Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa
File:                     3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          xvSVKmrMx7PRd6ju4+jXnr5j4GxJXrKiM8mLNr+u7nU=
Subject key identifier:   AA:4A:CD:00:DB:4A:78:AD:79:B1:FB:BF:92:F8:76:28:C0:06:81:5A
Certificate issuer:       /CN=4C5E4BEB7398912F161523952333D01C9BF59452
Certificate serial:       05F1DA2DFB25B0E65F45A2A6CE4A02262E1A13B2
Authority key identifier: 4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 04 Jan 2024 20:42:19 +0000
ROA not before:           Thu 04 Jan 2024 20:37:19 +0000
ROA not after:            Thu 02 Jan 2025 20:42:19 +0000
asID:                     262645
IP address blocks:        170.246.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:da:2d:fb:25:b0:e6:5f:45:a2:a6:ce:4a:02:26:2e:1a:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5E4BEB7398912F161523952333D01C9BF59452
        Validity
            Not Before: Jan  4 20:37:19 2024 GMT
            Not After : Jan  2 20:42:19 2025 GMT
        Subject: CN=AA4ACD00DB4A78AD79B1FBBF92F87628C006815A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:6b:46:d0:d3:60:00:e3:4c:96:ce:d0:55:
                    7b:b6:20:43:d5:c3:9b:2e:0c:eb:52:52:17:9f:aa:
                    33:4a:83:5f:20:be:c9:e7:1d:98:51:67:59:ca:0c:
                    90:93:64:be:af:ad:54:6c:72:ba:68:48:7d:cf:80:
                    09:e6:2e:24:5f:5f:9c:27:93:41:4a:29:f0:a6:7d:
                    77:82:f4:e2:38:bf:c9:21:cd:cd:92:c3:1b:a8:d2:
                    e3:1a:2d:81:26:5a:e9:db:f6:7a:e2:5f:dd:ba:04:
                    92:1a:10:a8:1c:5d:93:cf:b2:b2:0c:2f:87:8e:60:
                    08:4d:78:2a:a4:76:c3:22:04:5a:19:b2:34:62:12:
                    55:26:74:b7:4a:b5:df:8c:6d:7a:dc:c2:94:9e:52:
                    08:c8:c3:18:bf:79:cd:65:b5:67:fc:8b:40:08:0c:
                    7c:5d:40:8c:cf:a9:06:1b:86:c9:ae:a6:42:6c:f3:
                    d5:d8:a1:38:26:c1:fc:33:f9:b5:36:98:3f:85:5c:
                    82:6e:1d:5a:4e:e2:0c:dc:5f:15:e1:fe:9b:d8:66:
                    fd:19:8b:6c:ce:41:5e:ac:62:18:18:a8:28:51:01:
                    c8:39:dd:0a:7a:45:23:e5:14:92:c0:b6:8e:28:99:
                    92:e5:56:09:94:73:9a:d4:f2:c3:7b:48:39:4e:ee:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:CD:00:DB:4A:78:AD:79:B1:FB:BF:92:F8:76:28:C0:06:81:5A
            X509v3 Authority Key Identifier:
                keyid:4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3137302e3234362e3234302e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:94:85:20:77:82:81:88:83:67:7c:5f:7b:ef:47:1d:d5:
         76:15:d8:78:80:8a:f9:ef:96:df:86:30:56:6a:d2:7b:29:7b:
         a4:12:a4:f9:46:b1:35:50:b1:e0:fd:13:a8:23:7a:17:24:fb:
         cb:3f:99:6c:85:93:c7:02:43:4f:e0:7d:a9:07:62:73:db:f2:
         89:e6:c0:d3:37:88:1b:f7:77:59:84:2f:2a:e0:0f:d6:8d:72:
         03:d3:b5:d8:79:51:d4:ed:22:c9:5d:ee:49:da:25:b9:e0:aa:
         62:3c:78:12:ef:5f:6e:27:51:d1:29:c5:5c:64:a9:8c:6b:18:
         83:be:fd:ae:64:60:23:dc:67:1a:e4:dc:f3:3d:6c:f0:3d:14:
         61:e3:b0:a4:b2:5d:13:3a:78:08:56:ed:a1:17:74:d8:31:da:
         ab:cb:2d:fd:94:24:27:88:35:8a:64:2e:f5:52:c0:e5:d8:28:
         17:62:98:c3:9d:45:a4:83:17:a2:a5:44:ac:ff:f1:0c:d7:ef:
         94:61:9c:24:4a:55:89:88:16:1d:e6:4a:e6:b2:2c:f3:a6:4f:
         aa:2a:67:d7:13:a6:c3:ac:e8:d1:87:af:04:a7:09:f3:4a:00:
         ca:37:a9:e6:f2:0a:3a:1d:75:2a:3c:b6:d7:a6:86:2b:aa:bb:
         74:07:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org