15:ee:77:86:3d:7f:28:1e:16:37:24:f1:08:a2:c5:
                    fe:e9:b3:84:8e:e5:eb:13:7d:10:54:23:3a:03:c3:
                    33:66:59:51:c5:2c:71:60:fd:10:fb:e6:3f:87:af:
                    33:44:4c:d5:40:a7:20:bd:2b:68:d0:3f:35:5f:3c:
                    d0:5f:66:eb:18:00:e0:ce:2c:c8:6f:92:31:76:bb:
                    b2:40:b6:19:89:f8:45:7f:5e:4e:7c:01:1a:6f:7b:
                    16:6f:a4:fb:cb:03:b0:bb:5c:a5:33:ed:0e:dc:ac:
                    f7:ad:0e:a5:63:b6:36:12:25:57:30:7f:dc:2c:a9:
                    2c:3f:ec:e1:11:a9:fd:c0:98:56:e2:6e:10:79:1d:
                    8e:64:28:64:69:a5:de:0b:0f:f7:be:cb:e1:d6:91:
                    51:cd:81:e7:7b:57:76:1a:8f:f9:70:28:a2:f3:e5:
                    49:6d:ae:38:7b:ca:22:18:e3:8c:09:84:18:48:81:
                    d3:43:94:cb:02:c0:1e:8f:ef:87:cf:33:54:a4:35:
                    a0:a7:d5:6e:ad:b0:b6:9d:1a:5d:d0:c1:94:96:50:
                    39:eb:90:6e:42:2c:99:4a:ec:6c:ac:34:64:9c:4a:
                    e9:6d:b4:79:7a:5b:f5:37:ec:a4:3b:9e:1d:4c:b7:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:6E:6F:E2:42:A0:14:B9:BF:08:01:28:87:07:3D:E2:61:60:21
            X509v3 Authority Key Identifier:
                keyid:1C:59:C9:59:F0:78:E4:31:B9:CF:A5:6B:9F:69:97:27:76:9D:35:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/1C59C959F078E431B9CFA56B9F699727769D35A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C59C959F078E431B9CFA56B9F699727769D35A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e20323632333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:be:c9:1f:a6:0c:4c:94:db:66:be:54:47:ef:84:ea:f2:
         3f:cc:ba:11:24:6b:be:d3:91:75:72:d6:81:40:53:a3:10:f7:
         a1:05:3c:38:63:2a:42:77:39:54:9c:1e:ee:3e:fa:7f:06:c1:
         db:a2:80:c8:a9:25:44:3d:a1:f1:39:f8:8c:ae:dd:51:2d:e8:
         c9:1d:b5:7f:87:da:4d:b8:4f:d5:31:5a:c7:91:34:e9:b2:84:
         fb:0a:ee:e0:d1:45:f8:12:2b:8d:a5:26:e9:95:9e:b4:18:71:
         69:b3:c1:1a:6e:ad:3b:10:46:69:ba:9c:2d:9f:94:03:e1:58:
         cc:3f:58:c9:a1:ec:29:7d:0a:ee:81:bb:cb:1c:bd:e6:93:f9:
         04:42:82:a5:97:ff:c4:69:39:27:87:bb:85:a3:b7:3b:07:aa:
         e2:81:af:f7:b8:8a:64:01:5f:5e:a4:b3:75:38:80:72:77:ef:
         2e:be:a0:00:83:53:9d:56:34:4c:10:e8:cf:7f:61:5e:d6:23:
         2b:6c:39:22:9e:df:8a:22:f2:fc:fc:94:67:16:e5:72:79:50:
         e8:3c:0a:53:87:e0:34:ae:84:07:8c:2e:53:28:1c:eb:30:ef:
         d9:bc:c2:dd:a1:aa:8c:b3:7d:2d:e0:df:44:b8:56:cc:10:36:
         a7:fb:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org