Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa
File:                     3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier:          /l0Vkwrljuigre1PQBTubKVs0kUl+H9RgYiAQPNhIy0=
Subject key identifier:   B3:48:DE:EC:B3:A3:39:73:A7:13:1B:DA:BD:19:69:B1:63:1B:DF:02
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       0A7BEB15AB8599CEF934DF9DE459F327DA3A61FE
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:14 +0000
ROA not before:           Tue 05 Sep 2023 18:25:14 +0000
ROA not after:            Tue 03 Sep 2024 18:30:14 +0000
asID:                     265080
IP address blocks:        170.233.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7b:eb:15:ab:85:99:ce:f9:34:df:9d:e4:59:f3:27:da:3a:61:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:14 2023 GMT
            Not After : Sep  3 18:30:14 2024 GMT
        Subject: CN=B348DEECB3A33973A7131BDABD1969B1631BDF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:e0:e2:71:0b:31:30:8f:20:6f:a6:34:43:
                    35:30:dc:8d:55:de:ed:4f:a6:8d:69:15:ad:72:77:
                    02:5f:67:db:f3:62:1f:57:df:84:b1:6e:f0:3c:25:
                    ec:3a:e5:c6:02:8f:e6:5c:9b:1f:ce:8d:c5:3e:1a:
                    ff:fb:f1:05:35:d1:9a:53:dc:43:90:5d:cf:76:9f:
                    df:b3:41:af:9a:fe:68:d4:4f:ef:b4:92:8c:d3:67:
                    74:57:b4:06:2e:3b:9e:ca:7f:e2:30:0b:0b:a6:68:
                    53:d4:a7:70:68:cb:78:27:be:eb:0d:6c:c3:f2:3c:
                    33:39:c6:9f:0a:7b:b5:11:7e:70:5f:57:86:46:cb:
                    34:96:04:18:9b:39:b8:a4:39:36:4e:b7:9d:f2:10:
                    7d:00:86:57:68:74:f8:d7:c2:cc:54:4b:2a:36:cb:
                    ee:07:8f:98:25:ad:05:95:d9:3f:c5:a3:17:3d:45:
                    6b:5d:95:22:b7:a0:b0:da:b2:ab:bf:ad:cf:9d:78:
                    d1:02:e5:9d:22:f2:67:64:8a:22:62:a2:f0:fc:15:
                    bd:9a:1c:c2:b5:7f:5e:d5:04:f0:a2:c5:6d:dc:fc:
                    ce:94:3d:fb:11:14:8e:c4:b1:93:24:cc:52:76:23:
                    f9:cb:cb:c9:43:da:3e:f2:32:7b:66:83:7f:42:e7:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:48:DE:EC:B3:A3:39:73:A7:13:1B:DA:BD:19:69:B1:63:1B:DF:02
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:cb:32:22:3b:fe:6c:9d:f5:d0:be:9e:19:43:25:0a:59:
         e4:4b:69:2c:4e:5e:6a:e3:89:db:6b:4f:24:fe:5a:0a:7a:75:
         c4:29:6a:35:6b:0d:e6:33:2c:c2:63:54:ee:f1:dc:16:4b:b5:
         a1:03:38:01:c5:2f:f4:5a:b0:9c:68:a5:2a:e6:c1:ac:15:0f:
         94:9e:fd:f8:bb:02:43:60:c8:78:be:22:c7:39:71:6a:13:3e:
         05:01:56:8c:9c:72:23:33:dc:b9:ff:a0:ed:3f:d5:30:72:ce:
         30:96:11:ec:45:d7:de:9a:98:a3:26:3a:56:d6:37:56:84:62:
         34:1a:96:7a:59:83:fb:5e:b9:5f:57:92:00:98:98:d8:d3:82:
         07:cf:e9:bd:12:ca:99:2e:1a:48:1a:79:26:da:ba:84:00:c5:
         6b:e0:89:b8:86:27:f9:4e:2f:ca:47:f2:e6:bf:ce:d4:db:59:
         fc:73:3a:a8:2c:1d:8c:20:6a:48:bf:6d:be:54:6f:7d:37:38:
         9f:a4:61:6d:d5:58:56:65:de:3c:0e:cf:1c:a1:49:9a:ec:e6:
         b3:69:b2:ce:d4:4d:15:61:bc:c7:f1:f1:74:d4:6b:ef:a6:1a:
         c9:36:f3:c1:5a:e7:bb:7b:02:13:8f:b8:4e:83:f9:25:3e:56:
         38:04:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org