Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa
File:                     3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa (raw, json)
Hash identifier:          Tz/hEOgq/0v3xWXi8K9oekoXqNrZDgjbm7QJZVdIQF8=
Subject key identifier:   65:18:58:F2:C5:C0:24:9C:BE:88:53:91:EA:08:C8:FC:73:46:70:01
Certificate issuer:       /CN=220AE1280604BECE0967859CB7EF5F59A2813C95
Certificate serial:       2EDD6542DAE8EDB270A41119A711F07D33A47875
Authority key identifier: 22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa
Signing time:             Wed 17 May 2023 00:35:59 +0000
ROA not before:           Wed 17 May 2023 00:30:59 +0000
ROA not after:            Wed 15 May 2024 00:35:59 +0000
asID:                     266489
IP address blocks:        170.244.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dd:65:42:da:e8:ed:b2:70:a4:11:19:a7:11:f0:7d:33:a4:78:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Validity
            Not Before: May 17 00:30:59 2023 GMT
            Not After : May 15 00:35:59 2024 GMT
        Subject: CN=651858F2C5C0249CBE885391EA08C8FC73467001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:78:bb:54:07:c7:b1:db:49:7a:65:73:05:
                    89:78:62:91:e0:ad:d8:75:34:b2:1a:cb:a4:53:31:
                    a2:bb:31:ae:bd:b9:10:3a:28:7d:3e:f1:42:30:df:
                    6d:65:c8:69:1d:02:5b:44:2a:4a:f4:e4:ca:f2:4a:
                    46:6c:85:e6:f4:60:11:2e:39:52:c4:49:86:e1:1f:
                    90:f4:95:d1:4c:50:15:ec:6a:11:d5:c6:9b:3d:10:
                    58:c7:cd:3e:38:b9:6d:4e:12:f0:d3:9a:7c:0d:68:
                    2a:02:be:05:36:89:30:55:4d:b5:de:93:92:37:b2:
                    fb:71:2e:5b:fb:2f:91:0f:92:9a:6d:af:a1:6c:6f:
                    94:de:eb:6a:93:59:53:a8:ef:3f:0c:af:26:7f:6e:
                    dc:a5:26:a9:64:6f:0b:4a:da:7b:49:a3:08:09:f4:
                    09:d3:ad:3b:02:b3:4f:99:e1:b4:73:f9:3b:44:51:
                    1e:11:7d:30:c1:1e:10:50:4a:f7:95:e1:d4:4d:e4:
                    5e:e2:a4:8d:79:47:f9:7e:63:c2:6e:b4:31:a8:31:
                    00:8d:13:50:6e:a5:b9:ca:8f:08:4b:e5:08:94:02:
                    4d:39:d9:60:5c:69:c3:8a:71:a3:1c:b9:61:70:53:
                    83:04:3a:1a:8e:51:08:cc:d9:fa:0c:b3:90:c3:50:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:18:58:F2:C5:C0:24:9C:BE:88:53:91:EA:08:C8:FC:73:46:70:01
            X509v3 Authority Key Identifier:
                keyid:22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:07:99:e1:52:a8:19:e8:01:42:7e:77:52:2e:fd:43:70:a0:
         1e:df:8e:54:b4:98:97:75:e5:eb:20:ce:db:15:ed:65:b3:f3:
         57:fd:ea:b0:af:1e:98:6a:50:0a:8f:52:14:6b:00:24:de:93:
         c3:2d:53:5c:27:ad:b6:65:4a:71:8e:1c:1d:34:68:b2:ce:22:
         29:fd:fd:70:d6:d2:61:ad:65:18:7f:b7:a8:68:4a:44:4c:75:
         9b:11:76:c3:85:74:2d:b0:4c:ae:80:66:8a:45:63:26:1b:28:
         e5:93:43:c9:a1:be:5e:84:71:ef:23:34:08:1b:af:51:ec:0e:
         66:51:fe:31:21:eb:4a:28:c2:2f:e2:39:28:4e:b0:60:73:54:
         0e:f0:ce:0f:f6:3c:33:a6:56:f2:ae:5e:16:cf:87:7c:2c:ce:
         9a:f7:90:eb:11:e2:67:48:0a:10:9a:66:b7:57:2b:91:26:a9:
         09:3e:f4:dc:fd:1a:47:45:27:5f:5e:97:a6:ae:22:fc:d1:d4:
         29:35:1e:6a:6d:bf:af:4f:af:d6:ae:6b:56:ae:0d:4f:70:a6:
         b1:84:5a:0e:31:58:e5:46:51:a2:d8:c8:dd:a1:11:3f:23:ef:
         59:8d:b2:83:fc:f2:15:ad:0e:87:df:86:e6:21:60:26:74:7c:
         8e:a1:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org