Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa
File:                     3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          3mwb/DKNBv3ilwF3SwpU0sIsFDR2b5w8kR2y6VMTo/0=
Subject key identifier:   B4:B8:E8:C9:B5:22:3F:BE:35:D7:44:18:19:1D:40:E2:9C:CF:17:BB
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       5A843D272FFAD018BF58602F321F6F1B353D3904
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:48 +0000
ROA not before:           Wed 21 Dec 2022 17:11:48 +0000
ROA not after:            Wed 20 Dec 2023 17:16:48 +0000
asID:                     28146
IP address blocks:        170.245.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:3d:27:2f:fa:d0:18:bf:58:60:2f:32:1f:6f:1b:35:3d:39:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:48 2022 GMT
            Not After : Dec 20 17:16:48 2023 GMT
        Subject: CN=B4B8E8C9B5223FBE35D74418191D40E29CCF17BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:48:df:2d:bc:a6:2a:0f:d5:b3:66:87:2c:11:
                    88:ac:00:41:3f:e9:58:2d:28:83:7e:d2:20:f7:86:
                    d7:17:ff:cc:f6:ce:d1:06:b4:27:98:21:5f:ca:71:
                    60:ac:74:52:63:32:02:90:9f:3b:9c:50:13:ac:90:
                    ae:83:61:3a:b6:99:44:90:fa:8f:42:5b:52:9f:bf:
                    a5:d1:9f:cb:74:91:6b:7e:8a:de:a3:61:bb:86:10:
                    ae:ae:29:68:90:b7:04:7d:0b:3d:d5:64:23:ee:dd:
                    a8:60:28:d9:90:e5:65:5c:f0:b6:32:1a:e0:cc:c8:
                    b7:ae:0c:88:68:5c:c0:4a:6d:6a:2d:6b:f3:6e:ac:
                    ca:93:64:9a:96:53:6a:b3:1c:71:0e:9b:76:85:f6:
                    51:9e:b1:04:5c:05:1a:47:f2:74:5f:34:7f:e9:18:
                    15:d1:56:d7:6a:70:76:21:ba:93:0b:0f:47:51:6f:
                    da:c3:31:18:d3:44:51:35:76:d3:90:fe:32:20:35:
                    4f:19:35:40:94:f2:64:22:b2:82:e2:78:64:18:bb:
                    d6:1b:ca:ba:88:ba:d2:fc:d6:55:43:7e:d3:05:82:
                    b8:21:58:64:38:df:bb:b6:d0:3f:50:69:4e:e2:9f:
                    aa:a1:99:5d:ae:94:5e:e8:63:07:72:29:27:35:cb:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B8:E8:C9:B5:22:3F:BE:35:D7:44:18:19:1D:40:E2:9C:CF:17:BB
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:65:12:0d:e3:2f:1c:fd:f8:f2:e6:01:f3:a0:f5:f6:1b:
         58:3e:ee:d7:fb:96:bf:c9:ed:06:a6:c6:8d:a5:f6:8b:54:26:
         9c:64:72:7d:72:a6:5e:be:ca:5b:f2:03:66:dd:91:b9:c7:cc:
         b6:1b:71:cd:1d:e3:19:a0:50:03:8f:3d:20:a0:63:75:64:ac:
         3c:0d:df:7a:bb:70:12:af:3c:f6:45:31:f1:34:5b:b9:88:6e:
         4d:25:95:3b:b1:c2:55:18:b6:1a:c1:aa:30:69:58:06:f7:2d:
         9f:49:d4:24:e9:ed:c0:f8:a5:32:67:f4:4f:ea:2b:fc:06:19:
         bf:47:c0:ef:1d:d2:24:89:15:98:33:17:25:86:bc:cc:ac:bb:
         83:2f:46:0d:f3:36:03:e9:1c:f8:fd:2d:c6:e7:19:4d:9b:97:
         bd:d0:66:74:97:c0:b3:37:40:b2:53:19:c6:98:30:df:0f:f9:
         65:00:7c:fb:d6:b7:05:e7:80:d3:46:ef:96:6c:41:77:61:31:
         e6:71:9b:ab:df:25:51:d8:0b:c6:24:08:ee:f4:d5:52:0c:f0:
         ee:49:e1:a1:ed:96:16:ac:52:5d:5b:ff:67:fc:d6:fa:d0:25:
         75:89:e3:10:83:51:2e:54:3e:a0:11:c2:a3:ad:9b:1b:61:c6:
         a8:f9:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org