Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32322d3232203d3e20323635313831.roa
File:                     3137302e3233332e33362e302f32322d3232203d3e20323635313831.roa (raw, json)
Hash identifier:          0+uFXnFt50Pyg5XGxxX5Lr6efogzhueqb6au+hvqFHk=
Subject key identifier:   C5:A3:B6:90:56:0E:92:16:75:1B:BD:26:C3:8C:20:77:CE:D0:41:0F
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       2B33F66DE0BD5C8E26DA3514D1F8D8576ECD21D3
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32322d3232203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:25 +0000
ROA not before:           Fri 02 Feb 2024 00:11:25 +0000
ROA not after:            Fri 31 Jan 2025 00:16:25 +0000
asID:                     265181
IP address blocks:        170.233.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:33:f6:6d:e0:bd:5c:8e:26:da:35:14:d1:f8:d8:57:6e:cd:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:25 2024 GMT
            Not After : Jan 31 00:16:25 2025 GMT
        Subject: CN=C5A3B690560E9216751BBD26C38C2077CED0410F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:00:af:b7:27:72:cf:29:09:be:04:55:51:
                    9b:7c:d3:c6:dc:e3:5f:63:be:67:04:85:ac:46:8a:
                    ed:f6:c0:94:fa:94:47:78:82:8b:05:0d:23:70:dd:
                    9e:ed:b1:d3:b1:14:6c:1c:f0:be:14:5a:93:b1:38:
                    b5:6d:13:32:fe:2a:1d:65:85:70:1a:47:42:f8:1e:
                    df:90:2b:3b:b0:2d:eb:0a:70:a1:1e:b0:e0:4a:72:
                    c6:07:3c:fd:5b:c5:51:35:e0:6b:ad:d6:0c:46:59:
                    cd:7d:3c:39:ef:b1:6c:1b:a8:f3:6d:89:81:1b:83:
                    62:1f:46:0a:df:67:b5:9e:f6:8b:27:4e:25:a4:13:
                    13:38:9b:10:f1:ba:42:ff:17:d9:45:b4:99:b7:30:
                    60:9a:16:95:02:46:6c:9c:b6:0e:48:56:a9:c4:03:
                    99:98:87:1b:3e:bb:88:cf:db:5b:99:7e:96:fa:25:
                    01:91:29:48:6e:d5:98:0d:f9:1e:7e:3b:2d:57:e3:
                    2d:7a:ed:59:cd:32:02:6a:51:0a:96:b2:56:c3:eb:
                    6e:2a:05:b3:e7:fb:3d:b3:c7:77:dc:25:3a:ce:37:
                    68:9d:6f:38:d4:8d:29:8c:43:2c:fb:11:a1:fb:f5:
                    c1:c5:b2:00:be:c4:ea:b8:e6:0e:98:be:f0:4d:4b:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:B6:90:56:0E:92:16:75:1B:BD:26:C3:8C:20:77:CE:D0:41:0F
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32322d3232203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:92:0a:ab:be:03:d2:9f:0a:1c:81:c1:7d:a9:c4:c2:a0:b1:
         eb:7e:c7:4b:10:87:f0:ea:0c:14:90:a1:b1:91:f8:7f:74:52:
         6f:c0:86:59:bf:f0:5b:b3:92:d2:e2:7b:74:bf:f9:4e:ce:8d:
         98:74:18:27:1a:c5:ae:bd:e0:8a:1c:5d:ef:71:7b:6d:f0:28:
         ee:1d:d3:ba:a8:47:d7:19:94:e4:61:09:55:ac:97:7a:0f:76:
         8e:3b:1c:6b:d4:b8:2b:a4:e8:c6:84:ee:a1:48:ac:c3:17:2d:
         cf:76:c9:9e:6c:4c:6d:0b:ed:9f:c4:8b:7f:48:4a:50:fc:88:
         28:5b:98:84:61:39:a9:0c:5c:db:4b:70:3c:7f:d9:5f:f3:e9:
         ce:67:8b:c3:72:6d:6a:6c:0d:08:1c:0b:30:dc:b7:ec:16:9d:
         02:50:ef:ab:db:c6:65:6c:64:dd:c7:13:72:cd:5b:ef:f7:76:
         6d:34:55:b3:17:48:f3:80:2f:ab:32:d3:ac:29:9d:d4:4b:7a:
         b8:c2:17:12:59:7f:8e:6f:35:e4:ce:8f:18:e2:bf:41:41:f7:
         e7:1d:c3:bd:b0:fc:5e:98:e7:55:ef:b7:83:88:a3:f9:85:b2:
         55:65:d3:09:90:cc:cf:b6:eb:d0:3b:06:5e:ba:7b:94:1f:41:
         e0:66:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org