Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa
File:                     3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa (raw, json)
Hash identifier:          l0B6s2tOeEodSzDuISiyQdKqHCQaJtaFkpZszW61VOU=
Subject key identifier:   B8:FA:D5:EA:8A:1D:7F:83:02:AF:22:C2:22:56:9F:00:66:7E:56:6F
Certificate issuer:       /CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
Certificate serial:       665D0FC1DDC2581DF9763D113665D0B650B2E4AA
Authority key identifier: E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa
Signing time:             Mon 19 Jun 2023 13:29:45 +0000
ROA not before:           Mon 19 Jun 2023 13:24:45 +0000
ROA not after:            Mon 17 Jun 2024 13:29:45 +0000
asID:                     265055
IP address blocks:        170.231.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5d:0f:c1:dd:c2:58:1d:f9:76:3d:11:36:65:d0:b6:50:b2:e4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
        Validity
            Not Before: Jun 19 13:24:45 2023 GMT
            Not After : Jun 17 13:29:45 2024 GMT
        Subject: CN=B8FAD5EA8A1D7F8302AF22C222569F00667E566F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:fe:42:62:a3:e8:05:11:ee:e6:ef:aa:c5:
                    c1:ca:0f:7e:cb:55:6a:c0:0f:62:75:95:3a:4a:fb:
                    98:e6:ed:8b:34:da:cc:f1:0d:c4:5d:20:88:0e:4f:
                    8c:91:b2:9c:92:cf:67:10:66:e0:6d:1b:82:57:e4:
                    6e:41:9b:c7:0d:d1:ee:ce:94:80:76:04:a5:9f:6c:
                    54:bf:39:6c:37:26:bd:d1:e9:7d:de:05:cd:5e:21:
                    f8:72:fa:45:aa:0a:68:6f:bc:34:5e:29:30:36:77:
                    16:55:35:f1:95:4c:09:e8:e2:2c:f6:4a:ff:ff:d8:
                    43:0f:24:3c:9a:9b:15:b0:7e:a9:65:74:3b:0e:9b:
                    78:ea:87:50:58:0d:59:cc:67:cc:aa:5a:b3:ec:f3:
                    6c:a5:b4:d9:ac:7c:a1:bf:80:39:5f:7e:ca:e8:9e:
                    b4:42:ed:68:b9:c7:23:f8:98:c6:fb:58:65:c4:d4:
                    cb:c0:d2:38:a5:1b:00:e6:1c:97:a8:26:73:53:41:
                    64:ea:46:2d:04:52:93:45:99:82:f4:b2:51:10:75:
                    74:1a:ed:21:55:5b:98:f1:94:f2:6b:c1:f9:6f:0e:
                    9b:20:78:b4:1d:72:6d:cf:62:60:01:bf:e4:7a:1a:
                    3d:b4:80:48:11:5f:c7:29:60:1e:05:43:44:44:02:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:D5:EA:8A:1D:7F:83:02:AF:22:C2:22:56:9F:00:66:7E:56:6F
            X509v3 Authority Key Identifier:
                keyid:E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:bd:06:b8:86:b7:ec:4d:99:46:fa:90:8d:64:18:aa:16:
         5f:73:cc:d5:47:16:9a:dd:1a:ab:04:2e:38:66:85:d6:cd:8f:
         3e:62:a2:67:20:8c:ec:5b:b0:42:4a:c0:d2:d4:5c:88:9a:12:
         50:26:36:35:14:b5:a6:d6:2a:98:b0:0a:8d:9c:ce:d9:d5:ef:
         80:c7:a2:1c:32:2d:86:7d:54:87:d9:53:24:cb:9c:f0:5a:de:
         77:96:a3:f5:dc:d3:7e:93:49:d6:55:a4:d2:71:77:96:1b:92:
         9d:b1:be:c7:72:86:e5:a2:bc:09:2a:9e:e6:9a:bf:a4:fa:3f:
         8c:84:33:86:54:02:20:0b:ff:eb:0d:fb:c5:a6:f7:4c:5f:a3:
         08:86:ad:3e:90:2f:62:5c:ca:b7:4b:e9:5e:f0:2c:ec:a4:47:
         91:0a:d9:5a:c6:87:25:ea:7e:ff:a3:7a:0b:63:96:f7:d5:d8:
         89:44:52:9b:55:7c:30:e6:6c:cb:27:e3:20:b8:7f:91:ec:9e:
         ff:8b:1d:c4:8f:07:7f:20:78:e2:ce:a0:62:9d:5d:2a:13:38:
         aa:88:3b:f3:bc:57:69:ea:56:01:b6:5e:54:f0:f9:3a:fa:0a:
         96:60:d2:2e:da:3b:52:e3:28:de:d5:aa:cb:0b:72:14:72:9f:
         e7:6b:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org