Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa
File:                     3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa (raw, json)
Hash identifier:          fUE4oMATEHKeLSmb/hUvthEqg2f/QFdj/ybFaOq9ICA=
Subject key identifier:   F2:80:A8:1A:B3:01:89:D1:F4:8D:CA:39:05:A3:89:7C:87:1E:D4:6A
Certificate issuer:       /CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
Certificate serial:       38F5E10F7E96313E8B609AAAF1EF7F970A919C4D
Authority key identifier: 30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa
Signing time:             Wed 22 Mar 2023 19:08:35 +0000
ROA not before:           Wed 22 Mar 2023 19:03:35 +0000
ROA not after:            Wed 20 Mar 2024 19:08:35 +0000
asID:                     266492
IP address blocks:        170.244.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f5:e1:0f:7e:96:31:3e:8b:60:9a:aa:f1:ef:7f:97:0a:91:9c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
        Validity
            Not Before: Mar 22 19:03:35 2023 GMT
            Not After : Mar 20 19:08:35 2024 GMT
        Subject: CN=F280A81AB30189D1F48DCA3905A3897C871ED46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:02:76:f9:9b:97:1e:05:0d:9a:ec:ea:4a:
                    ec:7a:f0:d5:23:d7:66:bd:0e:da:74:0b:ff:96:09:
                    a1:72:df:0e:0b:f1:71:f6:5c:bf:b1:b4:ba:7d:2b:
                    ad:b7:d2:51:d2:ea:b2:f5:c6:c0:a6:ff:e5:a1:a3:
                    9c:10:d3:0c:0d:d0:79:33:c7:f2:6c:4a:3c:12:f3:
                    1c:ee:9b:9a:39:74:0e:18:59:ed:e0:42:b0:f9:f5:
                    f4:1a:4f:8c:4b:63:49:54:47:93:74:a1:06:79:8f:
                    36:4a:20:9b:b5:f2:50:2a:52:19:d3:30:81:09:f3:
                    07:a6:14:aa:b7:b2:9f:1b:4b:c3:ed:c2:26:09:f5:
                    13:f1:a8:95:b8:f8:aa:78:be:c0:4b:7d:e6:84:3d:
                    fc:73:76:fc:85:4b:ff:2b:1a:ae:c8:a1:f4:16:56:
                    95:00:36:24:40:cc:4e:26:c4:e8:fb:c8:ee:fb:45:
                    f8:3a:93:32:8d:29:22:41:58:08:88:f9:bf:76:71:
                    cf:c7:28:b5:ed:0c:1f:45:1a:44:01:08:2a:1a:54:
                    59:60:bd:bf:72:12:15:bd:7e:4f:61:46:dd:11:9d:
                    65:3c:c1:35:38:5e:54:9f:fe:ea:22:3a:0d:53:dd:
                    70:dd:e0:32:e4:70:62:20:c6:36:02:44:82:8f:09:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:A8:1A:B3:01:89:D1:F4:8D:CA:39:05:A3:89:7C:87:1E:D4:6A
            X509v3 Authority Key Identifier:
                keyid:30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:db:a8:7c:6e:81:90:c3:ae:8b:50:8a:56:02:0e:24:d4:
         22:9c:73:43:7a:3d:66:7d:74:d6:43:a0:b0:4a:d1:52:03:03:
         80:04:bc:e0:cf:cb:7f:c6:e3:08:45:6a:2c:51:ec:9e:b0:c5:
         73:d8:99:4c:51:67:e6:f6:b1:53:41:29:4d:76:11:4e:2a:01:
         37:15:22:62:2c:56:95:68:18:dd:a5:b9:69:85:1f:6d:81:03:
         b4:c1:90:36:2f:d2:4f:61:83:64:cf:f1:e3:fd:4a:ca:b4:53:
         bb:26:e9:70:11:41:a8:8b:de:50:21:0f:01:55:e7:20:ef:7f:
         06:b1:0f:5f:7f:5c:db:85:22:39:91:f1:c8:b9:0e:14:b5:58:
         4b:e6:2e:40:ff:e7:21:bc:80:ee:3e:09:f0:ba:b3:7f:f3:40:
         60:f2:bf:1a:73:d0:64:94:05:f6:71:b3:8c:f8:23:97:4a:f3:
         4d:bb:3c:35:05:ee:ed:d9:e1:d8:2c:8c:a4:bc:58:b4:88:9c:
         d3:b5:bc:1e:91:db:90:bc:28:c2:52:2e:56:ac:e2:e3:53:49:
         46:3b:80:9a:04:7b:34:2d:7c:c5:ee:04:5e:35:98:d4:73:d2:
         13:6b:dc:19:50:3f:54:12:e3:bf:e0:ef:bf:ca:68:fb:f2:b7:
         a6:e5:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org