Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3332203d3e20323635313131.roa
File:                     3137302e3235342e3139322e302f32322d3332203d3e20323635313131.roa (raw, json)
Hash identifier:          +2x46gmNdulIMwJYwWAmDG0lV0uGif6m/yYhkRwXElw=
Subject key identifier:   0E:E3:21:A9:12:8B:04:AA:5D:62:BD:A2:03:C9:8C:C7:7A:FF:AD:67
Certificate issuer:       /CN=DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8
Certificate serial:       50EBA6F5B5AD82F2D0F77634ACD223F19C3C013D
Authority key identifier: DC:ED:C4:F6:28:0E:E1:FA:43:8B:6E:B1:8E:35:59:AD:FF:A2:59:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3332203d3e20323635313131.roa
Signing time:             Mon 17 Apr 2023 23:17:23 +0000
ROA not before:           Mon 17 Apr 2023 23:12:23 +0000
ROA not after:            Mon 15 Apr 2024 23:17:23 +0000
asID:                     265111
IP address blocks:        170.254.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:eb:a6:f5:b5:ad:82:f2:d0:f7:76:34:ac:d2:23:f1:9c:3c:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8
        Validity
            Not Before: Apr 17 23:12:23 2023 GMT
            Not After : Apr 15 23:17:23 2024 GMT
        Subject: CN=0EE321A9128B04AA5D62BDA203C98CC77AFFAD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1e:5c:4c:97:b6:05:09:16:fe:e1:ba:91:b2:
                    1b:31:d1:90:2f:5e:59:16:64:a7:5d:fe:26:df:21:
                    41:0e:13:46:f9:4e:30:61:ad:fa:ed:5a:98:c2:1d:
                    9b:ca:c9:bb:07:c5:40:d3:a3:01:85:ac:5b:0d:96:
                    cb:bb:3d:a2:0a:1d:4f:43:d3:5c:e1:0f:99:fa:9c:
                    2b:3e:45:b1:1e:65:2f:57:06:64:57:ef:61:6b:f9:
                    44:74:7b:58:9a:e1:f7:37:66:dd:ed:e5:e2:89:72:
                    c2:9f:67:ae:07:9e:f0:39:b1:d9:82:9c:cf:e7:45:
                    64:b9:c6:3b:00:13:ba:c1:9e:2d:4b:f6:d5:a2:a5:
                    2a:54:f6:46:f1:9e:93:41:b8:8a:e9:f0:f6:87:55:
                    7f:5c:5b:4f:46:4b:62:a9:af:a1:c4:2d:32:57:cb:
                    d9:25:23:32:9c:fc:a9:59:f7:7c:d9:c7:20:fa:9b:
                    75:9e:7d:e1:a8:90:0f:eb:07:e6:74:0c:07:24:3f:
                    d4:6e:db:6b:92:dc:99:06:c3:9b:5a:d6:2a:4a:6d:
                    81:f8:dd:cf:48:72:c7:6d:2e:54:07:cb:7b:96:41:
                    b3:46:7b:9f:6f:32:ba:88:8a:bd:b9:00:45:34:6c:
                    bf:0c:c6:23:6e:6c:98:de:7a:ad:3c:69:88:8c:8b:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:21:A9:12:8B:04:AA:5D:62:BD:A2:03:C9:8C:C7:7A:FF:AD:67
            X509v3 Authority Key Identifier:
                keyid:DC:ED:C4:F6:28:0E:E1:FA:43:8B:6E:B1:8E:35:59:AD:FF:A2:59:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEDC4F6280EE1FA438B6EB18E3559ADFFA259B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3332203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:54:b6:8f:dd:46:2b:52:83:1d:89:fe:92:7e:75:11:62:
         d7:d2:51:e3:6b:a6:8b:cf:d7:7a:ea:a0:e3:69:61:2e:ec:d1:
         98:eb:83:12:32:a1:7f:d5:e6:8e:51:93:86:6b:94:76:6b:b8:
         e6:81:f3:8d:64:3d:72:5b:4b:05:c9:20:45:b3:04:56:53:be:
         2f:11:f1:94:61:3f:b0:81:08:19:56:dd:02:e1:79:02:de:80:
         f4:ab:35:a9:61:80:97:67:72:5c:fe:24:70:dc:99:fb:30:13:
         95:ba:60:ee:b4:e2:a8:86:6d:92:c5:00:3e:1c:a7:23:3a:92:
         b9:b8:98:13:12:36:14:1d:f4:cf:cd:a4:7e:94:3e:ce:59:1f:
         a4:1f:87:f9:08:04:27:eb:4b:4e:a9:4f:89:01:ee:d5:d7:3a:
         9e:79:5d:d0:92:e4:b4:28:34:2d:c4:65:92:2d:4a:10:a8:8c:
         0a:ed:f6:2e:ef:9c:0c:ff:f6:5e:77:73:56:1a:c8:47:9f:41:
         46:40:10:d4:1d:35:9d:d0:c4:55:6c:cd:d6:76:d5:32:d1:d1:
         41:f4:32:82:02:bd:6b:36:41:01:27:d1:b7:5a:38:59:46:9f:
         3b:a3:8e:39:ca:30:80:5e:71:00:72:eb:f7:c1:c3:20:19:c0:
         6e:14:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org