Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32342d3234203d3e20323633303236.roa
File:                     3137302e38332e38302e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          gXW4BaNBZWrCqk7WykPGWMQ2Z4awcjplECPoILx4JSY=
Subject key identifier:   22:58:5C:38:AB:3F:79:3D:46:7D:63:22:4A:EB:4C:75:29:97:22:BA
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       5A06CDDA7C32433CC3635C8FE56093F8E547B10A
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:13:13 +0000
ROA not before:           Thu 30 Nov 2023 20:08:13 +0000
ROA not after:            Thu 28 Nov 2024 20:13:13 +0000
asID:                     263026
IP address blocks:        170.83.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:06:cd:da:7c:32:43:3c:c3:63:5c:8f:e5:60:93:f8:e5:47:b1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:08:13 2023 GMT
            Not After : Nov 28 20:13:13 2024 GMT
        Subject: CN=22585C38AB3F793D467D63224AEB4C75299722BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:22:9f:8f:a6:2f:45:4b:0e:d4:d9:33:81:
                    1b:9a:3c:2a:c8:36:22:52:f2:49:57:4d:20:80:ce:
                    cc:3d:80:c0:0d:e8:5c:e4:f2:ee:f5:b9:b2:d6:1d:
                    cc:19:ce:3a:af:42:9a:5d:4e:5b:46:41:1e:77:3b:
                    f9:6a:4a:af:c1:60:d4:cb:5a:94:52:b5:a1:bf:3c:
                    3d:65:82:d8:88:86:0c:3f:02:ed:24:48:c7:9b:b4:
                    2e:a4:9c:43:84:93:9b:5e:58:d8:7a:32:b6:36:b3:
                    73:00:27:e7:72:b7:aa:66:88:b7:7a:6b:07:80:5b:
                    b8:60:83:86:c3:8a:ed:12:10:ee:15:f5:fc:f7:23:
                    a3:89:50:fa:e0:d2:67:15:82:41:db:46:fd:9f:0a:
                    ec:84:ac:aa:21:e1:8e:66:a0:8a:9a:fc:d7:b1:08:
                    ac:ae:f1:d3:1b:fd:4e:56:f7:ab:ac:b3:c9:94:3f:
                    e1:b1:0c:da:e5:d6:e0:3d:da:72:97:81:c2:c1:38:
                    d5:d7:5f:5a:c1:a5:b4:41:40:96:ef:2d:dc:6a:25:
                    52:da:60:ca:04:f6:cf:5e:f8:3a:91:9d:15:ef:d3:
                    20:4a:dc:d7:0c:38:38:d7:69:07:2b:d4:7f:30:5d:
                    5d:a9:1c:f5:35:d0:5e:49:e5:1d:7d:15:84:7e:55:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:5C:38:AB:3F:79:3D:46:7D:63:22:4A:EB:4C:75:29:97:22:BA
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:25:1e:ea:1a:32:41:91:6d:b6:84:6b:07:2d:83:c2:7a:d3:
         1d:69:84:9d:7d:aa:09:0b:ff:3c:99:e6:46:51:8c:21:ca:02:
         50:ed:76:43:36:c3:4a:c6:6f:35:56:6e:71:b6:ee:4a:a5:4c:
         64:47:ff:20:2c:7d:d4:73:5f:c4:d7:24:94:36:74:79:7e:76:
         de:2c:e0:8e:82:7e:06:c1:6d:a4:96:54:b3:fb:29:4b:c5:8c:
         3a:4b:14:12:f9:f4:c4:c1:84:c2:12:28:b3:94:c1:31:bc:b3:
         86:cd:ce:74:d7:da:a0:0b:54:f9:9b:fe:c6:1b:cc:2c:03:b2:
         ec:8d:b8:2b:7d:18:33:cb:c2:ad:0a:8e:d8:ff:13:29:56:d1:
         b9:d8:b6:97:68:b6:9a:03:64:89:bd:fe:a4:f0:58:60:c1:70:
         e1:ed:f8:73:d0:8d:7a:eb:77:e9:fd:87:3e:6f:83:ac:2f:50:
         8e:47:fb:87:07:15:46:ad:f9:de:b3:89:df:72:4a:84:ea:a5:
         fd:6c:9f:a7:d6:29:1d:50:44:87:06:7f:73:74:47:dc:36:8a:
         72:7d:68:a7:2d:a7:5c:d2:16:4b:aa:a1:2b:4a:aa:e4:8e:b1:
         9d:1f:32:9c:a9:ac:a6:3f:90:6b:27:fd:df:d9:45:0b:54:ee:
         bd:d1:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org