Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
File:                     3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          B2+mYIB2kvsEALi4sNMB9Ie0XBDo9rLtHB2+/oMSXLc=
Subject key identifier:   52:51:7F:7C:D6:17:B5:68:1B:B3:72:A5:19:FA:D0:87:4B:15:0F:A0
Certificate issuer:       /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial:       46D45AF87C89574AC6EC766D81F78D78C4C32FD0
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
Signing time:             Tue 19 Dec 2023 12:52:31 +0000
ROA not before:           Tue 19 Dec 2023 12:47:31 +0000
ROA not after:            Tue 17 Dec 2024 12:52:31 +0000
asID:                     263441
IP address blocks:        170.233.168.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d4:5a:f8:7c:89:57:4a:c6:ec:76:6d:81:f7:8d:78:c4:c3:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
        Validity
            Not Before: Dec 19 12:47:31 2023 GMT
            Not After : Dec 17 12:52:31 2024 GMT
        Subject: CN=52517F7CD617B5681BB372A519FAD0874B150FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:03:38:bd:3a:ff:a8:9c:2c:10:b9:c7:bc:
                    d1:75:6b:0d:d5:3c:79:72:eb:9f:f9:a0:a7:ef:84:
                    33:d6:93:c5:7a:25:b8:e2:52:90:c1:1e:8f:a9:8e:
                    d9:49:60:78:58:fb:65:39:f4:0e:95:0a:0e:d3:87:
                    4d:c9:96:b7:07:99:01:42:59:49:f2:9f:37:e2:89:
                    bc:63:22:a9:82:e7:ea:f3:80:9a:bd:5a:0b:e5:09:
                    d4:e0:be:01:53:68:7d:02:6a:ff:80:f8:0f:9d:53:
                    3b:65:df:11:3a:00:df:fc:26:c3:cd:cd:e0:64:1d:
                    b5:c6:f1:5f:1c:03:5d:1e:ff:c2:e6:92:86:55:4c:
                    60:3f:32:dc:c1:73:d5:eb:dd:f0:3e:00:ca:66:15:
                    94:6f:99:19:ec:56:83:bb:99:df:b2:3c:3e:7c:79:
                    75:c6:d4:bb:70:4f:01:e0:ca:1a:a0:9f:22:ee:0e:
                    90:8b:bc:81:f6:ee:ac:13:bb:fb:b1:19:32:e3:e2:
                    f1:57:02:08:fc:e9:fc:df:72:09:fa:43:7b:c2:1a:
                    24:23:40:7a:a3:91:1b:5a:cd:9c:e7:71:d4:ae:88:
                    da:d1:3f:27:e0:b6:d8:a5:87:4c:eb:9b:4e:da:46:
                    1b:9a:2f:a0:e2:c0:0b:b5:e4:46:bd:08:20:be:c0:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:7F:7C:D6:17:B5:68:1B:B3:72:A5:19:FA:D0:87:4B:15:0F:A0
            X509v3 Authority Key Identifier:
                keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:3b:84:6b:ab:77:4f:16:05:1b:cd:2c:7b:7c:bf:27:60:
         68:78:ec:33:ab:78:20:31:5e:7b:87:36:96:4c:d3:de:67:fa:
         71:bb:27:3a:c0:2f:c4:15:89:66:7c:3e:9e:b2:08:cc:a7:1a:
         28:e5:b0:80:8c:98:5c:fe:47:68:bb:a2:a8:e2:eb:00:a4:89:
         a8:d4:82:b7:b4:eb:97:df:e3:c4:85:69:0c:68:21:e3:77:48:
         b4:24:83:95:44:71:fe:d3:fa:b0:4f:2c:86:2d:75:56:0b:98:
         5f:ae:90:94:7a:85:be:0b:bf:f7:a1:7b:28:de:fc:4f:df:0e:
         49:dd:9f:07:90:d3:dc:2c:2e:40:19:22:42:87:bc:37:4d:a6:
         aa:08:b9:3e:3d:dd:da:99:44:cc:d1:ae:ba:59:59:66:ed:06:
         ba:ac:e2:8f:55:2e:4f:e6:94:fd:18:f2:33:c0:d5:17:39:09:
         08:54:21:16:e3:58:d7:5a:fe:64:db:a3:f3:87:67:09:4e:b1:
         80:6b:4d:5a:54:1b:0a:bd:91:fc:a8:9d:47:ce:32:de:99:a2:
         d3:7e:9c:0d:aa:8c:ba:a2:70:70:ac:1f:b1:11:8e:10:ea:38:
         ae:fa:cb:bc:62:6b:c1:9d:30:2b:d1:2f:5f:81:48:6d:06:f3:
         dd:25:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org