Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3234203d3e20323634343034.roa
File:                     3137302e38322e3134302e302f32322d3234203d3e20323634343034.roa (raw, json)
Hash identifier:          S3kyJf2cv+k9C/GSYPycZ9FTTUY9qQdQ9oLBNoOvH7Q=
Subject key identifier:   28:BC:F8:87:FC:C3:29:94:2C:05:D3:4A:31:73:0B:86:C3:F0:D5:D2
Certificate issuer:       /CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
Certificate serial:       27CD8EACEF2C45B174E8345FAA01D80EB27BE417
Authority key identifier: AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3234203d3e20323634343034.roa
Signing time:             Mon 14 Aug 2023 21:06:14 +0000
ROA not before:           Mon 14 Aug 2023 21:01:14 +0000
ROA not after:            Mon 12 Aug 2024 21:06:14 +0000
asID:                     264404
IP address blocks:        170.82.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cd:8e:ac:ef:2c:45:b1:74:e8:34:5f:aa:01:d8:0e:b2:7b:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
        Validity
            Not Before: Aug 14 21:01:14 2023 GMT
            Not After : Aug 12 21:06:14 2024 GMT
        Subject: CN=28BCF887FCC329942C05D34A31730B86C3F0D5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:1d:00:ac:20:90:a6:f1:f7:fe:62:be:39:
                    89:52:9d:f3:0a:e0:7d:99:eb:f0:d0:2f:28:a7:8f:
                    ff:70:cd:fa:a5:e5:ce:eb:1f:a8:cf:8d:f3:c1:78:
                    b4:dc:9c:4c:cb:ba:a0:61:a7:c9:7e:08:58:98:f5:
                    9b:26:5a:a0:1b:03:44:8d:c0:1d:ec:bc:0b:bf:49:
                    fe:6d:fd:3f:77:be:2f:ab:9d:85:87:10:2c:a9:ec:
                    16:ce:c0:b0:c4:ad:49:1d:d8:1b:22:23:7e:78:78:
                    de:89:45:f7:7c:11:52:fd:a9:51:d7:84:5f:92:04:
                    42:7c:5e:e0:52:ca:0b:77:39:73:d9:20:ed:80:05:
                    16:e8:6d:bd:7d:b5:3a:8b:be:52:c5:2a:7f:ac:e7:
                    25:6c:b3:0a:d0:f4:6d:51:e0:07:0a:b4:6e:36:cd:
                    ff:1c:0a:9f:0a:7e:cd:2a:19:5f:ba:82:9b:4f:e3:
                    79:8d:36:dc:ee:d2:83:cd:87:27:00:3b:d7:f4:5a:
                    d7:f7:e7:37:30:b5:a3:3f:51:75:0d:d8:12:08:2d:
                    8d:6b:9d:35:14:cb:a8:f6:63:43:55:e9:d5:6c:7a:
                    ee:8a:09:8c:a7:38:2b:91:6f:48:0f:28:9b:9b:bf:
                    a6:89:84:31:18:6d:bc:5b:dc:64:42:5b:fb:08:6d:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:F8:87:FC:C3:29:94:2C:05:D3:4A:31:73:0B:86:C3:F0:D5:D2
            X509v3 Authority Key Identifier:
                keyid:AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3234203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:00:75:34:78:f8:de:0d:9d:3d:c8:b6:86:4c:d3:55:84:88:
         c7:75:9f:03:3d:54:24:9c:8e:4b:68:e1:90:e6:d2:91:c0:d1:
         8c:5b:a5:ec:41:39:d6:18:be:6b:fb:e8:14:3f:17:22:f0:65:
         8b:66:d9:40:ec:0c:d6:e4:a4:a4:cb:7a:a8:19:1e:59:fb:65:
         db:16:ed:dd:77:e3:5e:ef:1b:9c:70:d0:01:27:42:2e:0f:1d:
         49:1a:e0:c9:44:a5:be:65:7a:69:3e:33:7f:19:e6:c1:0d:47:
         1d:72:c9:90:3b:5e:c8:5f:fc:3a:9e:53:3c:db:93:0b:09:0f:
         d3:8a:96:29:99:0f:2e:c5:3e:03:38:d6:8c:eb:62:10:52:fb:
         ef:56:cb:f4:30:f2:6d:46:64:ed:58:f8:d7:0b:9c:bc:6d:55:
         32:3e:23:1a:fa:fd:61:94:56:ea:aa:46:3c:75:5a:24:b2:07:
         0b:18:40:17:77:3a:db:ec:6f:73:09:4a:12:5f:68:19:41:5c:
         d5:ee:83:a5:d2:d5:99:18:71:53:58:9a:91:77:c0:7f:16:29:
         12:19:0a:9b:ec:e0:cf:73:f0:fc:64:94:26:91:d0:b9:88:c4:
         67:e6:80:9b:11:ef:c1:6c:15:0f:34:df:dd:76:02:43:13:b0:
         3e:f7:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org