Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa
File:                     3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa (raw, json)
Hash identifier:          kCZkz/Qg9GGBy5KlvFy20zZvZIv8Pl2N/6QHJ+EMvKg=
Subject key identifier:   C9:E9:A4:32:1D:0C:50:26:A4:2C:BA:08:96:97:9D:EE:27:B3:F3:94
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       0C45B4773C39EC21814D7AF671BFB50B555EF8F4
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa
Signing time:             Wed 21 Dec 2022 17:16:48 +0000
ROA not before:           Wed 21 Dec 2022 17:11:48 +0000
ROA not after:            Wed 20 Dec 2023 17:16:48 +0000
asID:                     28224
IP address blocks:        170.247.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:b4:77:3c:39:ec:21:81:4d:7a:f6:71:bf:b5:0b:55:5e:f8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:48 2022 GMT
            Not After : Dec 20 17:16:48 2023 GMT
        Subject: CN=C9E9A4321D0C5026A42CBA0896979DEE27B3F394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:dd:4a:d4:e4:ba:d5:88:c0:7b:68:17:36:
                    73:0b:c6:60:74:4d:8d:7c:3e:fa:f6:b0:b2:71:03:
                    4c:12:21:d0:45:b7:3b:5b:03:92:d4:eb:27:ee:b0:
                    2e:bb:4c:97:b5:be:69:ac:b4:22:f8:33:7a:99:de:
                    91:19:b8:b3:1d:63:0f:38:64:4a:2c:e8:f8:e1:3e:
                    db:3c:67:0c:af:cc:e9:b7:01:8a:71:f5:9d:54:39:
                    ba:f0:5b:5b:7c:a7:1d:b8:71:0e:c9:7e:af:24:77:
                    f7:ff:2d:e7:41:23:93:3e:0e:cc:35:52:8d:4b:65:
                    3a:12:2a:e8:9c:70:95:e2:ec:a4:76:fe:aa:6c:35:
                    68:b9:f8:dc:d7:02:ec:a7:5c:a0:ea:66:97:8e:2c:
                    0e:ea:91:6c:2f:be:0e:fa:36:65:a0:98:d5:99:0c:
                    52:66:7f:86:cd:df:c4:7b:54:2e:85:85:5f:7a:9b:
                    30:de:81:56:23:c7:82:e2:b6:42:14:95:94:6a:37:
                    79:f1:38:1c:c8:de:c9:46:72:c3:5c:9c:2f:c4:a0:
                    ef:35:b9:95:18:e5:c1:fc:81:71:20:ae:59:b9:32:
                    36:58:55:fd:80:2e:05:53:a2:3b:40:3a:8a:da:45:
                    fc:fc:a7:e5:9c:64:c5:61:67:a4:fb:c4:5a:1e:e5:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E9:A4:32:1D:0C:50:26:A4:2C:BA:08:96:97:9D:EE:27:B3:F3:94
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:e6:aa:03:4c:9d:bc:10:90:f3:7e:39:5d:f1:ab:50:8a:
         e8:d6:71:f5:23:02:10:d8:a2:a2:66:95:c2:68:ce:6a:5a:62:
         ec:99:7c:c3:02:57:40:dd:1f:b0:e6:c2:e5:99:2a:70:55:15:
         41:12:06:91:d3:ff:71:ad:67:27:79:11:ba:14:7d:61:99:e9:
         ae:7c:1c:a9:4f:7c:08:bb:7a:35:6b:2f:c6:26:85:07:9b:ee:
         09:32:2d:78:f4:d2:81:bc:03:39:37:f1:0a:54:1d:aa:bd:61:
         ce:2a:c0:02:4f:2c:70:0a:5d:e0:fe:24:64:cb:b7:f6:2d:e4:
         95:2a:a8:f2:1c:1a:ea:05:80:d3:0c:fa:13:65:ea:ac:b0:f1:
         d5:61:75:d5:2d:cc:f3:05:75:9f:46:ac:e3:10:d3:76:b0:79:
         ce:ca:36:6f:01:f2:05:9e:59:9c:e8:7d:57:cc:fb:11:fa:b3:
         38:4e:ab:65:99:6d:83:26:a4:3c:30:8f:58:2c:a6:6d:3e:fd:
         d4:db:3b:35:d2:57:85:85:4c:26:4d:fb:ba:1e:33:8b:49:69:
         28:89:7d:fa:04:26:3b:0e:ac:85:89:04:58:81:01:73:a6:3f:
         95:41:7e:0c:b9:f0:bf:42:78:1b:e2:cb:4b:ae:41:df:22:79:
         40:34:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org