Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
File:                     3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa (raw, json)
Hash identifier:          9IvEDqQn/TPu1xQxBu3pKPmHkycDONXdUzx5kJGSyCo=
Subject key identifier:   A4:E3:71:3A:61:BD:F4:77:EC:9F:91:BE:72:4D:9C:3A:D9:EF:F9:C1
Certificate issuer:       /CN=2A8673F5BEDEE8D0805AF061319C022BF6F0A90C
Certificate serial:       392F11D1CAE3A0FBBAEC4E52549348325CBE6C47
Authority key identifier: 2A:86:73:F5:BE:DE:E8:D0:80:5A:F0:61:31:9C:02:2B:F6:F0:A9:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
Signing time:             Thu 22 Feb 2024 12:01:14 +0000
ROA not before:           Thu 22 Feb 2024 11:56:14 +0000
ROA not after:            Thu 20 Feb 2025 12:01:14 +0000
asID:                     266449
IP address blocks:        170.82.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2f:11:d1:ca:e3:a0:fb:ba:ec:4e:52:54:93:48:32:5c:be:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A8673F5BEDEE8D0805AF061319C022BF6F0A90C
        Validity
            Not Before: Feb 22 11:56:14 2024 GMT
            Not After : Feb 20 12:01:14 2025 GMT
        Subject: CN=A4E3713A61BDF477EC9F91BE724D9C3AD9EFF9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:42:80:31:ea:28:b6:2c:dd:90:37:d6:44:
                    06:f8:87:7c:24:64:2d:44:42:23:de:32:48:3e:99:
                    1c:42:c6:d2:87:fb:87:92:90:96:b1:1f:7f:6d:dc:
                    dd:4b:97:9a:a7:a2:d9:e2:4f:f0:12:6b:ec:62:1d:
                    3c:c9:b7:2b:87:b6:e0:65:97:24:fe:15:6f:88:d4:
                    89:ec:ca:31:1f:b4:49:ac:fe:7a:3c:5d:79:80:fd:
                    30:3d:20:f9:68:f5:4d:6f:0a:26:4e:5f:40:05:a6:
                    1e:c7:e0:45:cc:20:e5:42:ef:45:a9:1a:d4:7b:3c:
                    a5:a8:1c:49:b3:b2:8f:2b:2c:c6:da:5d:b6:de:e2:
                    e0:6a:23:8d:eb:cb:35:e5:86:90:99:66:36:2c:ec:
                    19:8b:32:92:ba:6d:f9:e1:fd:f7:69:2d:a3:31:d5:
                    4e:1a:29:f6:8a:04:31:b7:cf:06:94:e5:b8:1f:56:
                    02:18:88:10:ac:f6:80:65:77:bd:21:3d:00:0d:6b:
                    9e:73:0f:59:71:fa:48:e2:b3:af:d5:2d:9d:d9:66:
                    35:93:fd:c1:e7:a1:db:63:63:49:df:dd:e2:33:a6:
                    67:d9:ec:e9:e6:96:b9:06:45:e7:30:10:3b:2b:a6:
                    6e:e7:31:7c:53:50:79:9d:33:00:dc:a5:61:e5:f2:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:71:3A:61:BD:F4:77:EC:9F:91:BE:72:4D:9C:3A:D9:EF:F9:C1
            X509v3 Authority Key Identifier:
                keyid:2A:86:73:F5:BE:DE:E8:D0:80:5A:F0:61:31:9C:02:2B:F6:F0:A9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A8673F5BEDEE8D0805AF061319C022BF6F0A90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:27:9a:8f:6f:0a:3b:42:7b:93:f6:b5:2b:41:f1:45:5c:9a:
         3d:25:02:60:d0:7e:d0:20:d9:d2:6d:7d:20:6e:c5:3e:cb:33:
         c0:97:d3:e0:06:01:15:5d:a8:41:1d:60:f7:ee:a9:ec:41:3e:
         2c:c0:2f:fd:de:5d:d8:0d:99:be:01:41:3e:d9:f3:27:16:71:
         d7:cf:6e:ea:9a:bc:c9:22:ae:da:aa:19:6e:86:56:45:7a:c0:
         02:7f:d4:63:e9:f5:11:d0:5d:92:f1:04:32:9f:1f:7a:42:b4:
         c6:51:dd:23:58:3b:f0:5d:58:b0:ff:c4:51:9a:1c:14:fb:a5:
         af:ab:52:df:70:3c:af:73:f5:87:73:77:0f:e3:cd:90:59:e0:
         8f:6c:d5:7b:f7:80:22:96:0b:0a:d7:f8:f3:6e:1a:57:a4:4e:
         53:7f:b1:32:e6:02:14:e1:8b:22:ac:6d:f4:a7:a1:43:b4:b0:
         68:b7:e4:ee:53:49:c8:3f:9e:55:e6:20:6f:5a:16:81:97:f1:
         f6:f6:ef:73:76:3b:36:bf:51:8b:6d:62:b5:b6:10:34:2e:12:
         59:92:ec:5b:56:c9:16:d9:dd:c5:ad:05:c4:2e:2c:63:0f:c2:
         ec:e9:6e:35:f9:6a:a8:62:e9:50:86:76:04:cf:bc:02:e1:22:
         01:92:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org