Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
File:                     3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          T8UrLYdhut6/kFZkmGTP7AxTSfHxRrBK3NX+0pMgINo=
Subject key identifier:   40:20:67:A5:45:CB:30:0B:1A:4B:AB:E9:4D:B3:DC:15:6F:9E:DA:2D
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       602D34589D3D741E117EEBE55DFA0B73EE7F4F74
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa
Signing time:             Fri 03 May 2024 21:05:04 +0000
ROA not before:           Fri 03 May 2024 21:00:04 +0000
ROA not after:            Fri 02 May 2025 21:05:04 +0000
asID:                     52940
IP address blocks:        170.244.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:34:58:9d:3d:74:1e:11:7e:eb:e5:5d:fa:0b:73:ee:7f:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:00:04 2024 GMT
            Not After : May  2 21:05:04 2025 GMT
        Subject: CN=402067A545CB300B1A4BABE94DB3DC156F9EDA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:aa:0f:d7:29:96:69:16:c0:a0:f1:98:70:
                    00:ef:9e:62:27:47:55:3e:f7:ec:f7:b7:cf:aa:07:
                    da:c9:e1:ce:08:1b:57:2f:95:43:0b:54:bb:a7:6b:
                    fb:39:74:e8:a4:1d:8f:63:02:fe:fd:86:e9:9d:1d:
                    3c:72:ee:ba:7d:b0:a8:c5:a1:0a:54:6f:e3:94:5c:
                    4c:4f:72:21:ff:85:18:8d:af:43:f3:bc:54:ee:a5:
                    38:f1:fd:c5:51:7d:71:dd:6a:94:7e:af:7a:f8:f5:
                    66:85:d8:2d:99:c7:e8:87:68:6c:14:1c:a5:4d:9f:
                    3d:cb:d5:3d:ff:0e:f6:7c:43:fd:be:4c:7b:a2:00:
                    63:c8:a0:75:3d:e5:c3:14:56:be:a7:73:f8:2e:4c:
                    48:fe:a5:69:1e:ad:c9:3b:07:a3:97:bf:d2:2f:22:
                    a4:97:44:da:6e:7f:75:74:fc:2b:9b:38:0f:bf:98:
                    43:0c:12:22:2e:a2:fe:2d:0d:a5:b5:bd:ab:9c:17:
                    5e:2d:34:46:a5:39:cc:7a:31:68:06:43:59:0b:e8:
                    f2:44:2a:07:a8:41:28:19:4d:1b:93:4a:0c:43:7b:
                    16:7d:82:13:b1:75:13:92:8a:a0:5d:5d:cc:ff:87:
                    35:cc:84:33:c6:f6:49:a3:4d:2a:cb:b2:10:6b:29:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:20:67:A5:45:CB:30:0B:1A:4B:AB:E9:4D:B3:DC:15:6F:9E:DA:2D
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:66:f6:6f:fa:98:01:0f:a4:2b:4a:7f:2e:32:64:d3:74:ce:
         5b:b9:e7:60:75:6d:87:a7:49:06:0d:05:f3:46:81:7e:56:e9:
         20:88:3e:02:5c:b1:59:12:22:b3:ee:57:99:11:75:ca:83:b4:
         eb:94:3b:87:99:37:f0:58:91:9c:d0:be:75:31:93:55:c2:d9:
         a4:f7:f1:e3:02:a2:60:c1:02:c9:51:2a:9c:84:1b:a6:c5:07:
         16:8d:20:9b:68:95:75:69:34:12:05:e8:87:ad:ad:4a:a8:58:
         e7:51:4e:f2:1c:59:6e:9e:c3:99:b8:13:fc:cc:64:5a:a3:62:
         44:9d:5b:ed:c2:bb:34:a0:a5:1a:e6:86:d6:8f:16:aa:71:7a:
         4a:cb:5b:4d:8d:1b:a8:c2:ba:c9:b4:75:c7:85:71:61:07:d1:
         7d:e6:a5:71:d2:14:2a:48:51:0f:f7:64:76:f1:9d:82:88:e9:
         0a:8e:05:37:12:5a:83:3d:03:de:c1:d4:4c:37:f1:d7:d6:9b:
         86:b9:39:f1:50:4e:6d:8b:15:7c:46:68:60:e6:70:50:ab:16:
         c5:bd:8e:88:eb:da:28:69:3c:84:07:1f:d9:9a:9f:ef:e9:62:
         cb:6c:f9:63:36:bb:c4:29:15:b7:1a:e9:e7:2b:f6:c2:6b:eb:
         71:d0:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org