Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3234203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32322d3234203d3e20323635303836.roa (raw, json)
Hash identifier:          3WiS0tf1eNuzYdiitMGeiLamM+MBY56ug7BpcxWaisU=
Subject key identifier:   E3:DB:13:66:FE:10:D9:37:E5:2A:90:07:CE:5A:5F:4C:E4:87:90:97
Certificate issuer:       /CN=50497439D51FAF0FA48E52A17FE5D631143E8C3A
Certificate serial:       2B113C3188E16D9D2C86FD42BDE87DF4892A2F4C
Authority key identifier: 50:49:74:39:D5:1F:AF:0F:A4:8E:52:A1:7F:E5:D6:31:14:3E:8C:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3234203d3e20323635303836.roa
Signing time:             Wed 18 Aug 2021 15:10:00 +0000
ROA not before:           Wed 18 Aug 2021 15:05:00 +0000
ROA not after:            Wed 17 Aug 2022 15:10:00 +0000
asID:                     265086
IP address blocks:        170.233.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:3c:31:88:e1:6d:9d:2c:86:fd:42:bd:e8:7d:f4:89:2a:2f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50497439D51FAF0FA48E52A17FE5D631143E8C3A
        Validity
            Not Before: Aug 18 15:05:00 2021 GMT
            Not After : Aug 17 15:10:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c2:9a:d0:1d:8c:a3:9c:da:11:a5:2b:76:68:
                    3e:f4:14:0e:f0:5d:0b:f4:31:8d:57:bd:f2:07:68:
                    47:1f:d6:ff:11:74:7e:6a:79:a4:af:25:dd:63:32:
                    39:86:bb:3d:2b:68:71:32:60:8d:dc:6a:76:0c:ea:
                    2e:72:4b:b4:40:48:b0:86:42:03:9d:a3:bb:04:68:
                    c2:a0:33:2a:69:a6:d6:76:1e:63:3a:6f:08:27:26:
                    a4:fb:96:d5:9c:f4:75:a6:a3:b8:05:c5:a8:e0:c0:
                    d1:1a:07:9b:a2:44:c9:f6:20:e1:60:93:b7:35:f6:
                    19:5f:0a:9f:4d:da:19:4c:b9:5f:35:2d:1d:95:5b:
                    da:ee:cd:dc:04:2b:00:d0:18:e4:b5:a0:84:2e:b8:
                    d1:87:af:3c:7e:71:6a:7b:9a:d7:86:68:d0:e8:b1:
                    09:0c:82:2b:0e:31:7f:9d:40:73:ff:0a:4c:7c:6d:
                    9b:22:af:d8:5e:df:0f:d3:0b:dd:34:e5:22:c5:53:
                    04:94:00:d7:da:e2:89:bc:d6:3e:bb:12:9b:46:3b:
                    bd:e8:e6:1b:dd:59:8c:d6:8a:82:8e:90:c0:b9:f1:
                    e6:89:8a:17:ab:94:d7:89:8e:aa:a3:30:91:81:ff:
                    a7:95:27:8c:54:bd:d6:d5:5a:c5:f4:2c:fb:51:d2:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:13:66:FE:10:D9:37:E5:2A:90:07:CE:5A:5F:4C:E4:87:90:97
            X509v3 Authority Key Identifier:
                keyid:50:49:74:39:D5:1F:AF:0F:A4:8E:52:A1:7F:E5:D6:31:14:3E:8C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3234203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:27:b6:e8:fb:c6:0f:13:00:9e:2d:04:ca:37:f1:79:ba:
         3c:14:36:1e:6f:93:7a:b5:4a:0c:f2:84:54:2b:8b:15:0f:ba:
         f2:31:31:5d:53:cc:78:3e:c5:da:73:cd:9a:1c:7a:cb:2f:57:
         a8:62:e0:c8:09:c3:27:84:29:bf:2b:4d:49:25:ea:2f:7e:c3:
         51:35:c8:fc:c7:89:9c:c6:c6:ab:dd:67:31:bd:03:28:71:12:
         2e:21:00:b4:c9:c0:b3:8a:23:a7:5e:7f:49:44:ef:f0:c3:34:
         dd:f2:1b:21:3c:66:72:9c:a1:9b:d8:ab:e1:84:4f:19:cd:a2:
         cf:61:7f:2a:37:19:25:32:e4:f2:7c:38:20:03:e2:96:44:6e:
         cb:62:5d:fa:0d:4b:05:73:60:39:0a:0d:52:80:7e:ff:f3:23:
         78:c4:76:1c:d9:10:5f:fd:82:f1:51:7a:95:9a:e3:69:fd:94:
         20:8c:60:c8:95:3d:56:a0:af:d3:53:a8:9a:01:a0:ae:4c:44:
         65:e4:87:d8:50:2e:78:da:26:c9:10:c2:ee:89:27:74:a0:17:
         60:45:66:0f:3d:02:e2:57:93:73:c5:29:2a:30:4f:91:0a:7e:
         c2:b8:29:4a:c5:bf:6c:23:b2:54:62:df:2f:b3:cd:88:9e:30:
         fd:9f:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org