Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
File:                     3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          IzyH2Nk03oYRCX9Eeyd2Nwyf4rk51UoGr1io6hBRJEw=
Subject key identifier:   4F:1F:4F:E5:CD:E4:73:09:86:8C:F5:F1:C6:2F:73:61:B5:18:15:D2
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       4C92FAA7152212D80EC3B93B056C4B5543E25A1B
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:13 +0000
ROA not before:           Tue 05 Sep 2023 18:25:13 +0000
ROA not after:            Tue 03 Sep 2024 18:30:13 +0000
asID:                     265080
IP address blocks:        170.233.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:92:fa:a7:15:22:12:d8:0e:c3:b9:3b:05:6c:4b:55:43:e2:5a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:13 2023 GMT
            Not After : Sep  3 18:30:13 2024 GMT
        Subject: CN=4F1F4FE5CDE47309868CF5F1C62F7361B51815D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:c8:ce:cd:ca:58:5d:e9:97:86:8e:39:7f:
                    05:6d:5c:5e:6e:46:c6:7c:05:e4:99:08:7b:9e:71:
                    31:df:71:30:75:5f:36:d1:91:c9:51:2f:91:a1:c2:
                    7d:90:f8:20:c8:07:8c:24:9d:8b:8a:27:9b:83:fe:
                    11:84:14:a5:a0:03:20:7d:a6:77:a4:df:64:01:29:
                    7d:94:8c:36:47:f6:49:d2:81:d4:8b:6a:a1:72:d0:
                    85:27:3b:89:b4:be:2b:60:91:41:8c:be:87:03:6f:
                    7b:11:6a:c3:55:37:85:3b:5c:cc:82:7c:26:b1:81:
                    39:7d:32:44:89:66:e1:eb:8b:9a:31:f1:9e:0b:98:
                    1b:6d:ee:22:35:07:7b:59:09:1f:84:63:bb:1a:62:
                    cc:f1:ee:92:c9:50:00:b4:76:6f:dd:42:a3:f2:ad:
                    a6:31:cc:69:34:ac:2b:13:0f:8f:5a:37:7c:6f:fd:
                    8c:84:d2:24:e3:ee:17:28:af:be:57:f8:20:e2:ce:
                    70:f5:3f:17:6b:13:73:4f:e6:9c:5e:bb:8a:a3:c1:
                    51:de:63:d2:f1:a1:8b:3e:52:67:16:54:1a:7d:d7:
                    09:62:1f:60:8d:8d:c9:38:a8:7f:47:7e:f1:d2:1f:
                    2a:89:da:6e:9d:5c:d3:67:f5:96:48:d2:b0:59:71:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:4F:E5:CD:E4:73:09:86:8C:F5:F1:C6:2F:73:61:B5:18:15:D2
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:1a:5b:8d:6a:a5:df:17:dd:13:06:1a:50:bb:c4:16:52:
         60:16:ea:1e:b4:64:06:0c:52:b5:1d:54:1f:93:1b:d0:1f:f7:
         e8:d5:b3:9d:6c:ff:0a:32:f6:d8:ff:2e:43:ab:c3:95:84:6d:
         14:2b:1b:bd:14:0c:4d:5a:4e:df:ef:6e:4d:97:0c:1d:3f:54:
         49:95:4f:04:3f:c5:0b:dd:4a:df:98:fa:d5:cb:ce:67:9f:f9:
         b9:12:1d:38:27:5e:c6:42:42:46:87:36:a4:9c:0e:a7:35:d3:
         59:c6:4d:6f:04:80:dc:89:cf:67:93:bd:1d:93:c6:94:91:ac:
         1e:5e:bd:ae:3e:16:47:c2:54:56:cc:3d:75:85:f4:c0:ce:a8:
         78:64:48:d8:ab:0b:c0:09:cc:7e:da:52:7a:c1:93:2e:99:29:
         45:bc:d1:33:ea:28:08:06:d1:84:28:e4:db:09:97:1d:41:1e:
         4e:05:8c:01:10:a1:dc:9e:06:98:17:5d:27:8f:e3:cb:04:61:
         66:77:79:df:b4:68:5d:20:d7:05:9d:29:c9:31:1d:1b:ad:f1:
         d8:6c:87:30:d3:3c:45:0e:27:46:21:a2:82:d7:c7:ee:9a:ad:
         38:90:ff:ef:d8:8a:b3:54:32:40:83:e9:d6:07:96:54:18:c4:
         ca:9b:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org