Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa
File:                     3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          NZ0BLbkc/wP3nmu4pLs287wpJ1FK65jnlnMxcbCW9QY=
Subject key identifier:   21:83:90:99:3A:9A:B0:D1:D2:66:A3:03:CC:C2:92:0A:DB:48:DF:54
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       5CE3EC48C94C992EF245CFF64993578A601CCA08
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:43 +0000
ROA not before:           Fri 18 Nov 2022 17:45:43 +0000
ROA not after:            Fri 17 Nov 2023 17:50:43 +0000
asID:                     61588
IP address blocks:        170.233.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e3:ec:48:c9:4c:99:2e:f2:45:cf:f6:49:93:57:8a:60:1c:ca:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:43 2022 GMT
            Not After : Nov 17 17:50:43 2023 GMT
        Subject: CN=218390993A9AB0D1D266A303CCC2920ADB48DF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:72:62:d6:b5:08:c1:65:bf:8a:2e:7a:04:
                    9e:ea:ba:fb:bd:35:87:7b:99:87:72:3a:64:fd:16:
                    73:de:2c:82:73:18:fc:bd:0c:41:5f:79:2e:d6:b4:
                    35:23:00:4a:3c:6c:40:e5:7c:02:9b:57:ba:61:5a:
                    56:c1:19:f2:6d:37:e7:3e:8f:01:e6:8c:9e:a0:06:
                    3c:b9:90:50:b8:7f:67:c8:57:1c:c6:72:b3:39:52:
                    07:d8:15:d6:e9:48:c3:66:9f:d0:6a:59:95:32:b5:
                    b9:b2:15:72:d6:bf:4a:59:21:86:9f:ec:bf:c4:dc:
                    9a:fc:7f:41:1c:e1:22:b3:e1:d6:f7:0e:67:85:34:
                    78:49:72:8b:48:62:6e:0f:04:06:db:83:32:6a:de:
                    32:d0:95:89:91:41:42:fe:ea:41:0e:dd:40:44:72:
                    fe:8d:a8:25:3d:10:fd:5e:25:7a:8e:22:a9:de:44:
                    fd:8e:71:6a:91:71:0f:42:28:c0:cf:e0:b1:bc:1a:
                    fe:5b:44:84:79:c8:27:b6:9b:4d:95:af:69:9a:54:
                    d4:e5:fe:c1:a0:2d:41:3b:45:a5:eb:5c:e5:5d:44:
                    f7:e4:8e:28:e2:ed:09:c4:a6:78:0b:f2:fb:c1:0f:
                    8a:34:23:6d:74:1f:e6:db:a5:39:5d:63:e6:0c:05:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:90:99:3A:9A:B0:D1:D2:66:A3:03:CC:C2:92:0A:DB:48:DF:54
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:81:2a:d8:a5:91:0f:d8:15:9f:24:2d:3d:9b:00:22:28:
         62:dd:16:a5:86:4b:35:b3:6f:62:a5:d2:c3:1b:82:a5:a6:4d:
         83:b8:f2:70:16:5d:40:1c:8b:72:38:1c:58:34:ca:a0:eb:d2:
         2c:62:b7:fa:a3:d4:8b:fe:c6:10:f3:10:72:6e:85:40:c6:3e:
         f8:aa:8e:5b:4e:e6:27:d6:ce:3d:15:ed:84:be:e1:92:de:cf:
         31:98:7c:e5:60:f1:23:51:26:d9:72:58:8e:cf:ef:d0:f1:0f:
         fd:5b:16:24:3c:00:0a:14:cc:77:98:8c:42:f2:36:96:54:12:
         ac:d2:8b:16:5d:6b:cc:cf:66:f8:e4:d2:cd:6b:cb:f7:62:13:
         b6:b8:74:2b:7d:3a:16:e7:7b:75:5c:fc:4a:80:46:c1:a6:36:
         47:16:8a:e2:87:2b:04:b1:b8:9f:0e:7f:ab:58:83:53:8e:b6:
         aa:f5:ec:66:e6:35:36:c4:bd:30:c9:58:68:95:b5:49:9b:55:
         09:ab:a7:00:b5:da:65:ab:46:ef:b8:65:1d:8f:3c:f2:91:a0:
         c6:ce:22:59:55:33:c5:2c:db:7a:0b:ae:0f:c3:f5:0e:c2:41:
         72:e6:8a:1b:03:0e:0d:09:65:4b:99:d8:2e:38:cb:b9:06:d1:
         5f:22:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org