Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa
File:                     3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (raw, json)
Hash identifier:          9kiKymzalGiVKypB6Vy30n5LEbOZhQHCkuAL+xB+96k=
Subject key identifier:   99:6E:76:44:EF:A6:D3:BB:2D:E3:38:30:97:37:A2:4F:8B:1A:F2:DF
Certificate issuer:       /CN=98886E660C218FD13E82E809EF5CD801BC0310E5
Certificate serial:       1606AAD1CD837119B0527B59678A56AD49190D2C
Authority key identifier: 98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa
Signing time:             Thu 11 Apr 2024 19:00:36 +0000
ROA not before:           Thu 11 Apr 2024 18:55:36 +0000
ROA not after:            Thu 10 Apr 2025 19:00:36 +0000
asID:                     266520
IP address blocks:        170.245.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:aa:d1:cd:83:71:19:b0:52:7b:59:67:8a:56:ad:49:19:0d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98886E660C218FD13E82E809EF5CD801BC0310E5
        Validity
            Not Before: Apr 11 18:55:36 2024 GMT
            Not After : Apr 10 19:00:36 2025 GMT
        Subject: CN=996E7644EFA6D3BB2DE338309737A24F8B1AF2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:f7:a2:9c:2e:29:08:b2:b7:97:ec:00:e7:
                    64:db:93:72:6e:b1:0a:0a:78:fd:cf:7a:15:b0:db:
                    d6:16:37:2e:c7:7e:da:36:ac:95:e5:2d:b4:94:29:
                    a7:ff:88:c4:db:26:bb:a0:81:c2:ed:4a:aa:bb:df:
                    55:02:12:49:db:83:da:c7:9d:7d:17:d2:bf:a2:ce:
                    19:d8:77:c5:a5:2a:0c:13:24:53:d4:b5:32:85:97:
                    7f:d5:75:72:72:30:c7:1a:55:9b:2b:88:cf:d3:ce:
                    4e:b3:f4:ab:de:d2:f8:94:7f:f4:3a:16:6a:d8:d8:
                    66:07:68:1f:46:3f:53:aa:0b:e5:6f:b9:1b:f7:f9:
                    5d:0a:6d:4a:a0:b7:8a:9c:51:eb:c4:dc:79:0c:cf:
                    21:ed:09:51:8f:30:03:46:2d:b7:76:a7:76:69:70:
                    f2:96:73:de:3e:3f:6a:fd:6e:31:a1:c7:6f:05:02:
                    50:c4:b2:6f:84:c8:14:4d:49:9f:40:fd:96:b2:11:
                    fc:0d:79:ae:ed:d7:45:30:41:d5:19:14:df:05:3c:
                    15:0a:e3:63:5e:87:04:d5:99:ae:0c:22:1a:cb:c5:
                    fb:99:59:39:19:98:16:a7:34:6d:10:32:8b:21:9d:
                    fd:bf:b8:bc:a6:00:37:9d:f3:12:0e:b4:98:fa:e3:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:76:44:EF:A6:D3:BB:2D:E3:38:30:97:37:A2:4F:8B:1A:F2:DF
            X509v3 Authority Key Identifier:
                keyid:98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/98886E660C218FD13E82E809EF5CD801BC0310E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:16:b5:ed:71:00:f2:b9:23:a1:ce:a6:5f:c1:d2:2f:a2:16:
         78:ef:82:66:5f:2b:88:26:ae:ff:d4:03:fa:7c:58:d9:6e:ee:
         6b:e9:f9:ff:56:7e:7f:49:da:d6:b9:df:d7:39:1d:d5:55:08:
         cf:65:07:b9:9e:04:ed:84:a1:3a:ce:62:11:f5:a6:39:b8:b0:
         6f:2e:c8:58:f1:2f:68:ff:54:46:62:48:4f:85:5d:15:23:e4:
         45:8f:2a:91:89:ca:df:11:f6:44:1f:63:45:5b:d3:00:76:09:
         05:31:b1:54:78:63:ed:21:36:7d:05:d1:68:8e:8e:7f:b4:71:
         2c:4f:aa:57:38:47:2f:8e:10:e9:ce:c3:50:cc:e5:b5:58:49:
         ca:a2:42:c3:35:99:03:f7:c6:81:c6:a3:eb:e9:08:83:c0:78:
         0e:7c:e6:1d:8f:8f:44:9f:02:76:50:b7:ff:03:55:06:3c:ed:
         ca:21:f1:20:ea:81:90:53:79:61:c6:82:b8:59:69:40:5e:32:
         d9:c2:5a:37:75:cf:4d:d0:eb:ab:1a:6f:7d:fd:5d:11:80:3a:
         94:bc:0e:c3:58:74:50:10:15:97:8f:72:91:31:17:db:cb:cc:
         b5:fc:cd:c2:69:48:e0:e4:6a:d1:4e:89:26:f8:0f:d8:d9:35:
         bf:2c:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org