Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3232203d3e20323636343736.roa
File:                     3137302e38332e3139362e302f32322d3232203d3e20323636343736.roa (raw, json)
Hash identifier:          NDYgZkFauuCPgDpSVHnHImZ63wf1wRWo/+HeIgM8bZs=
Subject key identifier:   54:91:EB:0C:67:BC:50:C3:D4:14:66:01:E8:B1:86:89:13:05:AB:5D
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       5CC1204629AA616AA26B415995C02FAF08E69E17
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3232203d3e20323636343736.roa
Signing time:             Thu 18 May 2023 12:57:06 +0000
ROA not before:           Thu 18 May 2023 12:52:06 +0000
ROA not after:            Thu 16 May 2024 12:57:06 +0000
asID:                     266476
IP address blocks:        170.83.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:20:46:29:aa:61:6a:a2:6b:41:59:95:c0:2f:af:08:e6:9e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: May 18 12:52:06 2023 GMT
            Not After : May 16 12:57:06 2024 GMT
        Subject: CN=5491EB0C67BC50C3D4146601E8B186891305AB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:76:3b:01:65:e2:c7:22:49:7f:dc:09:ae:
                    d5:e8:ec:a4:f1:10:02:64:bb:94:ed:b7:82:a6:cc:
                    8c:8a:27:5b:8c:f7:ef:65:4b:7a:65:b0:88:18:b8:
                    4b:78:d2:a4:ac:f0:81:94:03:90:bf:44:e4:e8:98:
                    ba:93:e6:c5:3a:4b:43:c8:19:3a:03:83:7d:b1:e4:
                    00:3d:44:fd:05:e0:e5:e6:47:7b:18:5f:57:42:0a:
                    33:91:b6:1a:28:89:e2:c1:b2:54:95:25:66:14:e6:
                    ed:d0:ad:b3:77:55:c5:ab:10:de:51:99:64:e6:22:
                    f3:c2:f2:db:bd:2f:5a:b7:f1:6a:3b:9f:ee:48:e5:
                    f1:d4:15:53:8b:62:45:bc:68:c8:28:8f:50:b7:5d:
                    da:c5:64:eb:c5:3b:34:05:77:c2:5c:17:6e:a2:05:
                    45:22:60:29:ff:78:92:c5:50:1b:b7:d2:9f:94:5f:
                    21:d5:4b:12:14:cb:75:fc:f3:5b:71:25:23:8c:e0:
                    b6:7e:dd:30:92:1b:0c:51:47:d1:d3:78:84:3e:64:
                    cd:09:07:89:59:d7:bd:a5:28:27:23:8b:08:8d:73:
                    71:6e:99:d2:1a:39:89:90:49:dc:2c:da:6f:35:67:
                    fa:fd:87:f7:b9:f5:ff:db:78:84:84:db:f0:dd:aa:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:EB:0C:67:BC:50:C3:D4:14:66:01:E8:B1:86:89:13:05:AB:5D
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32322d3232203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:24:9d:78:3c:39:5b:ed:81:aa:f0:c2:9f:b1:97:92:29:
         df:d7:d3:f7:df:18:59:f3:48:42:47:82:ba:59:5d:fc:02:1d:
         59:4a:1a:49:5f:d6:c2:9d:6f:0d:08:1b:fc:ef:ee:fd:d0:48:
         f2:8a:33:5e:5c:82:fb:d4:ee:89:63:4d:42:98:e6:83:6e:1e:
         ee:09:e3:86:8c:6e:89:4f:98:b3:12:8d:30:c4:c6:20:fd:c9:
         e9:fa:c0:9b:59:11:a5:e7:ae:fc:49:60:46:d8:a2:c4:82:ba:
         ec:d8:02:e6:76:8a:a0:1b:09:41:40:bd:3e:ca:21:54:21:26:
         c1:d2:b5:ac:e2:f6:87:9e:88:2b:2d:3d:ba:61:11:d2:79:66:
         aa:7c:0d:c7:81:d2:00:f6:d5:22:86:84:0d:2a:68:34:9d:6c:
         74:1b:f2:58:ba:c5:94:05:7f:ee:4c:fa:d9:cf:a4:03:f4:45:
         ae:61:6d:24:b2:9f:a1:4d:4e:05:6c:73:9b:f8:1d:0a:53:e7:
         d0:e7:77:99:ff:54:68:be:dd:58:be:2f:09:9a:88:04:12:14:
         d3:4b:d0:f7:1f:ef:6c:d4:17:71:e0:05:3b:49:40:92:2f:6e:
         22:f5:22:88:5e:bb:74:8e:4b:48:f4:f1:7b:66:50:ca:54:b2:
         e7:92:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org