Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32322d3234203d3e20323635303932.roa
File:                     3137302e3233332e3130302e302f32322d3234203d3e20323635303932.roa (raw, json)
Hash identifier:          9VtnaSAvwf80aSHx5BMmkzB2ztpJhWvQ9rWYUnP2D9Q=
Subject key identifier:   5A:0F:00:35:AD:E7:35:46:F7:1B:E5:CD:73:31:B0:F4:D3:9B:5D:E8
Certificate issuer:       /CN=8D988D923E91FEEFA99C59AE0125347EFC8CB2AC
Certificate serial:       4038BC0A623B4ACE8DC51EDC55862D69F3B58FAE
Authority key identifier: 8D:98:8D:92:3E:91:FE:EF:A9:9C:59:AE:01:25:34:7E:FC:8C:B2:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32322d3234203d3e20323635303932.roa
Signing time:             Wed 15 Jun 2022 12:03:51 +0000
ROA not before:           Wed 15 Jun 2022 11:58:51 +0000
ROA not after:            Wed 14 Jun 2023 12:03:51 +0000
asID:                     265092
IP address blocks:        170.233.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:bc:0a:62:3b:4a:ce:8d:c5:1e:dc:55:86:2d:69:f3:b5:8f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D988D923E91FEEFA99C59AE0125347EFC8CB2AC
        Validity
            Not Before: Jun 15 11:58:51 2022 GMT
            Not After : Jun 14 12:03:51 2023 GMT
        Subject: CN=5A0F0035ADE73546F71BE5CD7331B0F4D39B5DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:14:bb:80:b0:a6:c4:12:41:bf:ff:56:73:
                    5b:b7:88:0e:72:6c:c8:bb:98:1f:43:e8:e8:4f:b7:
                    e4:dd:15:6d:5e:4c:f1:ba:cf:3f:12:f9:ed:d1:f0:
                    f1:c3:83:ef:e6:cf:f2:ad:a5:43:0c:60:33:f0:a1:
                    36:d6:df:f6:ff:fc:9f:06:e6:02:39:0c:9c:db:13:
                    09:e1:cf:1b:b1:e1:f0:a1:26:c3:75:44:d3:b8:98:
                    03:f7:e6:2a:53:61:6a:43:f9:09:98:41:f9:61:7e:
                    33:42:18:52:76:e5:47:29:46:30:a3:96:35:e0:39:
                    a8:b6:6a:f2:45:d0:a8:10:0e:c3:10:06:ce:9e:67:
                    23:4a:12:60:6e:ed:9d:be:2d:9d:fb:c1:35:9d:29:
                    c1:79:ff:19:7e:9f:cb:f0:16:00:96:d5:4c:16:70:
                    15:f8:61:0e:fb:0c:7f:4e:41:cb:bc:26:af:2b:be:
                    d0:12:42:36:0c:63:71:8e:84:93:6a:3e:65:28:99:
                    d7:7c:58:09:ac:89:bd:f3:87:95:b4:b5:5d:a2:8e:
                    75:f2:e3:e8:33:de:cb:27:a4:77:de:d5:e5:eb:a8:
                    a8:e6:e0:70:8e:1c:3c:ed:79:14:bc:e4:0b:cd:bc:
                    e5:cb:0a:b0:a0:5b:5d:dd:10:d0:19:43:ec:aa:a7:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:00:35:AD:E7:35:46:F7:1B:E5:CD:73:31:B0:F4:D3:9B:5D:E8
            X509v3 Authority Key Identifier:
                keyid:8D:98:8D:92:3E:91:FE:EF:A9:9C:59:AE:01:25:34:7E:FC:8C:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130302e302f32322d3234203d3e20323635303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:fd:8e:c9:46:99:6d:93:0d:81:fc:24:08:6f:10:94:05:71:
         e4:53:dd:7e:1c:d8:12:65:26:c6:86:5e:c3:0e:95:e1:29:2f:
         c6:ae:a1:1c:53:4c:be:84:c5:f2:ee:15:d3:0d:d8:72:66:d0:
         44:18:3e:ea:64:2f:a5:6c:45:b1:33:40:7f:45:37:ef:72:32:
         c2:7b:a3:f7:55:16:4c:35:68:bc:e7:29:2d:c5:93:be:ce:18:
         26:c8:14:fd:b8:dc:72:53:55:68:0a:02:2a:01:e4:b1:ac:4c:
         70:bb:0e:d2:b2:f9:2b:e2:46:0c:b7:51:ce:01:bc:0f:e8:bb:
         21:67:32:90:65:8a:7a:14:85:30:53:b2:c9:47:22:05:00:ac:
         6f:52:66:c4:6a:e3:ce:09:77:59:a1:19:38:a5:93:0c:26:77:
         03:bd:69:9c:ab:09:b6:91:ff:02:b7:4d:c1:07:6e:39:98:2a:
         a5:e6:bd:e9:df:89:82:81:57:e7:8d:5f:12:c8:e3:f6:5e:b1:
         e2:a6:41:ec:5e:8e:17:98:95:91:5c:07:05:ff:3b:ad:6a:79:
         c7:6f:c3:77:63:09:2d:20:28:d1:0b:0f:b4:d4:ef:2d:f6:8f:
         35:f5:a7:f3:21:5e:79:ce:34:32:21:af:cf:af:70:da:65:4f:
         d8:cc:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org