Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138342e302f32322d3234203d3e20323636343837.roa
File:                     3137302e38332e3138342e302f32322d3234203d3e20323636343837.roa (raw, json)
Hash identifier:          tZl3dS2A4vdqUsbcHSUf+V8wB4K7QCMbV81SpnDLkBk=
Subject key identifier:   F4:B3:DF:B1:9D:75:C1:ED:7A:BF:41:78:A0:5D:76:F9:42:09:9D:9A
Certificate issuer:       /CN=2585A8C398BE08A08EC2DD74E3C377E02FCC61F1
Certificate serial:       6B1F9E2AD873D5AF07BFACE4917402BBA8FA02B8
Authority key identifier: 25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138342e302f32322d3234203d3e20323636343837.roa
Signing time:             Wed 19 Jan 2022 22:31:31 +0000
ROA not before:           Wed 19 Jan 2022 22:26:31 +0000
ROA not after:            Wed 18 Jan 2023 22:31:31 +0000
asID:                     266487
IP address blocks:        170.83.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1f:9e:2a:d8:73:d5:af:07:bf:ac:e4:91:74:02:bb:a8:fa:02:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2585A8C398BE08A08EC2DD74E3C377E02FCC61F1
        Validity
            Not Before: Jan 19 22:26:31 2022 GMT
            Not After : Jan 18 22:31:31 2023 GMT
        Subject: CN=3082010A0282010100A5D98DAA219E4A7F35E328F0E51082995C91A1C855977D9E13EEF8FB1A762351E24298E38092B4702E2B09520BD80EF26D22DFE2B45FD6381434C11B6C7C11F688FA5CA971588AB9FECD07995FAA113D5ECD82F0553BFB19DB900E2A6B9D16AD75D4088DF077F92F43EF6D0B9714C91EC431A1A7DD97923A516A60B43985908D92578BE92FB1DB41B099E73FA27A1AF60E1A5183549A1E1687B4DF9BDE94D73683330C9B1C4E246261CA6DA03D9A79925509301E1397F688097488C5FCFB894DB81634D9EAC79F7F8D0755E12446EB8E9A7BD3CB809AE6F8251FFBC9B7AD1EE27C9968C1C7CD35363CA1EBF2843882FDE6FDEFA013E3638B222934741113AD690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:8d:aa:21:9e:4a:7f:35:e3:28:f0:e5:10:
                    82:99:5c:91:a1:c8:55:97:7d:9e:13:ee:f8:fb:1a:
                    76:23:51:e2:42:98:e3:80:92:b4:70:2e:2b:09:52:
                    0b:d8:0e:f2:6d:22:df:e2:b4:5f:d6:38:14:34:c1:
                    1b:6c:7c:11:f6:88:fa:5c:a9:71:58:8a:b9:fe:cd:
                    07:99:5f:aa:11:3d:5e:cd:82:f0:55:3b:fb:19:db:
                    90:0e:2a:6b:9d:16:ad:75:d4:08:8d:f0:77:f9:2f:
                    43:ef:6d:0b:97:14:c9:1e:c4:31:a1:a7:dd:97:92:
                    3a:51:6a:60:b4:39:85:90:8d:92:57:8b:e9:2f:b1:
                    db:41:b0:99:e7:3f:a2:7a:1a:f6:0e:1a:51:83:54:
                    9a:1e:16:87:b4:df:9b:de:94:d7:36:83:33:0c:9b:
                    1c:4e:24:62:61:ca:6d:a0:3d:9a:79:92:55:09:30:
                    1e:13:97:f6:88:09:74:88:c5:fc:fb:89:4d:b8:16:
                    34:d9:ea:c7:9f:7f:8d:07:55:e1:24:46:eb:8e:9a:
                    7b:d3:cb:80:9a:e6:f8:25:1f:fb:c9:b7:ad:1e:e2:
                    7c:99:68:c1:c7:cd:35:36:3c:a1:eb:f2:84:38:82:
                    fd:e6:fd:ef:a0:13:e3:63:8b:22:29:34:74:11:13:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:DF:B1:9D:75:C1:ED:7A:BF:41:78:A0:5D:76:F9:42:09:9D:9A
            X509v3 Authority Key Identifier:
                keyid:25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138342e302f32322d3234203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:00:80:74:27:54:3a:7b:31:29:de:3d:7c:e9:28:80:59:
         5e:38:e7:6a:c8:5c:c0:9f:17:f7:0c:08:6d:df:12:d1:ea:c2:
         1f:42:81:05:46:a8:c1:35:48:ee:b8:fb:c3:06:b1:4a:5c:a8:
         1a:7a:7a:ed:5b:61:37:d3:2f:02:ac:9c:01:12:05:50:55:2d:
         15:92:63:39:81:26:fa:42:91:04:28:a1:11:e8:be:03:00:2e:
         be:01:8f:69:a4:96:c2:06:7f:bd:d4:27:ac:29:fb:d7:fa:ee:
         31:b5:be:bd:d5:c8:e1:43:d7:4f:e9:1d:41:dd:21:66:dd:bb:
         df:b4:ae:d7:c6:5e:a1:a2:3a:e0:51:38:c9:95:f3:bd:0d:40:
         bb:44:49:24:a3:7c:68:17:2f:1c:70:6c:9c:36:02:fe:28:1b:
         a1:12:29:42:90:df:2b:4b:17:12:99:d5:19:13:45:9e:7f:df:
         e3:7d:86:40:5b:6e:11:02:51:0b:0b:ef:85:24:5f:c8:ee:07:
         33:5f:66:b0:9f:ac:b2:4f:7a:66:1b:94:51:a2:5f:7d:a6:6c:
         d3:23:20:0c:19:b7:23:df:6c:05:78:a9:c7:04:38:74:63:16:
         b5:10:cc:7b:07:d5:bc:2a:8c:dc:5e:71:a8:6b:94:dc:a8:df:
         00:61:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org