Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32322d3232203d3e20323635313030.roa
File:                     3137302e3235342e38302e302f32322d3232203d3e20323635313030.roa (raw, json)
Hash identifier:          uBbBx6gzRlBNKiXr2ir76TQesNd5SsfdUwPjS0DgMkQ=
Subject key identifier:   A9:4B:24:62:50:52:EF:85:C3:1B:5C:0B:FE:DD:1F:C4:9B:3F:2C:A4
Certificate issuer:       /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial:       323A0BB3A86095E1AC24E21EEDD74F566E6C5A54
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32322d3232203d3e20323635313030.roa
Signing time:             Tue 21 Mar 2023 15:00:00 +0000
ROA not before:           Tue 21 Mar 2023 14:55:00 +0000
ROA not after:            Tue 19 Mar 2024 15:00:00 +0000
asID:                     265100
IP address blocks:        170.254.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3a:0b:b3:a8:60:95:e1:ac:24:e2:1e:ed:d7:4f:56:6e:6c:5a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
        Validity
            Not Before: Mar 21 14:55:00 2023 GMT
            Not After : Mar 19 15:00:00 2024 GMT
        Subject: CN=A94B24625052EF85C31B5C0BFEDD1FC49B3F2CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:c5:1d:fa:82:06:20:ca:a4:51:0b:9e:7e:
                    92:22:d7:2a:6e:f8:86:2a:94:84:a9:61:65:5f:bd:
                    00:59:ef:f6:17:e6:ac:01:7f:9c:a5:31:7e:08:36:
                    57:c7:64:b3:f2:37:4c:99:30:a2:09:cf:5d:08:f9:
                    e4:4f:5b:14:0a:8c:e6:2a:05:0d:7e:27:60:c3:d5:
                    7f:ea:43:7f:82:5b:20:e3:26:1a:50:94:c3:b9:56:
                    6f:70:8d:ed:f1:90:c9:1c:d5:b3:48:05:60:90:90:
                    fe:ce:8a:4d:a6:9b:7d:06:de:92:f7:55:1c:08:b5:
                    60:30:41:7d:d3:0a:77:f3:b8:ad:7a:d6:3b:b5:8a:
                    4a:f0:87:40:4c:a5:9e:db:84:c2:44:a8:d7:a5:de:
                    4c:18:13:1f:78:7b:28:fb:dc:88:f5:38:ae:30:7a:
                    ef:c0:dd:37:90:f1:54:87:ec:de:8c:b5:9f:68:fd:
                    94:32:a8:e8:2f:20:82:11:28:07:aa:cf:98:b8:e6:
                    13:11:82:76:90:69:37:b0:45:c0:cb:25:d0:07:4f:
                    02:f4:16:9c:1a:b6:31:00:e8:aa:fe:0d:c1:d1:48:
                    2f:29:9e:f4:de:b0:68:b9:9d:95:22:f8:a1:76:67:
                    39:a4:1c:63:9e:e0:59:36:78:1c:53:29:ff:f4:64:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:24:62:50:52:EF:85:C3:1B:5C:0B:FE:DD:1F:C4:9B:3F:2C:A4
            X509v3 Authority Key Identifier:
                keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38302e302f32322d3232203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:ec:48:52:1c:dc:9d:f8:72:d4:d8:33:b0:a6:ec:27:d6:
         a3:d4:2c:27:a8:cc:53:bd:fd:2c:e0:3b:ee:25:4a:6b:f0:fa:
         73:34:33:08:23:47:02:5c:5c:b7:50:e4:be:75:d8:cf:12:17:
         20:fe:4b:0c:87:cd:00:f3:8c:f9:28:c8:6d:f0:77:b4:30:70:
         d2:b2:6e:d2:a4:01:8e:d1:fa:43:84:dc:de:7b:a4:6e:26:09:
         e9:c4:4f:86:2b:0e:4d:47:6a:f1:fd:0d:a9:ff:66:ef:5e:2d:
         7f:5e:c1:66:bb:20:90:c0:1b:92:7e:a9:01:5b:78:92:1b:d8:
         b6:9a:c3:9e:ec:e6:0d:5e:1a:88:80:ce:72:3a:76:f7:07:c8:
         1d:41:19:5b:45:33:6c:28:6e:53:c7:ad:2b:62:62:22:c0:46:
         4e:c0:b0:38:e3:f8:81:24:69:96:02:9d:48:42:6a:86:d5:2c:
         b5:5e:28:c3:cf:4b:a4:74:4d:fd:d4:fb:d6:6a:06:fd:17:23:
         47:42:37:5b:b6:94:fa:1d:9b:be:8a:44:4c:0e:b8:04:fc:47:
         ef:f3:6b:16:43:80:c7:ed:e4:66:13:5d:de:cb:91:f3:1d:6d:
         6a:cd:19:ef:1d:85:a4:1f:ef:70:67:04:a0:9b:eb:91:c4:fb:
         88:df:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org