Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/3137302e3233332e3138302e302f32322d3234203d3e20323635303831.roa
File:                     3137302e3233332e3138302e302f32322d3234203d3e20323635303831.roa (raw, json)
Hash identifier:          mkWqrgNs2tv9HgwuyvPVONn9wuARaUgx9kPpJ/IrfVM=
Subject key identifier:   FF:81:F3:2E:88:EE:C1:DF:38:F7:BD:9B:B3:17:8D:88:91:28:BB:81
Certificate issuer:       /CN=BBD352C97F636959D6DF3B568D7C420335C42D45
Certificate serial:       0AD2348812D998C0C5110F032A1D7889B2CA3ADE
Authority key identifier: BB:D3:52:C9:7F:63:69:59:D6:DF:3B:56:8D:7C:42:03:35:C4:2D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD352C97F636959D6DF3B568D7C420335C42D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/3137302e3233332e3138302e302f32322d3234203d3e20323635303831.roa
Signing time:             Mon 10 Apr 2023 18:11:25 +0000
ROA not before:           Mon 10 Apr 2023 18:06:25 +0000
ROA not after:            Mon 08 Apr 2024 18:11:25 +0000
asID:                     265081
IP address blocks:        170.233.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d2:34:88:12:d9:98:c0:c5:11:0f:03:2a:1d:78:89:b2:ca:3a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD352C97F636959D6DF3B568D7C420335C42D45
        Validity
            Not Before: Apr 10 18:06:25 2023 GMT
            Not After : Apr  8 18:11:25 2024 GMT
        Subject: CN=FF81F32E88EEC1DF38F7BD9BB3178D889128BB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:fe:55:b7:d0:1e:cc:47:f4:4d:55:75:11:
                    b2:9b:84:69:07:01:44:03:d4:2b:1e:d1:4c:35:85:
                    3c:5d:3d:f6:08:73:ad:2d:ea:a5:dc:6c:80:42:8b:
                    3f:72:e4:b2:81:7f:59:6c:19:d0:ae:49:57:2a:2a:
                    af:93:9e:3e:0b:ad:78:ec:e2:1e:26:2e:11:54:50:
                    03:70:a8:22:33:b1:0a:be:69:e2:f3:ee:46:55:6c:
                    21:52:48:e0:d6:7a:83:fe:fe:bb:49:0f:53:0a:05:
                    99:c6:20:26:82:58:1e:9a:e9:9e:ee:7a:d1:97:c2:
                    bc:bf:a4:f7:5a:f5:70:1d:5c:74:a4:6f:ab:a5:86:
                    e7:7a:7f:bd:60:b5:9d:14:65:b8:0f:a0:e7:e0:e4:
                    cd:68:07:7b:ab:75:6a:4d:dc:ea:8d:08:06:ce:b6:
                    49:c6:7b:5e:bd:90:e5:43:4a:0b:2c:04:09:ed:a2:
                    52:55:d4:26:b4:7f:e1:0c:e3:1d:a9:5f:4e:2f:3c:
                    2f:de:3c:9c:bf:6e:ca:be:d8:50:49:88:a6:d0:b5:
                    cb:02:23:83:fc:8a:81:41:b7:f5:6d:2b:46:94:82:
                    cf:61:fc:07:f2:fd:c7:20:99:e7:5c:c0:6a:f7:54:
                    e0:7d:e7:e3:6f:94:06:e4:76:2f:41:a7:95:78:a4:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:F3:2E:88:EE:C1:DF:38:F7:BD:9B:B3:17:8D:88:91:28:BB:81
            X509v3 Authority Key Identifier:
                keyid:BB:D3:52:C9:7F:63:69:59:D6:DF:3B:56:8D:7C:42:03:35:C4:2D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/BBD352C97F636959D6DF3B568D7C420335C42D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD352C97F636959D6DF3B568D7C420335C42D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/3137302e3233332e3138302e302f32322d3234203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:62:27:fd:40:7c:a0:bc:7c:cf:4a:e6:ed:62:2e:07:2e:2d:
         f6:f0:d5:ea:4d:55:20:ab:34:a0:ea:ff:c7:0e:88:35:15:59:
         a7:42:74:4b:72:80:3b:37:81:cf:d9:28:e9:eb:55:7c:85:a6:
         39:0c:3e:c1:f7:cc:8b:1f:34:ab:9c:64:a1:98:b7:81:9c:f4:
         8a:6f:af:24:2d:b3:13:93:3f:a6:2b:28:e6:f0:7f:93:32:6c:
         22:5b:e0:e5:38:94:b8:fd:5a:8d:18:7f:c5:7c:a3:43:51:d7:
         c2:69:94:b1:d6:a8:99:17:51:c0:72:11:8b:56:ff:6c:6a:28:
         39:eb:6d:74:67:44:6f:cf:25:de:6d:81:a2:5e:e1:61:ee:27:
         64:4f:43:a4:0d:b0:16:07:23:32:d8:93:fb:37:f4:c7:22:24:
         50:2f:c4:4a:42:39:cb:b2:0e:89:e8:bd:3f:67:0c:dd:0a:b6:
         dd:06:1a:29:51:38:9e:e0:57:bf:df:38:66:da:2e:28:a0:4c:
         b2:65:b5:10:75:8c:4f:d3:e3:34:f2:0d:a7:46:83:d4:7e:51:
         ac:9b:87:28:c6:e1:18:c6:d3:e0:dc:a1:f8:0a:58:00:32:47:
         5d:73:4c:87:e4:ee:46:a4:6c:20:3f:ca:cc:f7:e3:88:76:18:
         57:cb:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org