Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/3137302e38332e3137322e302f32322d3234203d3e20323636343735.roa
File:                     3137302e38332e3137322e302f32322d3234203d3e20323636343735.roa (raw, json)
Hash identifier:          7Va+462RE/4GwmKAkGySSgCdyxxnM69B1mypweyXx0M=
Subject key identifier:   FD:9F:B2:52:FE:1F:64:D2:02:B0:6D:1F:41:65:1E:2B:65:CC:53:43
Certificate issuer:       /CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
Certificate serial:       4D8A6C9E143F023310B5F6A458C88E5F9C9CFDA0
Authority key identifier: 5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/3137302e38332e3137322e302f32322d3234203d3e20323636343735.roa
Signing time:             Tue 07 Nov 2023 20:47:11 +0000
ROA not before:           Tue 07 Nov 2023 20:42:11 +0000
ROA not after:            Tue 05 Nov 2024 20:47:11 +0000
asID:                     266475
IP address blocks:        170.83.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8a:6c:9e:14:3f:02:33:10:b5:f6:a4:58:c8:8e:5f:9c:9c:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
        Validity
            Not Before: Nov  7 20:42:11 2023 GMT
            Not After : Nov  5 20:47:11 2024 GMT
        Subject: CN=FD9FB252FE1F64D202B06D1F41651E2B65CC5343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:51:94:63:d2:39:2c:79:df:13:63:d2:d4:
                    dd:ec:59:4b:f9:ca:00:12:9b:e0:fb:2b:9b:71:75:
                    29:cc:bb:3b:3c:f5:97:07:28:36:dc:be:ca:a7:c6:
                    11:b7:21:d3:b6:64:43:6e:50:99:f6:da:57:be:48:
                    9d:a3:f0:cf:93:d1:ea:6f:56:13:69:d2:4b:d0:3e:
                    3b:eb:20:b0:7a:d1:8e:18:90:69:92:2b:91:df:e7:
                    dd:83:84:aa:55:cd:5d:17:a2:93:87:19:86:8d:86:
                    85:41:6c:0b:52:01:b5:37:85:6b:7f:55:5e:7a:53:
                    fe:4e:8b:1e:fd:1c:ef:a7:7e:eb:87:c9:19:79:ba:
                    1d:6e:94:cb:38:94:60:97:0f:a2:ce:26:2d:22:80:
                    13:2f:60:ef:4a:50:77:16:74:91:e9:1d:8e:90:0c:
                    75:58:a9:8d:7c:47:d3:c2:77:55:4d:4c:87:77:27:
                    01:d9:d3:d0:ae:d7:08:26:40:69:94:38:bb:f5:d5:
                    9c:c6:2e:1a:30:a4:83:d5:9d:cd:8c:1f:8a:27:05:
                    c9:3a:5d:fb:d3:cb:4b:9b:df:ed:b7:e0:cd:f5:8d:
                    83:a2:4a:73:5a:ea:32:4e:64:42:0a:1b:6f:d2:b7:
                    31:bd:ee:df:e2:56:ed:0a:0f:32:99:cb:5b:30:e8:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:B2:52:FE:1F:64:D2:02:B0:6D:1F:41:65:1E:2B:65:CC:53:43
            X509v3 Authority Key Identifier:
                keyid:5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/3137302e38332e3137322e302f32322d3234203d3e20323636343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:fd:d3:36:e8:e7:5b:62:8b:d6:ce:94:7f:9b:5a:cd:c5:
         cf:4c:ed:a7:3b:6a:fb:2e:7e:9b:8b:4d:f7:fd:a0:e9:9a:ca:
         b4:13:07:97:fb:34:b3:4e:4a:f7:6c:d1:f5:ba:86:b2:e6:02:
         aa:43:33:ef:c6:10:52:45:41:52:09:e6:b6:44:5c:e6:21:da:
         ce:7d:01:94:cd:c2:ec:c1:c2:16:4b:6c:ce:16:4b:bb:b1:04:
         e2:41:1c:69:44:52:e6:ef:4f:6a:79:6b:99:31:f8:ed:22:a4:
         3e:15:6d:56:01:8c:89:19:f6:fc:4c:2f:40:02:6b:e6:75:fd:
         8e:32:97:1d:37:4c:13:f7:9e:f3:b3:42:7b:37:d4:b3:0e:c7:
         a5:6e:69:80:39:65:7d:9d:6e:e5:b4:6b:19:cc:74:f4:34:52:
         d9:fa:c4:c2:cd:43:18:cf:d6:d5:ce:b8:55:ef:72:37:2e:b5:
         a6:ad:a1:e6:1d:a5:d5:e5:2f:a8:9b:c6:94:66:96:8d:85:e4:
         d7:74:f7:5b:a9:fd:3e:c1:7f:9f:95:82:69:0a:3f:20:41:c0:
         d0:38:bd:ac:97:ba:a0:9c:88:70:bf:fa:b1:d6:62:29:bb:b3:
         40:f1:fa:55:aa:f1:40:96:50:22:11:8d:1e:d1:dc:30:ba:0e:
         9e:b8:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org