Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa
File:                     3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa (raw, json)
Hash identifier:          FUShftX7NFgCKLtaIaQU5fE5r875tnJZ1JXIsIDWGLI=
Subject key identifier:   A3:E7:4D:D5:46:CC:F7:FD:29:7C:10:AE:C1:A0:17:A8:2D:5E:87:06
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       56D562D4226C2A7DF89428AE4CF601FD25A31E0B
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        170.247.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:62:d4:22:6c:2a:7d:f8:94:28:ae:4c:f6:01:fd:25:a3:1e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=A3E74DD546CCF7FD297C10AEC1A017A82D5E8706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:81:c8:04:21:37:ed:f4:c4:fe:61:ed:52:
                    4b:37:0f:4e:8d:d5:58:3e:ad:93:30:ac:c6:e5:be:
                    97:5c:00:90:e9:ae:ab:ae:4e:20:63:a1:55:3c:09:
                    d8:dc:03:0b:db:32:12:a9:b3:49:90:e2:ca:bb:f2:
                    4a:2f:8b:f4:8a:4b:2f:d9:41:9f:51:74:cd:dd:72:
                    fd:e6:9f:31:7c:ca:4c:0b:a0:1e:ae:43:45:da:8e:
                    82:5e:16:6c:3d:79:97:d9:68:2a:6b:25:95:1d:7b:
                    83:51:8a:ed:cb:d4:4d:48:e2:ae:60:34:7e:f4:8c:
                    05:d0:f2:54:e6:c3:c5:5b:b9:3f:1c:65:78:dc:f1:
                    85:f5:6d:e5:09:60:32:f0:45:79:20:31:a0:a9:4b:
                    6e:df:27:28:0f:60:cf:58:25:6a:48:90:c7:61:fb:
                    52:61:19:85:d6:d7:0d:72:72:75:fb:08:5b:a4:1b:
                    89:22:5f:f3:e2:19:b3:f9:b8:62:3b:6c:8b:37:37:
                    65:44:3f:4d:05:0c:a7:e2:dc:01:b0:ab:64:1b:5a:
                    f4:8a:14:50:60:91:85:5f:15:68:1e:53:ae:83:33:
                    45:cb:41:73:65:38:19:1a:96:85:7e:7e:91:00:13:
                    53:2f:3f:3c:8f:cd:1e:53:be:60:4b:56:cd:d3:af:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:4D:D5:46:CC:F7:FD:29:7C:10:AE:C1:A0:17:A8:2D:5E:87:06
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:db:12:de:92:a7:4e:9b:11:03:8b:91:da:01:f0:bb:9b:
         ca:ef:02:b9:bd:53:06:2a:c1:55:2c:cf:d9:3e:0c:b4:57:27:
         16:1b:49:9e:df:f9:a2:f0:07:47:02:41:dc:e9:c1:b6:2b:89:
         e3:62:d5:e9:9e:10:0e:b0:60:92:46:81:c2:12:c9:5c:61:19:
         e6:47:c3:46:26:21:44:aa:bd:10:70:85:ef:f7:08:9a:bf:c9:
         f6:05:0a:c8:38:4f:da:b5:a0:3d:03:05:d9:fb:35:36:42:f3:
         13:09:f8:13:73:df:74:74:fb:b0:18:8c:e1:48:3e:59:28:fc:
         10:81:01:4b:0f:31:67:b2:ff:ea:b9:f1:19:65:fa:08:86:23:
         05:3f:e5:11:6d:95:d6:55:7a:26:eb:d7:ae:98:cf:5e:9b:76:
         1d:66:f2:f1:2a:ce:2f:53:e4:3a:b4:8a:3f:cb:2e:ee:18:12:
         a8:c1:19:5e:6d:af:46:62:7b:6f:86:10:8e:23:60:74:0e:be:
         77:c6:58:e0:81:4f:7c:74:6c:e7:f9:75:a4:c3:f7:2b:06:0e:
         23:1f:9d:48:59:cf:30:10:b4:a8:17:28:51:f9:4d:f5:c0:25:
         4b:fa:c0:ad:ea:cf:db:f6:01:ce:a3:0a:2e:b0:2d:c2:76:04:
         d5:66:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org