Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
File:                     3137302e38322e37322e302f32322d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          wnTI1d0sz1l0bvin+ItQeSqphynmezbuh7HG6W/tPd8=
Subject key identifier:   83:0D:E0:1E:40:AF:42:47:CF:47:DF:5F:77:89:96:38:D0:B4:AC:BD
Certificate issuer:       /CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
Certificate serial:       04A8EAD751549A26530ED41D4EDD9EDC4E1A23F4
Authority key identifier: FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
Signing time:             Tue 30 Jan 2024 14:21:39 +0000
ROA not before:           Tue 30 Jan 2024 14:16:39 +0000
ROA not after:            Tue 28 Jan 2025 14:21:39 +0000
asID:                     262569
IP address blocks:        170.82.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a8:ea:d7:51:54:9a:26:53:0e:d4:1d:4e:dd:9e:dc:4e:1a:23:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
        Validity
            Not Before: Jan 30 14:16:39 2024 GMT
            Not After : Jan 28 14:21:39 2025 GMT
        Subject: CN=830DE01E40AF4247CF47DF5F77899638D0B4ACBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:28:3e:fb:c2:1c:c0:c6:df:21:a8:66:07:
                    5d:45:3a:4e:72:ff:30:67:46:20:41:4a:bb:7f:3b:
                    65:39:be:88:64:b2:e1:1b:f0:fa:bc:e8:4b:b0:dc:
                    5d:82:47:59:87:a4:bf:df:a6:1e:b3:ea:49:e8:13:
                    7f:2e:f3:18:9b:8f:ce:10:3b:a4:f5:ad:ec:ca:80:
                    4f:b1:3e:8a:38:6a:5c:86:3a:cb:9a:d6:80:77:c5:
                    5e:ff:63:9a:82:ff:99:05:ba:58:ba:7a:ba:9e:be:
                    fa:fc:6b:33:ba:af:09:25:0d:c8:97:16:ca:37:2d:
                    fa:59:34:c5:e2:de:70:93:33:51:7b:3d:e7:7e:f5:
                    2b:7c:59:83:0c:3d:00:20:c7:3e:b7:cd:49:59:94:
                    ae:c5:ec:8f:d2:ab:14:97:87:47:80:f6:51:a8:b8:
                    49:a6:64:bf:d3:32:8f:17:ea:e5:c7:ef:dc:6b:6b:
                    24:08:04:32:6d:8d:90:a2:7f:0d:1a:50:89:01:50:
                    de:7c:e1:53:cb:70:d5:14:47:2f:09:cb:80:2b:e9:
                    4f:8f:fd:26:de:70:11:87:ed:d8:38:eb:a8:9d:f7:
                    93:25:53:81:54:07:04:40:af:43:94:d4:4f:7d:5b:
                    71:c1:a9:2c:b5:36:7f:38:be:99:ea:34:e6:de:c3:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0D:E0:1E:40:AF:42:47:CF:47:DF:5F:77:89:96:38:D0:B4:AC:BD
            X509v3 Authority Key Identifier:
                keyid:FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:65:54:df:d3:cc:82:d6:3b:7b:4e:84:69:88:59:89:f6:
         4a:cd:38:03:02:7e:9e:53:1f:94:5e:c5:dc:76:c6:a5:b1:d0:
         60:c3:10:03:d4:9e:f5:17:47:22:18:93:45:a8:13:fd:90:e2:
         b3:f9:c1:a5:fc:91:42:07:13:c9:cb:8b:00:59:a6:75:9a:ab:
         a0:6c:a9:c2:b3:e1:7a:a4:90:d7:e5:85:45:7a:a7:a4:39:8f:
         3a:91:2a:77:b7:73:0b:a7:bb:d3:9d:d2:fe:79:fe:14:dc:0e:
         65:c7:ec:08:5d:ff:1c:97:c2:79:7e:6b:26:54:d5:76:ae:ec:
         d9:5b:cd:b5:03:ca:ad:fd:66:f3:ee:a8:19:7a:f7:05:6a:2c:
         32:0e:82:62:dd:b9:68:d3:b0:4d:d1:db:ba:67:8f:23:05:bb:
         11:df:ac:ee:4d:d1:17:53:22:1e:cd:74:17:a9:4e:fd:1e:d8:
         c0:da:55:2c:c4:48:a3:e1:70:ca:43:54:3a:3b:66:96:86:12:
         9e:cd:d0:3b:6b:13:00:d4:58:84:4b:a9:1b:20:a6:96:84:09:
         17:93:b3:b8:29:c8:0c:5a:f5:52:e3:fa:d0:18:24:bd:24:55:
         44:14:27:eb:69:1d:56:ee:f9:2a:c2:8a:78:cc:4d:38:f2:b0:
         4d:0b:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org