Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232312e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232312e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          bvK2XQfexLhnNjs2vrmHCb/Fyu0dHJNZ7XZ6/wxPLi8=
Subject key identifier:   D5:8A:09:4E:40:30:59:C6:11:12:1E:5C:B0:70:D9:5E:7B:81:86:0E
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       17524C682FC8D444F626BD0CD1E32B06A9C4D5FC
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232312e302f32342d3234203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:19 +0000
ROA not before:           Mon 04 Mar 2024 19:18:19 +0000
ROA not after:            Mon 03 Mar 2025 19:23:19 +0000
asID:                     266448
IP address blocks:        170.82.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:52:4c:68:2f:c8:d4:44:f6:26:bd:0c:d1:e3:2b:06:a9:c4:d5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:19 2024 GMT
            Not After : Mar  3 19:23:19 2025 GMT
        Subject: CN=D58A094E403059C611121E5CB070D95E7B81860E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:55:0b:a7:06:7b:65:56:12:3c:e1:0b:1d:
                    df:8e:75:d9:40:97:03:4a:bc:35:40:13:c1:d9:3f:
                    d9:bb:1c:49:e0:f8:ce:f7:4c:e4:67:09:e5:07:7d:
                    92:71:12:d4:0e:92:25:a6:f6:8d:9b:8e:76:97:f9:
                    1a:d1:74:ad:c5:38:2b:d4:71:b2:4d:38:a4:4f:4b:
                    84:69:22:60:e8:7c:89:98:c3:78:d9:7d:51:b1:9a:
                    8e:50:5f:c4:af:9f:e2:5d:6e:af:8a:75:1b:7a:8a:
                    92:45:60:bb:b8:77:c4:0f:29:24:59:41:59:5a:a1:
                    49:56:81:d2:e8:3c:8e:c0:6a:9b:2e:e9:d4:52:ea:
                    74:d7:f5:fe:66:04:e1:7a:3a:17:28:0f:82:de:98:
                    38:8e:46:ee:ce:6a:b2:3d:d9:6b:42:47:16:df:3f:
                    75:f9:7c:cd:1b:20:3e:00:0b:01:99:d6:41:7d:c3:
                    50:d9:e0:02:aa:f1:e5:ec:71:c6:03:96:27:aa:20:
                    85:b9:23:a0:30:93:e6:c7:24:ad:93:e2:6b:4e:4c:
                    f5:0f:cb:59:c9:6f:90:87:35:c3:6f:6c:6e:ff:4a:
                    73:d3:a9:f4:c1:51:a1:23:b0:62:66:89:a4:31:1f:
                    ed:32:b8:f5:50:a5:07:9b:1e:7d:15:35:86:66:02:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:09:4E:40:30:59:C6:11:12:1E:5C:B0:70:D9:5E:7B:81:86:0E
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232312e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:0e:3e:65:75:4c:c1:b3:f5:3b:b3:b2:87:ad:95:2f:90:04:
         44:b9:65:1d:07:9f:75:59:6c:3c:9d:2f:c9:3c:1d:44:ed:33:
         cf:42:be:2a:b9:3f:cb:48:53:ad:7c:35:81:25:22:ef:60:b4:
         2a:c6:b0:75:ba:8d:3a:69:1a:cb:62:23:9d:6c:92:5c:3e:61:
         8c:8f:21:58:94:30:6e:53:2e:5e:0d:b6:42:18:4d:f7:ee:f9:
         5f:f8:ac:13:81:9d:81:a0:5a:14:a7:3f:ea:27:65:72:29:ec:
         23:3d:4c:cd:e2:be:6f:d0:ef:28:c5:63:fd:3c:1d:12:30:b4:
         cb:e7:f2:26:f3:55:97:93:0a:90:cd:d6:34:9d:ec:83:ef:a7:
         46:4c:a8:44:83:dc:14:65:3d:99:ba:cb:e8:a6:62:87:aa:20:
         6d:38:54:b3:b6:f0:0d:04:48:72:6a:40:56:c7:88:8a:e4:74:
         b3:48:d8:b4:5a:0f:db:0b:fc:cd:13:5f:a4:f4:9e:5e:7a:da:
         33:06:9e:75:c2:5c:f0:6d:dd:c9:48:e8:89:74:17:ec:a8:dc:
         d8:8b:28:d7:28:fe:21:5b:ba:c7:9a:b8:2f:89:25:fb:96:ba:
         78:34:81:90:42:ef:c7:de:0d:af:5d:c6:b5:54:a9:6d:55:57:
         d1:0d:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org