Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/3137302e38332e32342e302f32322d3232203d3e20323636343531.roa
File:                     3137302e38332e32342e302f32322d3232203d3e20323636343531.roa (raw, json)
Hash identifier:          KKBhxGFSYRaKzAzoKpOOJYVNoP/oXRts/0og49sALi4=
Subject key identifier:   F0:8C:CC:15:A0:F3:E3:A5:88:A7:60:13:0F:44:11:2E:2E:AE:77:2C
Certificate issuer:       /CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
Certificate serial:       1025FA656AF3D14307BA1DCCDC425E1D5C40A86F
Authority key identifier: 66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/3137302e38332e32342e302f32322d3232203d3e20323636343531.roa
Signing time:             Tue 16 May 2023 14:44:34 +0000
ROA not before:           Tue 16 May 2023 14:39:34 +0000
ROA not after:            Tue 14 May 2024 14:44:34 +0000
asID:                     266451
IP address blocks:        170.83.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:25:fa:65:6a:f3:d1:43:07:ba:1d:cc:dc:42:5e:1d:5c:40:a8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
        Validity
            Not Before: May 16 14:39:34 2023 GMT
            Not After : May 14 14:44:34 2024 GMT
        Subject: CN=F08CCC15A0F3E3A588A760130F44112E2EAE772C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:13:6e:84:74:08:4e:9c:57:f9:1f:6b:b6:
                    e0:3e:d9:f1:41:aa:36:63:8f:21:2e:8f:7c:56:e5:
                    24:36:87:4b:93:0f:29:f1:70:1b:d4:9a:33:5e:85:
                    13:29:68:86:54:01:d1:7f:73:79:0e:20:7f:9a:69:
                    87:bf:b4:f8:6e:21:74:5b:d6:ee:c0:86:e7:d0:0c:
                    1a:96:e5:c9:b3:5b:ea:a6:38:6d:54:5a:f9:d6:ed:
                    66:16:04:1e:b1:1c:8d:ce:9b:c8:28:a3:93:1f:99:
                    1b:5a:b6:63:8d:fe:67:87:2e:68:5e:1e:22:d0:30:
                    7b:fe:a5:0c:59:c6:56:49:8b:c4:d6:da:33:35:1a:
                    d2:e7:e9:2e:dd:43:b1:7f:9f:b6:8c:19:22:fa:96:
                    81:53:d3:e3:d4:8d:38:e7:fa:9d:62:82:eb:9a:95:
                    4f:ff:f6:ab:8a:73:3b:d3:61:2d:15:08:30:6a:8a:
                    80:5e:17:25:b3:e5:a1:be:d1:8e:48:9c:bf:53:3e:
                    2e:d5:99:46:98:f9:2b:4f:26:06:48:7f:55:3d:3d:
                    1c:19:22:53:45:69:83:9a:74:cd:94:39:cf:57:63:
                    eb:37:96:a0:22:67:7f:76:98:e8:ab:54:51:5d:ae:
                    99:27:5f:4a:5a:c9:7d:08:1b:68:46:00:8d:b0:94:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8C:CC:15:A0:F3:E3:A5:88:A7:60:13:0F:44:11:2E:2E:AE:77:2C
            X509v3 Authority Key Identifier:
                keyid:66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/3137302e38332e32342e302f32322d3232203d3e20323636343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:c9:8d:05:2d:3c:97:42:49:b3:4b:1d:e7:36:2e:dc:09:
         6e:4b:6a:e3:30:0c:17:4d:f8:ca:d5:6d:86:4d:4a:15:a5:06:
         05:f4:8a:bf:fe:1b:af:24:45:17:49:a9:84:1e:53:ea:fd:05:
         01:42:22:80:bf:8a:28:13:95:1d:eb:c3:e0:52:cb:56:8e:41:
         d2:b6:c6:d8:35:51:2b:7c:f5:77:78:d7:b6:a7:3a:50:ff:39:
         f9:2d:70:d9:73:4d:86:64:e7:2a:a0:39:82:95:f6:f3:0e:c6:
         a8:c6:47:4a:c0:6a:76:34:a3:33:0b:4b:f3:d4:bf:b0:ed:27:
         0b:c0:56:49:5a:c6:19:8d:c4:9f:cf:bc:e2:a1:16:02:26:b9:
         55:ba:8e:3e:ec:e3:d3:47:97:75:a2:14:79:c2:ab:37:9b:3e:
         05:65:06:89:c9:1f:e6:a5:4a:da:0a:0d:44:04:5b:f3:00:9e:
         fb:5a:f2:93:41:55:9f:ef:f8:8d:43:ee:d9:96:bb:c0:b5:dd:
         07:12:e8:c3:9a:01:68:cc:26:8d:1a:30:d9:1f:cf:74:87:e9:
         39:d5:de:a2:39:0b:ce:d4:e6:86:03:2e:ef:0d:15:fb:1a:b2:
         28:08:cc:6d:4a:39:36:33:81:e2:08:9d:10:4e:f4:ab:2d:2b:
         a6:1e:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org