Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e203532393430.roa
File:                     3137302e3234342e3136342e302f32322d3232203d3e203532393430.roa (raw, json)
Hash identifier:          tP4l85RpLSUq/tU52pDYE5EvDKYvunAuWIc3lT21s+k=
Subject key identifier:   A5:C3:13:D0:D8:5A:6D:1E:E6:3A:FF:98:1E:6B:AB:32:FD:D9:95:65
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       09A5BFDC41ADD2B6CBF1EC3660F41E2577CC1AF8
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e203532393430.roa
Signing time:             Tue 26 Dec 2023 13:08:12 +0000
ROA not before:           Tue 26 Dec 2023 13:03:12 +0000
ROA not after:            Tue 24 Dec 2024 13:08:12 +0000
asID:                     52940
IP address blocks:        170.244.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a5:bf:dc:41:ad:d2:b6:cb:f1:ec:36:60:f4:1e:25:77:cc:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Dec 26 13:03:12 2023 GMT
            Not After : Dec 24 13:08:12 2024 GMT
        Subject: CN=3082010A0282010100B3ADAC7E8E7633670F3CF0E0FD2B936258F1977B62558DDF94E014E3F0C1806400226099117198F944293AC108C7D9CD7FEE075BDB303BB0028EB5BB598F71476087AA452D690C1B75963752EFED2D9ACFC8532903A4D2A3B340599FC71EDFF23CB103DA944CBBC5DAC7F79E1DE0064F13BD2ED30C96733C4DF981DC6046EF19224D521E8BFDBB34DC0FBBD7F54FEAA66EC15991D39FF943834630784AAE370E4CEDA939840A77578D5818ED58ABD48853F06004B0B41DD249DCBFEF9FC02119F0656A7FC6E80B22F1D37E732D3A9A316D7CF7EE31E6473E60B053E6532146CBEFDE3BA4E4E2A06A68A12FD95C4947801C18E82A91055A2FE0AF7C7F5D3BF8C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:ac:7e:8e:76:33:67:0f:3c:f0:e0:fd:2b:
                    93:62:58:f1:97:7b:62:55:8d:df:94:e0:14:e3:f0:
                    c1:80:64:00:22:60:99:11:71:98:f9:44:29:3a:c1:
                    08:c7:d9:cd:7f:ee:07:5b:db:30:3b:b0:02:8e:b5:
                    bb:59:8f:71:47:60:87:aa:45:2d:69:0c:1b:75:96:
                    37:52:ef:ed:2d:9a:cf:c8:53:29:03:a4:d2:a3:b3:
                    40:59:9f:c7:1e:df:f2:3c:b1:03:da:94:4c:bb:c5:
                    da:c7:f7:9e:1d:e0:06:4f:13:bd:2e:d3:0c:96:73:
                    3c:4d:f9:81:dc:60:46:ef:19:22:4d:52:1e:8b:fd:
                    bb:34:dc:0f:bb:d7:f5:4f:ea:a6:6e:c1:59:91:d3:
                    9f:f9:43:83:46:30:78:4a:ae:37:0e:4c:ed:a9:39:
                    84:0a:77:57:8d:58:18:ed:58:ab:d4:88:53:f0:60:
                    04:b0:b4:1d:d2:49:dc:bf:ef:9f:c0:21:19:f0:65:
                    6a:7f:c6:e8:0b:22:f1:d3:7e:73:2d:3a:9a:31:6d:
                    7c:f7:ee:31:e6:47:3e:60:b0:53:e6:53:21:46:cb:
                    ef:de:3b:a4:e4:e2:a0:6a:68:a1:2f:d9:5c:49:47:
                    80:1c:18:e8:2a:91:05:5a:2f:e0:af:7c:7f:5d:3b:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:13:D0:D8:5A:6D:1E:E6:3A:FF:98:1E:6B:AB:32:FD:D9:95:65
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:6e:56:e8:25:b7:0a:a0:0e:3d:8b:25:2f:5e:2f:77:9d:00:
         bd:ca:0a:19:bc:56:67:e7:4a:a2:69:78:c3:95:d6:9d:8e:0e:
         65:a4:0d:ae:bb:d9:2d:1c:af:ad:65:eb:c2:21:e8:1a:9c:08:
         dc:cb:86:25:dc:22:f3:64:09:1d:60:7b:9d:1b:ba:f6:e2:62:
         39:1e:a8:9e:04:b3:e9:2b:ec:08:06:f2:a5:d6:c1:6c:6f:32:
         64:95:60:1c:90:8a:78:4b:33:bf:47:04:3d:26:76:31:84:21:
         8e:01:4a:57:4e:dc:de:aa:22:8c:1d:21:4d:09:a8:fb:f6:e2:
         2e:ba:9a:2c:a2:42:0a:c0:39:71:62:b6:be:ab:c1:2a:23:61:
         9d:fa:74:7e:d6:eb:94:9f:07:cf:e1:28:c8:f4:16:85:86:c5:
         0b:6f:98:35:eb:fd:bf:a6:db:08:f7:05:9b:a5:9f:a2:18:76:
         a9:b8:af:39:43:c8:44:e6:f3:cd:19:4f:5b:b1:f8:43:a5:29:
         8f:15:29:e7:0e:25:e3:30:70:99:61:d3:1c:5d:74:c6:39:d1:
         86:55:da:f5:2b:7d:e3:4a:a6:9c:be:5c:90:4f:e2:6e:43:d8:
         63:ad:cb:8c:ae:17:48:04:6b:09:64:4e:28:61:be:1d:6d:4f:
         02:68:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org