Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
File:                     3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (raw, json)
Hash identifier:          GKaF2+C7ABRC6Inmc8EE1Xj//LE/3KDL8rpARW3N4/g=
Subject key identifier:   39:95:A3:0D:5B:CE:34:FE:8C:B8:7D:04:7E:DB:E4:78:25:28:22:28
Certificate issuer:       /CN=DCE4F1B056921195E48958A04C7D8F04210F5397
Certificate serial:       36BB4ABF59E33BC795C2C03421079B7F2A9CDC16
Authority key identifier: DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
Signing time:             Tue 21 Nov 2023 22:55:17 +0000
ROA not before:           Tue 21 Nov 2023 22:50:17 +0000
ROA not after:            Tue 19 Nov 2024 22:55:17 +0000
asID:                     266438
IP address blocks:        170.82.48.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bb:4a:bf:59:e3:3b:c7:95:c2:c0:34:21:07:9b:7f:2a:9c:dc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE4F1B056921195E48958A04C7D8F04210F5397
        Validity
            Not Before: Nov 21 22:50:17 2023 GMT
            Not After : Nov 19 22:55:17 2024 GMT
        Subject: CN=3995A30D5BCE34FE8CB87D047EDBE47825282228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:07:4e:e2:35:ed:bf:f5:94:65:29:3b:99:
                    8a:5c:e3:3a:41:cd:bb:67:4b:0b:94:43:23:5d:ad:
                    d2:d6:83:e7:08:ab:37:9a:83:cf:5d:3e:2b:be:e4:
                    79:8f:db:2d:59:a1:eb:a4:5c:d7:3f:28:e5:f0:4f:
                    d5:66:b9:d5:63:bd:92:69:bd:fb:49:e6:bf:7e:78:
                    be:ac:f1:9b:7c:d4:d1:da:60:d6:18:3d:b7:74:5f:
                    4b:95:f6:d9:32:c6:ed:33:9a:b1:3d:18:ad:9a:1d:
                    9b:90:22:eb:2b:07:70:73:5a:a4:91:86:60:61:7a:
                    05:90:be:f9:bf:e1:de:0c:ba:45:cd:e7:7e:7c:43:
                    85:f1:9d:3c:f4:df:79:28:d6:ce:4d:8d:2f:f4:90:
                    9c:b8:20:a5:0e:07:1c:c0:12:da:02:28:fb:6e:ce:
                    8f:db:da:71:b8:05:f7:ae:65:ae:3c:e0:33:eb:0a:
                    24:f2:8c:c4:8b:0c:bf:5e:84:f6:de:ab:88:a3:c2:
                    44:8a:19:d2:6c:9d:c2:f2:5c:9d:28:61:f6:73:03:
                    c9:58:9c:20:8e:d7:eb:be:dc:2f:2c:27:a5:c7:1d:
                    fc:2e:67:24:f9:4f:e2:16:fb:e5:fc:07:84:cb:c8:
                    b1:cf:2b:9c:3f:f6:34:11:28:eb:65:be:bc:b7:33:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:95:A3:0D:5B:CE:34:FE:8C:B8:7D:04:7E:DB:E4:78:25:28:22:28
            X509v3 Authority Key Identifier:
                keyid:DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:39:ac:ab:4a:6b:a2:c5:58:7b:b8:05:49:2f:59:66:de:68:
         0b:7c:76:24:e1:e9:ce:1f:19:4c:c7:34:19:6f:77:8c:8d:db:
         d1:dd:60:88:77:8a:30:33:67:5d:91:8c:1d:74:de:66:90:8f:
         b4:e6:ce:50:05:21:65:e9:d1:f4:18:ef:52:ed:9c:8b:38:83:
         25:63:83:46:c6:2c:9f:b0:d5:f9:8f:a9:dd:82:cb:09:c8:ab:
         0d:0a:05:91:69:d8:c4:4a:b1:da:e3:cf:7b:62:9f:f4:27:88:
         d8:b2:9b:d3:ab:f0:bc:1a:fb:6c:c4:e0:07:f4:15:91:50:36:
         15:8d:f1:0e:fc:87:bf:83:79:c1:84:55:30:7c:50:38:29:3e:
         0f:4f:8d:5d:00:86:ca:9b:ae:1a:88:83:da:d7:62:be:26:fe:
         b3:cb:80:d2:2b:58:4a:53:51:12:1e:73:f3:23:9f:2a:28:61:
         bc:3f:ef:0a:95:cb:b6:91:c4:9d:ec:e3:70:28:1d:f2:0c:44:
         76:bb:9b:e5:b8:dd:7e:f9:e5:69:54:d8:e0:61:62:b7:ba:36:
         9e:e2:69:ce:d2:0c:4a:1a:e2:15:03:46:47:35:26:79:66:0b:
         60:bb:a7:ad:e9:d6:a0:ff:33:a8:c5:da:d8:c6:2b:73:30:44:
         04:45:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org