Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3234203d3e20323634353234.roa
File:                     3137302e3234372e33362e302f32322d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          JKNAcJWP7238Fn9zFscjDB0x509YMBlIUyYF6BUG84M=
Subject key identifier:   85:3C:6D:7F:BD:D9:CD:9E:B9:56:6D:A5:4E:A9:CE:54:8C:EE:B0:72
Certificate issuer:       /CN=BAFB33D9061B33CAA164C814D099857A153B7E40
Certificate serial:       26E7AB678DBC1CE0482D030888E03A7D30294735
Authority key identifier: BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAFB33D9061B33CAA164C814D099857A153B7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3234203d3e20323634353234.roa
Signing time:             Mon 13 Jun 2022 23:51:16 +0000
ROA not before:           Mon 13 Jun 2022 23:46:16 +0000
ROA not after:            Mon 12 Jun 2023 23:51:16 +0000
asID:                     264524
IP address blocks:        170.247.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e7:ab:67:8d:bc:1c:e0:48:2d:03:08:88:e0:3a:7d:30:29:47:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFB33D9061B33CAA164C814D099857A153B7E40
        Validity
            Not Before: Jun 13 23:46:16 2022 GMT
            Not After : Jun 12 23:51:16 2023 GMT
        Subject: CN=853C6D7FBDD9CD9EB9566DA54EA9CE548CEEB072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:78:39:0f:91:0b:1e:f8:e7:d5:df:69:a6:
                    51:6a:93:c7:34:96:86:42:ec:ab:09:c7:ca:a5:b7:
                    2b:15:61:84:37:8b:50:bd:b4:e4:47:37:e9:37:a4:
                    11:6c:9b:56:43:3d:3e:49:60:c7:8a:46:5a:3e:32:
                    54:63:73:7e:79:ac:14:92:9d:47:a0:74:2c:9b:63:
                    bc:ff:a6:e9:0a:1a:11:62:a7:05:6c:37:2d:9d:93:
                    ee:bd:75:81:ab:07:d9:6e:31:96:ee:17:53:dd:1a:
                    18:cb:86:cd:ad:a4:57:82:a3:7f:a3:fd:31:22:10:
                    af:6d:d2:b1:72:f0:33:10:99:c8:85:a9:3b:06:04:
                    1b:25:c3:7a:fd:80:2b:14:80:47:f6:40:f3:09:4f:
                    70:bb:ba:66:73:f2:86:8e:49:29:e8:3a:0d:ad:ac:
                    a6:b0:aa:11:b3:ad:75:f5:bc:28:ba:bf:4b:40:b4:
                    d7:e5:ba:68:44:a6:c4:7c:f0:02:25:ea:c2:a7:4b:
                    38:4f:83:89:d8:4d:8c:28:15:4f:02:ae:a8:11:28:
                    67:cb:9e:95:d3:1c:c9:e5:da:a4:4f:af:a3:85:c6:
                    7b:4b:46:39:cf:88:88:ac:68:29:0d:f0:72:69:92:
                    fc:f4:20:e8:c6:74:42:81:0d:7b:de:c6:b9:de:f8:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:6D:7F:BD:D9:CD:9E:B9:56:6D:A5:4E:A9:CE:54:8C:EE:B0:72
            X509v3 Authority Key Identifier:
                keyid:BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/BAFB33D9061B33CAA164C814D099857A153B7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAFB33D9061B33CAA164C814D099857A153B7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33362e302f32322d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:18:13:68:b4:7a:50:3e:d8:5d:84:78:99:7c:77:5b:54:96:
         cf:28:aa:4c:8c:e2:a1:86:0c:30:96:37:e0:06:10:25:02:4d:
         0a:23:3e:56:df:06:45:58:a2:aa:a0:53:85:b8:c5:18:48:12:
         7a:98:0a:cc:51:2b:e7:6a:6e:14:b8:5b:f9:10:2f:5d:11:ed:
         c8:fb:17:13:92:ca:d2:d4:f2:b0:cb:75:7a:51:22:4a:18:f0:
         5b:92:ec:86:fc:3a:60:ba:05:a0:46:53:c6:e7:7a:89:ff:d2:
         3b:25:60:c6:ae:54:2d:d2:e1:6b:5d:8d:2e:b8:83:0d:fe:9b:
         a2:45:7b:0d:65:3b:3b:68:3b:56:f7:89:f6:7a:64:db:93:b3:
         c4:74:1b:fc:23:85:f3:2d:bb:1c:1c:1e:40:c9:41:34:0b:e6:
         00:04:02:84:0d:f0:69:9c:cf:34:c1:f5:7e:58:d3:50:9d:1a:
         22:dd:d2:5a:f9:19:60:39:e6:39:f6:7a:98:23:00:d9:8a:6a:
         f4:fe:77:68:01:1b:60:f9:d3:ec:09:b7:94:5f:ca:7a:44:3b:
         4e:f8:f0:9e:f3:28:d2:ee:7f:9c:c0:d3:ef:07:85:54:d6:87:
         fd:42:28:ef:4a:21:33:16:b9:08:b7:b1:74:57:f7:a3:02:ad:
         72:cd:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org