Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa
File:                     3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (raw, json)
Hash identifier:          ufSxtPVXN7YJnkq4Tuxm2pZT6juz3zGAI/S+09t6f6I=
Subject key identifier:   5A:9C:FA:84:3C:C7:24:5B:DC:09:5A:E0:A7:4B:2C:91:14:B3:56:4B
Certificate issuer:       /CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
Certificate serial:       21A0D48851A67873BF81E881133488FFB630790F
Authority key identifier: F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa
Signing time:             Thu 04 Apr 2024 17:40:03 +0000
ROA not before:           Thu 04 Apr 2024 17:35:03 +0000
ROA not after:            Thu 03 Apr 2025 17:40:03 +0000
asID:                     265239
IP address blocks:        170.239.176.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a0:d4:88:51:a6:78:73:bf:81:e8:81:13:34:88:ff:b6:30:79:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
        Validity
            Not Before: Apr  4 17:35:03 2024 GMT
            Not After : Apr  3 17:40:03 2025 GMT
        Subject: CN=5A9CFA843CC7245BDC095AE0A74B2C9114B3564B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:f8:68:f8:c6:76:df:18:3d:0a:fb:0c:b3:
                    60:f1:af:a9:3e:69:49:eb:03:8c:af:ab:01:a0:7b:
                    a5:5f:33:40:d3:1d:08:a3:45:ff:ea:5e:f8:19:34:
                    2d:65:9a:15:a5:e0:a8:d7:48:6e:95:3a:de:31:9d:
                    19:7d:8f:c7:09:19:00:1b:c3:ba:3c:3b:f2:cc:54:
                    8b:81:85:79:e0:e7:fb:6e:34:3e:6c:53:fe:c3:75:
                    7b:3a:d3:65:ec:43:30:2a:d8:1a:87:26:7a:f9:a9:
                    e1:dd:2f:a2:f6:01:17:60:11:6b:7f:46:50:f9:86:
                    5b:da:90:cf:12:5e:c2:d3:23:7a:2c:05:ae:43:d8:
                    9a:27:7a:7a:a8:b4:df:ff:b5:e9:bd:77:33:56:7b:
                    27:50:ae:00:e2:37:4d:c8:3a:6a:1c:c9:f3:01:bd:
                    b4:74:a3:6f:69:e3:6c:65:53:ae:0b:e3:91:1f:8e:
                    a6:eb:d4:32:ba:4e:f7:f8:ac:96:c2:41:21:c5:9d:
                    09:23:c3:fe:bb:c8:a1:cf:5b:e9:ab:f1:4a:dc:73:
                    62:9d:4f:61:01:25:c2:64:61:28:da:dd:c5:4d:a0:
                    03:a5:aa:fd:6a:65:ed:99:c2:11:ad:10:e2:ee:fe:
                    b9:35:8b:d8:ac:55:5f:2c:03:c7:05:f4:fc:35:55:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:FA:84:3C:C7:24:5B:DC:09:5A:E0:A7:4B:2C:91:14:B3:56:4B
            X509v3 Authority Key Identifier:
                keyid:F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:db:dc:2a:ef:84:d6:43:f0:03:c9:0e:c1:fb:6c:da:62:
         4a:99:64:ee:38:df:09:06:a1:73:cf:70:0d:e5:b4:d5:3c:c0:
         5a:9b:e7:a2:67:71:ee:21:55:41:13:c1:05:2c:d8:fb:21:d0:
         f9:a3:88:f3:ac:70:e0:d0:24:d8:f6:e7:cf:15:c7:16:c8:bf:
         95:c9:45:bb:b1:63:24:b2:4c:c8:c7:92:bc:9c:5d:29:a8:81:
         70:9f:59:d1:f4:b4:f7:fd:0c:27:45:2f:19:98:bc:ae:32:2e:
         ab:61:5f:09:1e:5f:24:a2:5d:06:3e:8e:93:1b:08:d3:a3:06:
         34:53:a8:c5:53:b1:70:d6:f7:89:b4:2a:c3:64:9b:3b:c0:26:
         fa:54:8f:6c:bd:7b:12:fc:de:39:1b:71:39:41:62:fe:74:5c:
         48:84:e4:9a:8f:98:50:70:30:61:de:cb:38:c2:00:d7:29:06:
         ce:f7:7c:62:1d:17:f7:38:0d:7a:ca:f8:51:46:df:88:6d:a2:
         8e:e5:7e:cb:4f:b0:91:84:18:14:b8:03:00:57:52:f6:b5:d2:
         7b:b6:d7:68:30:4c:8f:ce:85:8c:2b:8e:de:28:95:80:d6:a6:
         84:4e:ec:6f:66:4b:7c:5c:bf:2b:d4:ce:0e:9b:35:78:3f:45:
         3d:37:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org