Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa
File:                     3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (raw, json)
Hash identifier:          Aer/+PN6d1RFmgwADQ+abr8uO6jRqglap5n47TTPqyQ=
Subject key identifier:   6A:E1:86:09:FB:13:CD:16:D0:7D:C4:6E:C3:DB:03:4C:7C:98:10:BE
Certificate issuer:       /CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
Certificate serial:       4299D7D081114C1185516F6389A791EE45DD0B14
Authority key identifier: BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa
Signing time:             Tue 26 Jul 2022 13:34:53 +0000
ROA not before:           Tue 26 Jul 2022 13:29:53 +0000
ROA not after:            Tue 25 Jul 2023 13:34:53 +0000
asID:                     266374
IP address blocks:        170.80.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:d7:d0:81:11:4c:11:85:51:6f:63:89:a7:91:ee:45:dd:0b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
        Validity
            Not Before: Jul 26 13:29:53 2022 GMT
            Not After : Jul 25 13:34:53 2023 GMT
        Subject: CN=6AE18609FB13CD16D07DC46EC3DB034C7C9810BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:75:0b:4a:7a:28:15:50:be:2f:e5:41:ac:
                    99:12:df:19:6c:71:97:d7:9b:2a:3b:ab:9f:2e:09:
                    2d:07:88:a0:03:e4:41:33:90:55:0a:5e:f1:af:9b:
                    5a:30:5c:44:d4:fe:f1:d7:a9:97:a3:37:48:a3:5f:
                    44:81:3b:13:3a:ba:86:6d:1e:4f:7a:3d:2e:40:bf:
                    c2:50:99:6a:e8:a4:94:c7:0f:ad:01:71:24:7e:a2:
                    bb:88:e6:45:15:6c:b8:d0:56:07:38:43:b7:6c:7b:
                    3b:6e:be:f9:7d:c5:c6:fa:7e:a3:b8:98:42:ea:35:
                    81:8c:15:ec:1f:9b:ed:ea:0b:7b:1d:a4:f2:bc:7a:
                    ed:8a:58:67:68:a2:89:06:a1:03:40:79:0f:7b:3d:
                    05:43:7b:91:c2:09:3f:e7:ba:68:e0:fe:7c:af:53:
                    d4:6e:15:6b:f4:88:9d:9b:c3:8a:ba:82:d6:9d:98:
                    3e:dc:05:a2:e9:72:74:85:c2:95:a5:56:3a:2a:cd:
                    cf:1f:2c:8b:d1:cb:af:d6:9c:24:84:40:11:94:a1:
                    e3:70:aa:a4:47:52:f1:a8:22:96:0f:c6:dc:97:d1:
                    00:6c:8a:57:dd:89:fb:14:0f:69:a3:83:be:fc:74:
                    1c:29:59:e4:a0:3c:b7:df:c8:8e:50:ec:da:08:35:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E1:86:09:FB:13:CD:16:D0:7D:C4:6E:C3:DB:03:4C:7C:98:10:BE
            X509v3 Authority Key Identifier:
                keyid:BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:ae:f1:4f:40:4e:dc:3b:d8:b5:a6:3e:fe:55:67:28:4e:
         d1:25:c8:91:83:36:d9:20:d3:8d:84:43:a4:69:2f:59:b8:42:
         6b:10:b2:84:4c:df:13:bc:57:df:f0:a7:79:bd:e1:39:03:15:
         d4:5e:14:5b:fe:01:2c:16:03:e5:a7:7a:11:a7:30:3f:ea:8f:
         2d:eb:c8:f6:49:31:7c:c6:bd:64:cf:54:42:06:08:41:79:98:
         83:a1:b5:1d:e4:76:4a:f6:9f:bb:6a:2c:c6:94:e8:1f:f8:e0:
         af:75:5f:55:35:e4:dd:ec:83:1f:f6:ea:db:29:bd:56:dc:39:
         4a:a8:99:4a:c0:ed:a1:66:63:e9:b6:39:d0:bc:aa:e9:a0:47:
         01:db:fb:79:8b:b8:f6:0e:1c:58:a3:a1:4f:6b:c1:d5:f5:f6:
         61:93:9c:cc:54:a5:fa:df:86:ae:3c:99:53:56:06:03:bc:84:
         b2:cd:de:ed:89:f4:93:fa:21:56:66:da:6a:3f:2b:d5:fa:76:
         c8:17:13:87:2e:e6:3c:17:fd:36:2b:02:b5:73:46:6c:91:31:
         95:f3:1f:66:96:93:90:bb:f1:cb:dc:a4:56:eb:cd:ca:14:34:
         00:dd:d5:50:cd:dd:78:24:25:e4:d1:60:c3:4f:a8:86:6b:3b:
         8c:e0:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org