Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa
File:                     3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa (raw, json)
Hash identifier:          9002u76MjI4FwaGbB5OsFnBWG5fT1X1RHQuQXLE9kcI=
Subject key identifier:   4D:5B:D5:E8:ED:06:66:E9:6A:28:D9:71:13:21:AA:96:CF:CA:23:44
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       50402E2672C2A2B358E06DC6138D93E064205CB3
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 16:59:51 +0000
ROA not before:           Tue 02 May 2023 16:54:51 +0000
ROA not after:            Tue 30 Apr 2024 16:59:51 +0000
asID:                     266492
IP address blocks:        170.244.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:40:2e:26:72:c2:a2:b3:58:e0:6d:c6:13:8d:93:e0:64:20:5c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:54:51 2023 GMT
            Not After : Apr 30 16:59:51 2024 GMT
        Subject: CN=4D5BD5E8ED0666E96A28D9711321AA96CFCA2344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:da:f6:b9:07:9c:60:f5:e7:59:d2:7e:ec:
                    5a:42:3c:68:10:a3:33:1e:b3:95:4b:36:a6:89:d2:
                    e2:2f:d9:c7:c4:84:7b:87:f1:1b:30:f2:37:64:1d:
                    49:ef:28:d1:f6:f0:da:49:6f:6b:59:57:c3:4f:66:
                    9f:62:d7:24:fc:bb:0f:f6:8b:e7:27:8d:d9:d7:13:
                    18:24:a8:11:5c:32:b4:6d:0d:05:19:e9:69:f9:5a:
                    3d:aa:54:98:55:bb:03:1e:1a:18:03:bb:3e:65:ef:
                    ef:9e:85:0b:db:06:0b:59:da:93:35:61:cd:f9:eb:
                    20:45:19:cb:a0:5b:2d:89:02:20:c6:59:72:d8:e2:
                    c7:d8:5b:99:df:77:ff:bc:bf:40:c9:b0:b8:66:84:
                    be:e2:50:74:4f:fc:bd:95:16:70:65:58:60:e5:5a:
                    5d:c4:b9:bf:75:96:72:e1:82:c2:3b:b2:9f:e1:e4:
                    b5:9f:d7:0f:87:0a:c7:ad:92:c5:c8:7a:f0:86:a4:
                    6f:7f:81:7b:81:51:00:55:8f:8a:59:b4:dd:70:70:
                    61:67:62:09:2a:28:ca:54:34:1c:5a:6f:b9:ab:b4:
                    43:7d:b2:7d:2d:3f:70:03:30:54:0d:61:93:34:9b:
                    ec:91:d5:ba:bc:88:e1:c2:71:5a:9f:2d:af:69:4f:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:D5:E8:ED:06:66:E9:6A:28:D9:71:13:21:AA:96:CF:CA:23:44
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:de:e8:84:2b:78:11:10:78:60:00:65:47:98:7f:3c:33:
         dd:08:d3:a0:96:30:4f:c0:1d:2f:59:a9:57:2e:63:20:c1:d6:
         e2:29:4c:60:41:ea:10:f7:dc:c2:2c:19:e9:79:e9:bf:82:5f:
         3f:75:b7:b8:47:5b:92:be:34:95:37:61:ce:e8:3b:01:ef:cb:
         7d:41:47:62:e1:16:5a:28:50:b5:e8:51:ab:c5:56:ce:da:eb:
         01:62:47:2d:99:8a:3f:4c:ac:18:6e:91:30:89:7d:e4:79:e0:
         98:ee:1e:38:7d:c7:d7:8d:31:b4:ee:9e:28:ce:66:71:16:ab:
         60:88:cc:60:05:d6:44:1d:fe:5d:f4:48:08:17:12:95:d6:9c:
         25:96:f9:0e:15:c0:df:1e:9a:06:69:41:ca:64:ed:fe:ba:0b:
         01:32:e8:cd:10:3b:f9:16:5c:cf:9e:29:f5:52:fc:95:6e:e8:
         2b:5a:ad:22:23:9c:fd:9a:71:d8:7d:2f:f9:91:97:9d:c0:6c:
         e9:ec:c2:1a:d9:fe:f9:58:64:42:72:13:1d:51:07:fb:0e:b7:
         4f:14:b3:b7:f3:f3:86:d0:75:a1:0d:43:10:26:fe:7e:2a:03:
         a5:a7:96:eb:b4:67:a4:ae:ee:14:24:f3:71:b6:36:9f:f4:25:
         03:f8:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org