Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/1/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa
File:                     3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (raw, json)
Hash identifier:          eL6WPGNyB6ydRvEr5uYkbFN1jlv/4EjT7+jXD7f0+uQ=
Subject key identifier:   19:FB:5F:AB:BA:92:4B:4F:EE:82:EE:32:AE:0D:18:A2:F3:6E:06:57
Certificate issuer:       /CN=F581FD1729A74DC34DE163472F5CF41EDA1D2498
Certificate serial:       0358F7E63FEBB65FA9DA7F91229AB298BEA08B7E
Authority key identifier: F5:81:FD:17:29:A7:4D:C3:4D:E1:63:47:2F:5C:F4:1E:DA:1D:24:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F581FD1729A74DC34DE163472F5CF41EDA1D2498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/1/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa
Signing time:             Thu 04 Apr 2024 20:23:20 +0000
ROA not before:           Thu 04 Apr 2024 20:18:20 +0000
ROA not after:            Thu 03 Apr 2025 20:23:20 +0000
asID:                     266376
IP address blocks:        170.80.112.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:58:f7:e6:3f:eb:b6:5f:a9:da:7f:91:22:9a:b2:98:be:a0:8b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F581FD1729A74DC34DE163472F5CF41EDA1D2498
        Validity
            Not Before: Apr  4 20:18:20 2024 GMT
            Not After : Apr  3 20:23:20 2025 GMT
        Subject: CN=19FB5FABBA924B4FEE82EE32AE0D18A2F36E0657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:15:41:19:86:58:40:e1:3e:2b:e0:98:c6:
                    97:88:50:35:da:8e:46:90:2b:91:cd:57:d5:71:43:
                    18:d4:24:6c:c2:ef:13:71:c3:94:51:69:5e:c4:b1:
                    8f:d7:a1:d1:29:8f:8c:25:07:9d:58:2b:7e:61:f4:
                    a6:cb:eb:d5:87:02:0f:73:6e:1e:17:94:e2:0c:35:
                    24:04:d7:33:e7:d9:10:f0:12:3b:10:77:d6:c2:75:
                    b4:a4:9c:15:52:47:f6:23:6f:9b:c5:65:f6:68:57:
                    62:16:56:20:74:19:e1:c4:63:bb:83:2e:8a:41:fb:
                    41:44:27:4a:a4:95:fe:c3:af:0f:b5:ef:60:7b:b5:
                    5d:1f:97:25:a4:ff:46:26:45:eb:61:28:57:59:23:
                    18:8a:a1:05:fe:c6:3b:79:91:b8:83:85:cc:da:64:
                    e7:0f:76:7a:3a:d8:01:ae:10:34:e8:b1:7a:f0:81:
                    31:63:5d:b4:a4:b5:43:45:43:af:70:70:bd:18:7c:
                    b3:f4:da:52:76:88:7c:0e:49:8c:e8:a3:7b:ad:0d:
                    86:4a:c0:b2:d2:f9:04:94:cd:06:7d:ec:26:e4:19:
                    7f:36:f8:14:4b:e6:7f:93:53:b7:61:32:34:fa:6e:
                    7c:8a:76:1e:07:88:3c:a6:5e:3d:2f:9b:b3:d7:c2:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:5F:AB:BA:92:4B:4F:EE:82:EE:32:AE:0D:18:A2:F3:6E:06:57
            X509v3 Authority Key Identifier:
                keyid:F5:81:FD:17:29:A7:4D:C3:4D:E1:63:47:2F:5C:F4:1E:DA:1D:24:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/1/F581FD1729A74DC34DE163472F5CF41EDA1D2498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F581FD1729A74DC34DE163472F5CF41EDA1D2498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/1/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:d7:2c:d9:bf:a0:08:05:b3:91:a1:c2:16:dd:36:9b:45:
         d5:f8:cd:cb:0f:cd:33:8a:46:4e:65:6d:02:19:4d:1e:2a:d3:
         71:cc:78:e6:59:8f:d9:ed:30:1e:cf:a3:a4:9e:4b:0c:70:99:
         cb:f0:6d:f8:f1:ed:db:79:ac:e8:f1:7f:c2:67:1d:27:d3:a2:
         12:0a:f4:45:31:05:67:9d:f6:07:09:90:4f:7e:83:e5:54:a7:
         9e:75:de:90:da:aa:bb:c7:53:8e:b6:6c:3b:35:08:1e:2c:53:
         f6:d6:8c:3f:7e:cf:de:7c:6f:bc:66:9a:52:b6:f8:f9:0a:49:
         a9:82:1b:a3:a8:8c:b1:7b:67:04:cb:99:da:9e:01:44:98:68:
         d6:2b:0c:54:ac:a1:42:a8:b1:ae:cf:dc:e3:da:0c:7a:38:43:
         2c:9d:3a:cc:6c:a5:4c:81:30:43:7f:9b:1b:d8:11:a6:b0:af:
         5f:91:48:2d:e0:06:6d:fe:9c:44:a4:07:23:24:b9:1d:66:b3:
         55:df:a3:5a:6d:3f:8d:c4:9b:0f:a2:20:52:42:ce:e2:65:ee:
         dd:51:8b:5f:5f:48:94:06:b0:c8:f3:dd:8a:69:3b:5c:44:20:
         c7:bd:3d:71:69:57:00:06:ae:f4:89:d6:15:e0:df:31:65:50:
         e6:86:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org