Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
File:                     3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa (raw, json)
Hash identifier:          HUA8EZFQvi2BdD7OhHSUxE9CgH3ISxEW3j4JlEZ12bI=
Subject key identifier:   91:9B:08:D8:E2:39:F3:86:87:D4:A8:65:6E:C3:DE:CB:F9:52:6B:4F
Certificate issuer:       /CN=3DBEB64A443F0D98C05394A8D49BA04EF5C0D152
Certificate serial:       37B655F58771144059310D65E9DE5FA98654717B
Authority key identifier: 3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
Signing time:             Sun 06 Aug 2023 14:00:00 +0000
ROA not before:           Sun 06 Aug 2023 13:55:00 +0000
ROA not after:            Tue 06 Aug 2024 14:00:00 +0000
asID:                     266357
IP address blocks:        170.239.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:55:f5:87:71:14:40:59:31:0d:65:e9:de:5f:a9:86:54:71:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEB64A443F0D98C05394A8D49BA04EF5C0D152
        Validity
            Not Before: Aug  6 13:55:00 2023 GMT
            Not After : Aug  6 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100CCF586E79F2528A148A61B9BBAC6B2C7DB9548AE509701BA0342A8CD3129D6613385F2C359F41F8A878A80EF1FE191BDEDD704D33ED5D01781CF034A037E87DCA0C87D714EE94F4DE331583E5DB7C41EA08481A88F547667E90CC809B8BC82C8EF75D965D7833432AB82F7727665409FC4AC2B0C704CDE8CFF5E40C678552CC9E5AEF3A626F19CFE0C1C5B8F6D8A3DE6F9824C97C6B87ADCB3BA7CD85F8C10EB363686D506AFBAC9A70D215459E2D87B9E9272A4328BC63E84232F57E9056803363404DD88E1EA9E1D8F31FF69BA0E62FE2E75E504BF17A217930DD602B53C60D231EB5846A64E608D3B46045D3BD228DE2CC9971CBE20F8B857CBB75D16EDF30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:86:e7:9f:25:28:a1:48:a6:1b:9b:ba:c6:
                    b2:c7:db:95:48:ae:50:97:01:ba:03:42:a8:cd:31:
                    29:d6:61:33:85:f2:c3:59:f4:1f:8a:87:8a:80:ef:
                    1f:e1:91:bd:ed:d7:04:d3:3e:d5:d0:17:81:cf:03:
                    4a:03:7e:87:dc:a0:c8:7d:71:4e:e9:4f:4d:e3:31:
                    58:3e:5d:b7:c4:1e:a0:84:81:a8:8f:54:76:67:e9:
                    0c:c8:09:b8:bc:82:c8:ef:75:d9:65:d7:83:34:32:
                    ab:82:f7:72:76:65:40:9f:c4:ac:2b:0c:70:4c:de:
                    8c:ff:5e:40:c6:78:55:2c:c9:e5:ae:f3:a6:26:f1:
                    9c:fe:0c:1c:5b:8f:6d:8a:3d:e6:f9:82:4c:97:c6:
                    b8:7a:dc:b3:ba:7c:d8:5f:8c:10:eb:36:36:86:d5:
                    06:af:ba:c9:a7:0d:21:54:59:e2:d8:7b:9e:92:72:
                    a4:32:8b:c6:3e:84:23:2f:57:e9:05:68:03:36:34:
                    04:dd:88:e1:ea:9e:1d:8f:31:ff:69:ba:0e:62:fe:
                    2e:75:e5:04:bf:17:a2:17:93:0d:d6:02:b5:3c:60:
                    d2:31:eb:58:46:a6:4e:60:8d:3b:46:04:5d:3b:d2:
                    28:de:2c:c9:97:1c:be:20:f8:b8:57:cb:b7:5d:16:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:08:D8:E2:39:F3:86:87:D4:A8:65:6E:C3:DE:CB:F9:52:6B:4F
            X509v3 Authority Key Identifier:
                keyid:3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:16:05:c1:3e:fa:2f:d9:b8:12:2b:bd:b7:91:6d:11:41:5b:
         20:43:6c:81:1e:92:14:b0:94:b1:ad:85:4a:11:71:6b:e8:0e:
         dc:9d:e9:9e:75:65:41:33:d9:10:38:6c:cf:ad:d2:d9:8a:23:
         1e:90:4d:07:25:53:db:47:a9:37:90:76:54:ee:5b:62:a5:88:
         67:aa:04:f7:0b:6f:f7:a5:fb:a4:47:3e:77:38:96:07:c4:5a:
         1a:c5:3c:35:e6:34:a7:80:98:6c:0c:91:9e:56:93:61:b1:a1:
         0b:fe:67:ad:af:be:6f:03:41:e0:18:fc:16:3e:ab:e7:08:d8:
         2c:d8:12:98:ec:57:64:ef:b0:dd:7a:48:7b:6c:46:99:1b:0c:
         5d:9e:0d:1f:37:9c:f4:4a:b3:8e:9c:66:ad:f9:8a:d8:d9:12:
         94:a3:f7:35:02:f1:98:8d:7a:56:36:a0:3e:b4:be:7d:9f:c7:
         f9:fc:d8:f8:2a:dc:b7:e7:15:af:ba:ac:af:28:7e:f3:9c:d3:
         04:82:63:3c:12:05:0a:fc:8d:3b:9a:38:2a:9c:b9:13:be:dc:
         38:76:ff:cd:ff:68:fb:0c:8a:55:b1:a9:7f:c8:b1:92:98:28:
         bc:28:de:bf:65:e7:a2:04:9c:ad:ac:a4:71:a2:57:e2:f8:be:
         c7:aa:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org