Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e203238323230.roa
File:                     3137302e302e3230342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          AGUYrPueAc2Lt1NvcNeU+uVNLvSx5WDLSMCnFusQtsg=
Subject key identifier:   F9:1A:6D:D6:F6:87:01:D9:D1:53:75:E6:E7:98:72:78:5E:7E:A3:A0
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       7C5E7F4F482740DC24741E01C92BF4A22D226A29
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:19 +0000
ROA not before:           Thu 06 Oct 2022 17:51:19 +0000
ROA not after:            Thu 05 Oct 2023 17:56:19 +0000
asID:                     28220
IP address blocks:        170.0.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5e:7f:4f:48:27:40:dc:24:74:1e:01:c9:2b:f4:a2:2d:22:6a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:19 2022 GMT
            Not After : Oct  5 17:56:19 2023 GMT
        Subject: CN=F91A6DD6F68701D9D15375E6E79872785E7EA3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:3a:af:db:70:3d:84:87:81:ae:a9:a7:f6:
                    15:c8:53:83:54:52:ac:a2:63:2a:64:10:5c:8e:bf:
                    44:98:f5:ab:03:42:d3:ed:06:62:6a:58:a4:87:5a:
                    ca:fb:51:6d:1d:3e:f2:72:b3:d4:8e:0e:0b:34:63:
                    6b:70:3d:46:ef:2c:72:0e:a2:07:1a:7e:5c:40:a0:
                    8f:6a:46:e9:c6:e3:5f:ff:d1:26:84:69:f7:c7:17:
                    36:99:54:3f:a0:2d:76:60:62:11:66:04:08:8a:f0:
                    38:91:35:44:f4:cb:cc:6d:3b:1d:62:cb:fc:cd:2d:
                    49:cd:6b:dd:68:ff:d6:ec:43:fa:c4:08:17:57:2a:
                    e6:5f:9c:33:f9:7a:fa:29:b4:3d:4f:7a:fb:34:8e:
                    dd:d0:5a:79:e9:a9:c8:f5:3a:83:5a:e8:5a:60:a4:
                    d3:22:f6:98:2c:7a:b2:6c:d6:aa:3b:74:13:27:df:
                    e5:2d:31:b0:23:08:08:c6:f4:e3:3f:76:52:b9:6d:
                    ec:a5:e2:1d:1b:ef:37:7d:10:d5:2d:75:14:c3:d0:
                    10:69:2f:24:dd:24:d6:41:1c:54:bf:25:c2:04:39:
                    d4:6b:80:68:23:bd:36:ed:90:8c:05:a3:49:ac:f2:
                    5c:ad:65:59:82:de:a7:e4:91:14:86:c4:f8:90:3f:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:6D:D6:F6:87:01:D9:D1:53:75:E6:E7:98:72:78:5E:7E:A3:A0
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e302e3230342e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:8a:16:53:69:f2:cc:2c:5d:c6:a4:53:af:de:c0:a4:fe:
         63:74:38:06:ef:1a:65:28:50:85:ba:be:96:fe:43:cb:dc:ae:
         76:7b:83:2a:11:2e:22:dd:39:e0:8b:f7:b6:15:d6:78:44:1b:
         6d:ab:4d:7d:8e:85:c9:4a:6d:85:b6:7c:80:5b:85:d1:85:54:
         ff:16:27:ae:b1:96:ee:0e:61:b2:bf:2a:4b:f7:97:12:31:f8:
         58:4a:95:f9:6c:56:a5:74:91:f4:44:5e:1d:74:07:e2:28:ac:
         12:b9:b8:51:9e:c4:24:76:17:fc:6e:d5:ce:aa:e2:b1:e2:32:
         a8:cc:2f:6d:63:cb:94:37:76:a6:09:3b:0d:10:8a:5d:1b:6a:
         09:f1:46:97:e6:00:d4:74:97:7d:81:ca:f4:de:5e:f6:3c:0f:
         ee:2b:5a:04:74:a1:d5:81:90:9d:9b:c7:24:b0:d7:e2:ec:5c:
         8c:68:80:05:74:10:2e:99:d3:af:16:3b:e4:62:c1:23:df:15:
         9d:ba:f5:55:fe:96:3b:5c:c8:ab:19:ff:25:7a:3e:e2:55:e0:
         d0:52:18:a0:92:e5:6d:65:28:cf:fb:ab:f1:ad:83:87:10:fe:
         0e:18:a3:46:ef:a8:96:7c:c8:ad:6b:c1:e5:e7:90:35:d2:df:
         e8:d8:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org