Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa
File:                     3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa (raw, json)
Hash identifier:          rezOQF7LEusEeoUe49u9whzzZ+2hVa/YatcmjntyCdk=
Subject key identifier:   F2:53:E6:93:44:1C:C9:6E:52:85:28:00:18:B7:D5:C3:3C:F4:01:BB
Certificate issuer:       /CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
Certificate serial:       470C4F8A4F907D201B2A471CA94E22F0DAE6B43E
Authority key identifier: B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa
Signing time:             Tue 16 May 2023 22:45:09 +0000
ROA not before:           Tue 16 May 2023 22:40:09 +0000
ROA not after:            Tue 14 May 2024 22:45:09 +0000
asID:                     264429
IP address blocks:        170.245.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0c:4f:8a:4f:90:7d:20:1b:2a:47:1c:a9:4e:22:f0:da:e6:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
        Validity
            Not Before: May 16 22:40:09 2023 GMT
            Not After : May 14 22:45:09 2024 GMT
        Subject: CN=F253E693441CC96E5285280018B7D5C33CF401BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:b7:2f:5e:b5:18:95:1d:12:2c:01:88:bf:
                    95:e8:4d:bb:9b:39:8b:f8:18:70:97:b0:2f:8b:0f:
                    a6:e5:37:d9:e7:d5:8e:02:c8:e7:78:9d:14:cb:01:
                    43:41:50:c0:d6:1d:df:43:cf:8c:15:d1:50:66:86:
                    d6:31:9a:a9:a4:41:fa:cd:ca:8f:31:d2:9d:cf:02:
                    25:13:c1:24:30:b0:aa:fb:fe:6f:19:80:56:a4:2d:
                    da:a4:90:ee:1b:d0:4e:9b:10:dc:b4:c7:41:ea:4e:
                    03:b6:42:16:be:15:ab:0b:43:64:36:86:e0:6b:49:
                    57:60:cf:af:a3:69:83:ee:b9:6e:79:ed:d3:f7:88:
                    de:09:f7:a2:2e:a9:d8:3f:45:9f:6c:98:a4:bf:6f:
                    90:3b:86:e8:bc:cc:fc:4b:73:ed:5a:dc:4c:4e:40:
                    e5:c8:78:be:9b:5d:e8:ba:72:9d:b7:06:2d:c6:d2:
                    60:54:9c:d1:e5:6c:65:34:63:84:7c:0f:e2:c8:fd:
                    41:76:58:ef:43:2d:df:ab:aa:2c:0b:aa:2e:a9:62:
                    d6:0b:e7:7a:56:b5:dc:53:c0:9a:ff:3e:42:86:be:
                    76:fd:11:72:81:e9:52:6f:46:ed:d3:3a:f4:9f:99:
                    5c:5a:ee:53:aa:0f:68:04:f1:6d:1b:f0:db:7f:bb:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:53:E6:93:44:1C:C9:6E:52:85:28:00:18:B7:D5:C3:3C:F4:01:BB
            X509v3 Authority Key Identifier:
                keyid:B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:10:6d:64:d1:73:79:4b:a6:09:ab:3d:8d:f1:18:c3:1b:97:
         a8:b5:43:aa:a8:5b:b2:7a:94:32:39:e5:f2:1b:9d:81:df:a5:
         ac:fd:ea:67:a5:24:6b:fc:7a:02:aa:3d:05:06:0f:da:b1:f0:
         2d:01:61:33:44:28:aa:f1:c1:4f:f2:52:90:b8:57:06:fd:ea:
         98:70:31:59:f8:9a:ad:d5:97:f0:63:a7:d5:22:da:fd:d5:21:
         6f:7f:64:a4:9c:c7:8d:2f:96:ed:ff:18:3a:04:c4:c5:d0:65:
         1c:6e:ec:fc:01:1d:39:83:4f:68:d1:d3:05:4f:1e:88:70:bc:
         d0:00:4a:f7:d3:ba:b6:e2:8b:f3:f0:40:3b:77:3c:f4:3b:73:
         77:ef:9a:3d:de:a3:65:e2:ec:f3:bf:ed:1e:65:41:b1:c7:99:
         cc:21:3f:10:07:01:0f:9f:fe:34:a3:83:a9:9a:fc:33:74:f4:
         36:80:db:c6:ba:cc:ff:f5:2e:e2:21:f9:d7:62:67:69:a6:2a:
         e4:dd:bb:32:11:0f:77:92:63:f7:e1:38:64:83:20:ac:52:7d:
         04:c4:98:f9:12:be:5e:7e:47:6a:c3:aa:3a:90:b0:a4:4c:15:
         59:39:a2:52:8f:7b:2f:e0:51:42:71:d0:ed:fc:19:24:a3:a2:
         5f:5c:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org