Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3234362e3232382e302f32322d3234203d3e20323633363436.roa
File:                     3137302e3234362e3232382e302f32322d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          ODIC0wMCGeyaJhVE0OKKgDnzANcVN9V32wNhk3lgIC8=
Subject key identifier:   A5:A1:D0:0D:E3:20:ED:9A:5A:C7:95:6C:E5:CA:74:84:05:6E:90:A2
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       1F444CF9AEAAC0184912A822C986609D8A3C164D
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3234362e3232382e302f32322d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:41:11 +0000
ROA not before:           Fri 14 Jan 2022 23:36:11 +0000
ROA not after:            Fri 13 Jan 2023 23:41:11 +0000
asID:                     263646
IP address blocks:        170.246.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:4c:f9:ae:aa:c0:18:49:12:a8:22:c9:86:60:9d:8a:3c:16:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:36:11 2022 GMT
            Not After : Jan 13 23:41:11 2023 GMT
        Subject: CN=3082010A0282010100D893F0A6FF2EBFFE3E55CE55497A7172D2612D29AA75513BEC5BE9684CA2E517D3091168C16F3405DDCE412D92CFA09359E6250ED4E057E581C8DFA90CB5352AE673ED102E6837C020905B7EBA10643B20D5D184291FADD25977F7C48E9A65521F64824516510A3FAA34939CDB5E41DAB7F423C8FEF8D7765BEB194541BA39BC452A6540E7A76A8BD3C64617F49CE92487EBE4065BD5E420EBB45FE6F2EDDB541B4CF54D5E1F73604BF78E4CB77E0AE60DA9C3FA007E815BE03680DA835E51CADF2F6E8C949B327E4C9523029D103218FB833240416EF19791AFE8981190503997BD181ECE69EE6E734735614B69D7B3210B65F4DE0F63028222D9995D4B982D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:f0:a6:ff:2e:bf:fe:3e:55:ce:55:49:7a:
                    71:72:d2:61:2d:29:aa:75:51:3b:ec:5b:e9:68:4c:
                    a2:e5:17:d3:09:11:68:c1:6f:34:05:dd:ce:41:2d:
                    92:cf:a0:93:59:e6:25:0e:d4:e0:57:e5:81:c8:df:
                    a9:0c:b5:35:2a:e6:73:ed:10:2e:68:37:c0:20:90:
                    5b:7e:ba:10:64:3b:20:d5:d1:84:29:1f:ad:d2:59:
                    77:f7:c4:8e:9a:65:52:1f:64:82:45:16:51:0a:3f:
                    aa:34:93:9c:db:5e:41:da:b7:f4:23:c8:fe:f8:d7:
                    76:5b:eb:19:45:41:ba:39:bc:45:2a:65:40:e7:a7:
                    6a:8b:d3:c6:46:17:f4:9c:e9:24:87:eb:e4:06:5b:
                    d5:e4:20:eb:b4:5f:e6:f2:ed:db:54:1b:4c:f5:4d:
                    5e:1f:73:60:4b:f7:8e:4c:b7:7e:0a:e6:0d:a9:c3:
                    fa:00:7e:81:5b:e0:36:80:da:83:5e:51:ca:df:2f:
                    6e:8c:94:9b:32:7e:4c:95:23:02:9d:10:32:18:fb:
                    83:32:40:41:6e:f1:97:91:af:e8:98:11:90:50:39:
                    97:bd:18:1e:ce:69:ee:6e:73:47:35:61:4b:69:d7:
                    b3:21:0b:65:f4:de:0f:63:02:82:22:d9:99:5d:4b:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A1:D0:0D:E3:20:ED:9A:5A:C7:95:6C:E5:CA:74:84:05:6E:90:A2
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3234362e3232382e302f32322d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:45:55:c0:59:c0:3b:0e:93:d8:47:61:7d:a9:0b:6f:a2:
         b8:9c:aa:36:c7:91:18:f3:1f:f2:94:8b:6f:94:0c:ea:2d:64:
         ed:ad:ab:5f:9e:43:94:78:ab:36:08:be:1b:60:71:d0:05:7c:
         57:91:5a:1d:fd:cb:af:79:ec:50:1a:a3:7c:34:86:4d:7a:2f:
         0c:39:52:a1:16:32:37:7b:cb:f4:47:08:cd:37:99:65:07:04:
         cf:7e:85:80:aa:52:c9:c7:35:ce:7f:57:8e:5d:29:ad:be:5c:
         d3:e2:6d:58:6a:ef:12:9f:6c:73:0c:a2:ba:67:2d:9b:c0:21:
         2c:70:96:d2:6d:d4:d9:5e:57:64:8a:23:2b:55:fb:bc:4a:d5:
         1d:d0:fa:b9:2d:87:1d:05:3b:a3:71:eb:5f:1b:be:1c:84:16:
         0b:ef:46:bd:53:29:76:7e:3c:31:b8:af:85:09:c2:6f:9f:07:
         08:1f:f8:61:0b:ba:8c:51:a7:51:ed:da:07:e6:37:4c:7b:9a:
         cd:ff:7f:d4:f7:5e:20:69:b6:4a:db:59:9d:b4:e9:b6:d6:3c:
         28:ad:f6:b6:2f:4c:ed:42:48:2d:76:34:2b:57:ab:d3:94:81:
         87:96:6d:2e:4b:f0:64:c1:5c:85:bb:4e:f7:52:3b:58:0b:a5:
         b3:18:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org