Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232322e302f32342d3234203d3e20323636303238.roa
File:                     3137302e3234352e3232322e302f32342d3234203d3e20323636303238.roa (raw, json)
Hash identifier:          6HMivTPrR8BmaULvlPxYP64F1BnwZk3MnUCpnYaIWVY=
Subject key identifier:   57:2A:50:78:8F:63:5C:EB:E6:56:B0:10:DC:38:ED:EA:B8:B5:BB:7C
Certificate issuer:       /CN=4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614
Certificate serial:       7A2B513E691ADBCF56756D248D78A5A17F20F23F
Authority key identifier: 4C:36:61:D8:6B:4D:2D:E5:DB:ED:0E:8E:DA:26:A9:61:6F:1F:96:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232322e302f32342d3234203d3e20323636303238.roa
Signing time:             Wed 12 Apr 2023 23:23:31 +0000
ROA not before:           Wed 12 Apr 2023 23:18:31 +0000
ROA not after:            Wed 10 Apr 2024 23:23:31 +0000
asID:                     266028
IP address blocks:        170.245.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2b:51:3e:69:1a:db:cf:56:75:6d:24:8d:78:a5:a1:7f:20:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614
        Validity
            Not Before: Apr 12 23:18:31 2023 GMT
            Not After : Apr 10 23:23:31 2024 GMT
        Subject: CN=572A50788F635CEBE656B010DC38EDEAB8B5BB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:30:b5:2d:9a:76:77:bc:71:b7:08:a0:36:
                    9d:80:61:a7:fa:56:5b:8c:e3:e0:a9:5b:84:0f:7e:
                    fd:1b:3b:c4:b8:1f:e3:d6:59:7a:74:81:3a:40:c3:
                    66:32:81:e8:54:87:db:39:b4:19:b8:51:0e:e0:03:
                    d5:93:fc:83:83:43:70:30:ab:d1:41:7a:a0:dd:57:
                    a7:87:73:1f:4a:f5:c7:aa:39:b3:08:93:6c:f5:d5:
                    ae:61:8d:35:35:47:49:4a:25:4a:a8:ed:ee:2b:ab:
                    88:54:5e:d7:6b:fb:ea:a9:f5:3c:42:bf:3a:ba:c9:
                    c1:39:7c:37:c4:42:7f:97:63:56:c3:f6:ef:ec:3e:
                    6d:3f:b0:1a:cd:6f:65:15:5a:77:05:25:9b:6c:3e:
                    2f:c7:a1:54:d0:d4:23:c6:b3:d3:27:6a:86:0c:03:
                    7f:f1:8b:97:31:b0:0e:8d:f4:44:83:20:7f:a0:7d:
                    97:42:1d:0a:e8:5a:16:6f:01:39:9d:72:5b:49:dc:
                    6a:83:bd:f0:14:7f:30:6d:ca:e2:20:e1:a5:b5:45:
                    c3:72:d7:b8:ef:c5:f4:e6:46:7c:d1:44:1b:62:4c:
                    23:1e:f8:d0:32:0d:e1:f4:7e:a7:54:a0:2d:da:c4:
                    8f:d0:81:2f:d2:d5:55:66:c9:1a:0f:af:ab:fa:48:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:50:78:8F:63:5C:EB:E6:56:B0:10:DC:38:ED:EA:B8:B5:BB:7C
            X509v3 Authority Key Identifier:
                keyid:4C:36:61:D8:6B:4D:2D:E5:DB:ED:0E:8E:DA:26:A9:61:6F:1F:96:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3661D86B4D2DE5DBED0E8EDA26A9616F1F9614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232322e302f32342d3234203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:37:6d:0f:17:d0:c4:7b:c4:2b:7b:16:e0:66:e5:77:64:df:
         73:34:a0:02:3b:aa:85:a0:32:ea:74:2d:1e:39:db:4c:af:02:
         01:74:81:36:83:2a:36:72:1d:ea:38:8e:c8:d6:bc:da:b4:6b:
         07:7d:cd:57:41:53:e7:52:da:b7:d1:fb:e6:52:13:de:e7:bd:
         06:54:af:a3:60:31:2a:35:02:db:12:e5:f3:32:bf:e1:5c:cc:
         84:39:ba:01:e4:7d:70:9f:2f:de:d6:73:82:86:e6:c2:1d:54:
         14:8e:21:76:89:b2:9d:c3:2d:62:e0:71:03:80:88:9d:3d:6a:
         72:3a:9d:a9:c9:42:07:6b:81:4f:b9:89:ff:ed:84:48:d1:8d:
         51:4f:e5:e4:de:04:4d:19:69:60:0f:36:27:53:88:9b:bf:13:
         64:92:19:0f:7c:f8:d9:86:2e:b8:f2:16:e4:d2:d4:83:0d:1d:
         17:29:cc:2c:c1:20:2d:5f:de:c2:d4:cc:6b:d9:16:38:73:6f:
         e0:5b:11:e5:d8:6d:86:e1:76:1f:17:9c:71:3e:fa:f4:53:aa:
         56:0d:ec:af:fb:42:11:de:9f:92:c7:7b:9d:82:ca:81:6c:cb:
         b6:6b:28:82:32:fa:4b:12:64:6f:c7:5e:49:05:4b:26:a2:0f:
         78:07:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org