Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/3137302e3234342e32302e302f32322d3232203d3e20323636343936.roa
File:                     3137302e3234342e32302e302f32322d3232203d3e20323636343936.roa (raw, json)
Hash identifier:          hkYHBOt+LwHC+0/noFPPulgGWg0UWY1mnPQQTxbmVXA=
Subject key identifier:   67:98:A5:A9:E7:C5:4E:76:27:AF:ED:4B:6C:79:C3:17:AF:94:50:10
Certificate issuer:       /CN=81308E19F000DE7D42EACA02CB40E08EFD5B36B0
Certificate serial:       0106D11DF9C08F507F242D5535BF072DB7386329
Authority key identifier: 81:30:8E:19:F0:00:DE:7D:42:EA:CA:02:CB:40:E0:8E:FD:5B:36:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/3137302e3234342e32302e302f32322d3232203d3e20323636343936.roa
Signing time:             Mon 25 Sep 2023 14:16:30 +0000
ROA not before:           Mon 25 Sep 2023 14:11:30 +0000
ROA not after:            Mon 23 Sep 2024 14:16:30 +0000
asID:                     266496
IP address blocks:        170.244.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:d1:1d:f9:c0:8f:50:7f:24:2d:55:35:bf:07:2d:b7:38:63:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81308E19F000DE7D42EACA02CB40E08EFD5B36B0
        Validity
            Not Before: Sep 25 14:11:30 2023 GMT
            Not After : Sep 23 14:16:30 2024 GMT
        Subject: CN=6798A5A9E7C54E7627AFED4B6C79C317AF945010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:9d:e4:a4:5a:82:a6:bd:b6:84:d0:3c:a0:
                    28:87:4e:9c:00:92:3b:8a:43:8d:29:04:50:15:20:
                    6a:fd:45:2a:96:7c:8b:6b:55:a0:09:45:2e:21:6f:
                    fd:49:eb:e4:b7:e4:0c:ed:7e:bc:5e:43:33:9c:3d:
                    4f:6f:7b:a5:03:03:b6:8d:84:27:3a:75:1d:0a:2b:
                    da:93:d9:9b:f1:29:f1:20:87:47:0d:4e:48:d1:8e:
                    8b:26:fa:ec:d8:7d:4f:28:85:f1:8b:38:8f:28:c3:
                    01:d4:94:2d:39:0b:cd:cb:84:fc:26:55:13:d7:78:
                    4f:1d:ad:bc:5a:a9:2c:4b:23:2d:4a:23:ad:57:32:
                    cb:8c:e6:e6:97:38:1c:c0:aa:63:23:a6:a6:f0:9b:
                    a1:d6:32:11:c8:9e:ea:3b:d1:b9:c8:86:3b:9d:0d:
                    12:53:2b:b5:dd:11:95:31:c6:14:c8:ad:98:8e:46:
                    fd:f2:29:02:d8:a5:dd:6c:fa:84:6d:07:9e:b3:12:
                    85:01:9d:59:52:26:66:ad:e0:88:7a:ad:7a:25:0a:
                    34:bc:10:e8:de:bb:9e:0e:ef:46:53:77:f2:60:25:
                    a7:19:2f:71:e8:a0:2f:35:bc:36:98:7d:31:2d:5a:
                    c7:14:00:5f:a8:1e:43:17:64:9a:38:b2:6d:e9:d3:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:98:A5:A9:E7:C5:4E:76:27:AF:ED:4B:6C:79:C3:17:AF:94:50:10
            X509v3 Authority Key Identifier:
                keyid:81:30:8E:19:F0:00:DE:7D:42:EA:CA:02:CB:40:E0:8E:FD:5B:36:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/3137302e3234342e32302e302f32322d3232203d3e20323636343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:31:1d:b8:b5:e8:6d:fe:ee:c3:6c:a9:63:7f:d1:b0:37:4f:
         5a:4b:b3:05:50:0f:16:9a:90:e6:ba:00:de:24:ab:8b:93:f4:
         b2:3e:19:36:4f:13:2f:c8:db:80:83:90:56:b1:8f:f7:af:0d:
         ef:b2:8a:c7:47:5a:68:14:1c:46:ce:49:a7:ae:2a:23:ef:4b:
         e3:83:bf:6c:65:8d:d8:c4:83:02:4c:39:66:3f:79:88:75:a3:
         d2:e7:34:6c:56:4e:f9:13:e8:2e:a8:7f:ce:c6:52:c8:40:b2:
         34:70:ea:a6:60:43:4f:82:63:23:12:fa:27:bd:b1:a7:3e:68:
         cd:93:61:fc:1c:ff:44:ae:41:8c:45:dd:5e:ea:02:3f:b3:7b:
         04:18:20:94:d2:62:9e:c1:db:40:cd:19:c2:03:39:a9:e4:b6:
         fb:64:36:1f:e7:55:4e:5b:4f:69:fb:c2:24:05:3b:29:07:df:
         32:63:76:52:1a:39:e7:2e:db:bf:41:f2:59:0b:5e:cf:c7:f5:
         8b:53:c1:2d:b3:be:91:f2:b9:1d:46:62:b4:65:db:37:9d:dc:
         38:ae:57:ba:fd:9f:d1:32:e4:82:8a:94:2c:d7:dc:71:30:90:
         f2:d9:6c:e1:af:28:18:bd:71:3d:c1:17:7c:f6:7f:a0:e8:39:
         82:0f:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org