Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3235203d3e20323632353838.roa
File:                     3137302e38332e3133322e302f32322d3235203d3e20323632353838.roa (raw, json)
Hash identifier:          WOAnuNjpsKWQxD/Kw5Rf+3vn88S7dcpIPoWJrsYnmGo=
Subject key identifier:   BF:0D:C0:0C:E1:EE:EB:C0:22:24:A3:A5:9F:42:4B:13:3C:A8:12:76
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       2CE43F79F011A42DBC4765292A16CBFE703E101D
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3235203d3e20323632353838.roa
Signing time:             Sun 15 Jan 2023 22:15:44 +0000
ROA not before:           Sun 15 Jan 2023 22:10:44 +0000
ROA not after:            Sun 14 Jan 2024 22:15:44 +0000
asID:                     262588
IP address blocks:        170.83.132.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e4:3f:79:f0:11:a4:2d:bc:47:65:29:2a:16:cb:fe:70:3e:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Jan 15 22:10:44 2023 GMT
            Not After : Jan 14 22:15:44 2024 GMT
        Subject: CN=BF0DC00CE1EEEBC02224A3A59F424B133CA81276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:95:8a:23:c7:50:a7:6d:b5:52:04:48:cd:
                    5c:bc:48:56:fe:43:80:a5:36:9d:00:3d:19:88:77:
                    44:3d:a9:7f:4a:55:57:b9:3f:66:e8:38:06:d1:72:
                    be:99:67:40:85:8d:a9:cf:1f:60:ca:ef:21:2e:7d:
                    aa:c1:95:e8:7d:aa:5e:99:8f:4b:35:37:3b:5b:f9:
                    e1:27:da:53:aa:73:ff:34:70:a0:a2:c0:d2:88:71:
                    b8:84:62:d8:95:4c:47:b5:92:98:c7:ba:ba:e6:58:
                    6c:86:d1:af:33:51:c2:ad:04:08:4b:0b:62:8b:1b:
                    b1:d4:c9:7a:44:db:f4:ee:72:0d:75:bc:79:40:fd:
                    45:4e:21:0b:f4:48:93:d2:b2:03:a6:cd:c4:ca:75:
                    e3:84:fe:28:96:7a:72:d0:00:bc:81:bc:f0:80:f1:
                    d6:fc:99:87:a6:67:86:41:92:9f:61:7b:67:98:d0:
                    d3:11:24:c0:df:69:f9:b3:29:fa:a6:ba:12:aa:1a:
                    16:63:04:3a:16:28:8b:c5:c9:6e:c8:39:29:4b:bf:
                    6a:6e:40:e3:37:25:be:af:a3:57:67:40:59:3d:ad:
                    b8:f8:44:99:e2:57:95:50:9b:2a:c6:77:a1:cf:b6:
                    9e:31:d2:72:07:11:e7:fc:d2:90:9d:92:1f:38:e3:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:C0:0C:E1:EE:EB:C0:22:24:A3:A5:9F:42:4B:13:3C:A8:12:76
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3235203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:92:3e:b6:da:59:e1:6a:88:f4:5a:e0:0b:36:5f:08:68:
         9c:43:93:84:7a:99:d7:23:63:74:f0:b4:84:54:bf:40:a0:0b:
         7f:1a:55:1b:0d:5c:2a:d2:58:c5:43:85:49:24:b3:3a:76:29:
         78:3d:7e:84:bb:f6:60:34:05:e4:de:e3:40:bc:a6:f7:fa:02:
         fd:f9:f8:3a:58:0e:f6:64:fd:7c:d6:d4:8f:a8:0e:51:b4:0a:
         96:23:c3:1b:e2:96:7d:1d:7a:62:23:54:c9:19:ef:1b:81:38:
         d4:00:92:90:5b:28:86:89:3c:6c:f3:75:f9:86:f4:55:b4:18:
         0b:28:9b:4c:7d:71:b9:5a:34:84:45:be:1b:8e:68:57:b9:f2:
         77:39:f8:3f:c8:9a:81:ef:ca:71:2b:fd:4e:75:4b:fa:6c:50:
         f6:9c:18:5d:df:3a:6b:8b:4b:7c:34:00:12:db:ab:3a:eb:1d:
         ec:08:f5:99:f6:1d:e4:dd:17:c1:e4:fc:5f:31:fb:19:7f:92:
         07:09:14:18:27:ce:a4:92:59:2d:4c:b4:1d:64:ed:80:59:4a:
         bd:11:7e:3e:94:4d:af:1c:c2:8d:85:14:18:cc:2f:c6:b5:b3:
         d8:be:9c:65:22:8a:cf:49:ff:54:47:78:60:2c:1a:9a:3a:43:
         b4:a7:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org