Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
File:                     3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          a+IQi/WLQBpFd3u1LcT9bnbFV0CCT6m6Pt31VdMFqiA=
Subject key identifier:   E8:34:53:BC:DA:1E:6A:C3:2F:73:AE:DE:41:FA:62:B5:5C:7C:DA:44
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       2B8E30EE41182A87445C8E27F0781C6617E0DB90
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        170.245.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:30:ee:41:18:2a:87:44:5c:8e:27:f0:78:1c:66:17:e0:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=E83453BCDA1E6AC32F73AEDE41FA62B55C7CDA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:2b:c3:b6:c9:1e:d7:9d:9c:4e:3a:f8:ff:
                    ef:9f:41:e5:da:c5:14:ba:a5:4a:b3:5a:47:cf:e5:
                    a8:af:be:63:ea:9e:bb:4b:e3:26:c6:66:d4:a4:a3:
                    4e:3c:ba:19:cf:88:ac:05:e5:91:c3:5b:1e:5e:0c:
                    d4:cd:df:87:6f:1c:3e:6d:75:08:62:52:db:8b:1c:
                    c8:94:14:af:99:8d:9d:51:c4:e0:55:52:0b:c3:95:
                    9f:11:64:c3:e5:ab:f4:ac:14:42:da:3a:ab:e1:aa:
                    47:10:2e:21:80:2b:5f:f9:aa:9f:3e:7c:21:0f:74:
                    37:87:76:bd:a6:56:03:5e:4d:7c:d5:12:a4:a0:3f:
                    97:d7:86:9b:57:66:35:36:55:c1:f6:0d:2c:08:40:
                    88:df:48:2b:9b:df:37:09:e5:24:a8:ec:b4:6b:93:
                    11:5b:8a:7f:ae:59:a6:27:53:76:07:4d:64:95:c0:
                    13:47:1e:f4:88:a3:0d:21:53:08:05:dd:90:b0:ad:
                    ff:fa:07:94:a3:d5:6e:7b:d6:d4:04:67:6c:da:5a:
                    17:a8:da:32:22:76:fb:2f:d2:04:79:50:b5:1f:7d:
                    4a:00:f4:da:14:ee:9e:7b:c7:02:4f:3e:27:55:13:
                    14:47:ef:a3:15:6e:9a:a7:8b:2a:c2:f1:9e:83:34:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:53:BC:DA:1E:6A:C3:2F:73:AE:DE:41:FA:62:B5:5C:7C:DA:44
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:e1:2b:a3:14:04:38:21:19:d7:8f:b9:e4:17:25:3e:02:
         8b:42:f5:db:57:dc:1c:aa:a5:62:d3:dc:4a:2a:3a:c0:23:66:
         34:17:73:a0:65:45:28:55:7e:15:49:7e:5c:0b:e3:6b:96:c8:
         01:e4:92:f0:f9:18:97:df:0e:b7:42:c5:f5:9c:d5:89:95:00:
         7c:1b:c5:f2:c8:5b:ba:a7:0f:75:48:20:9b:03:b0:f0:05:e4:
         0f:3b:72:aa:ba:fb:f9:0e:91:7f:c4:90:71:ac:2e:bb:d0:4e:
         eb:2d:1f:28:92:c4:4c:23:ca:52:b9:ab:a7:6f:16:57:25:34:
         e6:a7:81:5c:75:42:23:02:9a:4e:ac:ce:80:93:56:f9:98:cc:
         33:14:3d:65:95:2f:b1:69:70:af:fd:a5:76:9c:eb:f2:7b:c1:
         fc:46:13:89:29:83:27:26:6c:a0:60:b6:8a:b7:61:22:c7:56:
         1e:cf:34:83:ab:10:09:e7:75:24:5f:0d:53:dd:bd:a6:d1:b1:
         9b:3d:a0:54:92:d4:ff:5b:6a:12:5b:eb:5b:5d:22:98:34:22:
         28:6d:77:bb:e6:d7:c5:1e:24:17:86:22:2c:a3:3b:17:8e:e9:
         6b:82:3b:1f:41:e1:c7:b6:ce:8a:88:6b:29:58:a5:6b:e3:73:
         5d:e7:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org