Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
File:                     3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier:          yD1JKxARYNd0iuwuF8UXp956OaMjStcRzIdmnppUl+A=
Subject key identifier:   F8:0A:82:67:26:AE:70:89:1F:35:33:47:A7:5A:A2:8A:71:E4:AA:C6
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       6C1C5E403CC4151DFB1545AC7BDA3570D6AD206C
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:14 +0000
ROA not before:           Tue 05 Sep 2023 18:25:14 +0000
ROA not after:            Tue 03 Sep 2024 18:30:14 +0000
asID:                     265080
IP address blocks:        170.233.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1c:5e:40:3c:c4:15:1d:fb:15:45:ac:7b:da:35:70:d6:ad:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:14 2023 GMT
            Not After : Sep  3 18:30:14 2024 GMT
        Subject: CN=F80A826726AE70891F353347A75AA28A71E4AAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:7a:a0:e8:df:cd:73:b5:a8:97:94:2f:5b:
                    5d:d6:2a:2f:e0:f7:29:8d:67:dc:d4:62:46:a9:c0:
                    61:74:d7:98:d0:dd:f2:5a:d4:45:38:52:fa:78:b1:
                    e1:cb:bf:d9:85:76:37:bc:bb:02:1a:8d:82:0c:1e:
                    5f:e0:cb:43:56:e7:05:a5:86:60:07:5c:8c:43:79:
                    c7:ab:92:e0:8e:fe:1b:c2:5c:5d:a3:17:b2:45:54:
                    b3:c9:e5:26:f3:33:3f:8d:67:e6:14:1c:51:79:86:
                    29:e4:80:f7:14:95:74:47:22:e0:60:4f:f4:8e:24:
                    97:f4:2d:be:a4:af:f5:f4:61:ff:4c:7e:80:7b:d5:
                    fc:fb:2c:bc:4e:d3:f3:ab:c2:53:13:bb:8f:c7:c1:
                    42:14:ba:b3:2c:14:03:a4:7e:30:ea:53:42:bb:4c:
                    3a:1c:ba:9b:17:00:5d:e2:a6:b1:c2:2b:15:8b:67:
                    be:72:7d:55:11:86:02:0d:a4:23:3d:76:25:92:0d:
                    c4:dd:d6:8b:19:e5:1f:a1:d3:08:55:c9:d3:2a:a6:
                    25:a9:7f:37:5e:32:11:0e:88:10:ba:c6:f2:ed:46:
                    ae:6a:43:17:1a:80:05:99:df:58:57:db:48:64:37:
                    07:4f:fa:34:90:0f:d1:55:97:ce:78:04:b5:38:b8:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:82:67:26:AE:70:89:1F:35:33:47:A7:5A:A2:8A:71:E4:AA:C6
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:78:1a:f2:36:f1:d2:1c:43:40:ef:a9:f5:94:54:80:f4:92:
         1e:4d:66:8e:91:ef:54:9f:43:ee:67:db:96:78:74:f6:b2:49:
         56:c3:67:56:3b:9d:c3:9f:05:91:7d:83:fa:d1:7f:74:f7:32:
         ed:da:b2:90:87:3d:94:a5:be:82:be:31:b7:88:a9:94:f3:48:
         5c:e5:cd:bc:b2:93:af:c4:7e:57:eb:19:2d:48:75:5f:95:c9:
         ce:d6:6d:8a:28:c2:eb:d0:c4:ed:cc:26:c2:a9:6b:25:ae:78:
         c4:81:77:da:de:f2:d6:0d:a5:08:cd:18:6b:32:3a:8b:70:9f:
         5a:20:6b:2d:be:3d:65:90:38:af:53:86:9d:9c:f7:b5:3b:73:
         dd:8b:9b:f9:dd:dc:13:92:e4:c6:af:bf:65:66:06:7e:21:72:
         6b:c9:ee:57:d3:7f:b6:bc:91:19:c0:fe:ed:56:66:c6:99:aa:
         42:5b:43:83:48:dd:fa:58:43:a5:9f:d5:7b:1e:f5:8a:83:e6:
         76:b1:34:06:af:d0:7a:46:2c:77:bc:24:c7:b5:98:77:46:08:
         b2:93:d9:7e:33:cc:c2:dc:4a:19:42:7f:18:36:32:61:84:19:
         a5:52:8d:11:a0:9f:18:30:be:d8:3c:62:91:82:d2:d8:65:15:
         fc:ac:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org