Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
File:                     3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier:          ZGdRMETrNonPgcqr+sJ/HpPYCt2oC+fv3j2VNbJhGVo=
Subject key identifier:   BD:AA:52:E8:38:A8:1B:8B:5B:3C:AB:2C:9D:5B:68:90:AF:DF:4B:E5
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       632DD314463C8F66894C73A957C43DCDE3411039
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
Signing time:             Thu 07 Dec 2023 19:14:39 +0000
ROA not before:           Thu 07 Dec 2023 19:09:39 +0000
ROA not after:            Thu 05 Dec 2024 19:14:39 +0000
asID:                     266312
IP address blocks:        170.238.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:d3:14:46:3c:8f:66:89:4c:73:a9:57:c4:3d:cd:e3:41:10:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Dec  7 19:09:39 2023 GMT
            Not After : Dec  5 19:14:39 2024 GMT
        Subject: CN=BDAA52E838A81B8B5B3CAB2C9D5B6890AFDF4BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:d8:5c:ae:5b:db:c4:82:c7:ef:28:e7:85:
                    57:bf:73:7e:d2:d8:74:6d:7b:0c:3b:0e:53:b6:4d:
                    ec:6b:aa:42:de:e0:cd:85:ed:e0:7f:69:28:db:58:
                    3c:57:1f:fa:c8:8f:31:5c:7d:94:cc:93:4f:94:6c:
                    1e:73:c3:18:cc:d9:36:e2:3e:22:ff:42:7e:05:66:
                    99:5d:f4:c1:f2:38:04:69:06:8d:d2:c6:b8:43:16:
                    70:d8:c1:ff:50:aa:24:2b:98:30:2d:3f:4f:cd:7f:
                    93:69:5d:e4:0f:81:ce:8e:f0:9d:43:c7:4c:8d:16:
                    24:c2:b2:28:38:ea:97:2e:f1:b7:95:6a:8e:44:26:
                    e1:0b:d6:50:00:28:b0:f2:8d:bc:47:38:fc:89:48:
                    06:56:60:7e:d2:59:56:19:99:c2:28:1f:27:6e:1d:
                    4f:a7:7c:f5:fb:65:bf:f5:cb:a6:20:77:f8:a9:23:
                    9a:38:40:b9:6c:67:f4:7c:05:83:11:61:bf:0b:ca:
                    d0:4f:f7:9d:64:93:b8:39:2a:82:e7:ee:44:63:67:
                    d3:66:8a:cb:47:25:75:70:33:0d:13:a7:99:1f:07:
                    df:f0:50:68:71:15:65:2f:4a:3a:ae:ca:fd:29:2b:
                    d0:cd:63:fd:8a:6d:16:c2:08:ff:49:3e:90:04:05:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:52:E8:38:A8:1B:8B:5B:3C:AB:2C:9D:5B:68:90:AF:DF:4B:E5
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:68:a5:8c:8d:78:ca:e0:f5:a0:af:0c:84:ae:9d:13:27:a0:
         05:e9:4a:0c:d8:2b:79:e3:ff:ec:82:b8:27:7a:c3:94:18:6e:
         38:6c:f3:d9:bf:6a:57:bb:f8:48:17:52:5f:7c:ad:f0:34:88:
         1c:7f:b3:f2:bd:3d:c9:2d:e8:20:82:60:5a:8e:eb:00:1c:57:
         26:97:d9:4e:ab:76:0e:20:ff:eb:40:fa:aa:5b:f1:03:ac:d2:
         f2:e3:86:02:d0:0e:96:62:3f:a8:ca:26:cc:a3:21:63:f8:bc:
         ea:ec:5f:58:c4:d1:bb:49:7f:41:5c:98:f9:e3:91:7a:d3:dd:
         37:9c:76:5e:74:eb:9c:cc:f6:55:15:f1:02:72:f1:c9:ac:9d:
         c2:0b:19:a9:e7:fb:cc:86:e0:da:97:6d:c7:93:90:39:2c:60:
         2a:9f:61:57:86:25:34:e0:1c:15:29:ed:81:51:20:e0:9a:55:
         53:1f:e7:f9:65:ab:64:ab:af:a2:33:dc:14:ab:4d:d9:c1:cf:
         9e:47:ca:df:2a:ed:7b:2a:86:bc:d6:94:dd:05:0f:82:01:7c:
         2f:4e:7f:dc:db:a2:0e:a2:ac:b9:21:c1:3f:19:34:d5:68:65:
         f4:b3:3d:28:75:5f:af:45:2c:33:93:f7:f3:ec:76:4a:3e:93:
         fb:58:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org