Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3234203d3e203631353838.roa
File:                     3137302e38312e38342e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          nPsrXfsjXkKBlNof7LotKPzmTOxnVuVxuorgQUz3geg=
Subject key identifier:   52:26:E3:11:82:A3:F3:F1:86:14:C3:1D:09:CA:AB:59:BE:0F:F3:19
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       23574B187D80BDC3E2ACD4E96833CABE9AF6F4B1
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:35 +0000
ROA not before:           Fri 18 Nov 2022 17:45:35 +0000
ROA not after:            Fri 17 Nov 2023 17:50:35 +0000
asID:                     61588
IP address blocks:        170.81.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:57:4b:18:7d:80:bd:c3:e2:ac:d4:e9:68:33:ca:be:9a:f6:f4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:35 2022 GMT
            Not After : Nov 17 17:50:35 2023 GMT
        Subject: CN=5226E31182A3F3F18614C31D09CAAB59BE0FF319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:67:8d:86:54:d6:48:37:be:21:97:18:00:
                    ff:63:a6:bb:b6:44:f6:6b:92:bd:cc:ad:b1:4f:0a:
                    55:37:c2:0a:f4:55:1f:69:4b:f9:a3:0a:9f:12:f8:
                    37:23:27:0f:76:7e:a7:7f:c8:d1:4b:ad:8e:16:28:
                    eb:04:55:46:d4:8f:0e:6f:71:63:92:91:a4:85:ba:
                    75:89:df:08:4b:08:47:23:67:81:c5:c3:f6:dd:d8:
                    07:73:11:e9:ab:dd:50:d7:b6:7b:0e:e1:14:b0:ae:
                    60:09:69:a3:ac:30:21:30:88:a3:91:6c:10:31:28:
                    46:bb:c7:a6:76:8f:1f:76:b2:fc:8e:e0:bd:19:d2:
                    2b:63:3e:bc:8d:4f:32:09:f6:a5:3b:2a:df:2d:1d:
                    78:2c:57:fc:e3:17:07:75:f1:81:35:da:ed:80:d3:
                    6e:56:35:37:96:92:9b:23:e9:ff:25:2c:1e:b8:af:
                    47:db:e9:d1:4b:75:d9:f8:54:86:05:ec:11:82:70:
                    5a:f0:13:05:88:02:3e:70:8f:e9:56:2d:d0:ff:e0:
                    94:75:59:7f:18:72:fe:33:6f:54:95:ee:8c:a9:3d:
                    13:db:e1:22:a5:56:43:79:b0:43:38:8c:12:49:1b:
                    d1:71:81:4a:83:7f:cc:08:99:a6:06:92:b5:ee:84:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:E3:11:82:A3:F3:F1:86:14:C3:1D:09:CA:AB:59:BE:0F:F3:19
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:65:86:24:2e:b6:1a:86:0b:9f:f5:4e:11:07:52:59:c9:8c:
         89:1a:47:17:60:d7:2f:15:c8:f2:f2:a4:76:dd:60:12:d9:80:
         d0:e4:d0:48:b5:f3:b0:0b:fc:5e:20:7c:30:63:58:4a:3c:f6:
         fd:28:bb:91:d9:09:49:9a:2c:0f:f3:f5:8e:8d:60:52:31:be:
         6d:14:7c:86:04:c7:66:aa:11:4e:cd:bb:fa:52:d7:0a:71:d1:
         ec:05:34:0f:60:78:bf:68:ae:13:55:27:28:33:2a:e1:0d:5b:
         3d:7d:0d:21:cc:2b:11:3b:f5:1b:18:a5:ec:da:a9:84:09:aa:
         49:c7:b6:ec:c8:02:17:e9:4c:b0:f4:87:3c:c2:88:90:dc:b7:
         9e:8d:dd:25:4c:4c:19:9c:5e:a1:ff:01:51:c8:de:80:7e:9e:
         9b:c1:a1:ab:d0:f0:c2:b0:fa:3e:3c:96:5b:08:85:b8:a9:0e:
         9a:d1:d1:94:e5:b3:d7:68:c9:fa:22:9a:ea:70:31:ce:dc:e7:
         0d:31:60:b8:3e:2e:4d:57:29:7f:af:0e:ad:9e:6d:f2:bc:12:
         c2:eb:e8:82:26:82:3e:13:00:d1:2f:64:57:74:c6:92:fd:ac:
         1b:65:29:9c:27:2e:cc:53:3c:9c:d5:e5:69:4c:a9:cb:82:8b:
         82:7b:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org