Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa
File:                     3137302e302e3134382e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          QrOgtjmd+2M/e5Xk+5Qv2RQmMQskmVPmIuFDCq/gSxk=
Subject key identifier:   D2:81:7E:2A:FB:9D:BC:25:E9:EE:8C:B2:04:1D:05:3C:D9:09:AA:9C
Certificate issuer:       /CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
Certificate serial:       757FC8B5D0C76D98A15447046419AA9DE4178D6B
Authority key identifier: 2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa
Signing time:             Mon 15 Jan 2024 23:00:00 +0000
ROA not before:           Mon 15 Jan 2024 22:55:00 +0000
ROA not after:            Wed 15 Jan 2025 23:00:00 +0000
asID:                     264426
IP address blocks:        170.0.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:c8:b5:d0:c7:6d:98:a1:54:47:04:64:19:aa:9d:e4:17:8d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
        Validity
            Not Before: Jan 15 22:55:00 2024 GMT
            Not After : Jan 15 23:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:ee:64:68:19:fe:18:fc:0d:38:e6:d2:06:
                    2e:3a:66:c6:4d:3e:1d:0f:7e:45:b9:29:8f:fb:ec:
                    5e:fd:46:45:ff:67:bc:87:71:5a:e6:03:de:9a:96:
                    eb:e5:c2:06:73:6d:19:08:6f:db:ef:3b:a0:1e:86:
                    84:66:b4:99:cc:4f:fd:df:bb:ae:8f:c1:25:dd:41:
                    af:7a:9d:c6:cc:22:69:be:41:04:c4:a6:4f:6e:87:
                    b6:e7:cc:96:8a:32:25:dc:e3:91:6b:9e:0d:ea:59:
                    06:b3:30:ef:3f:60:2f:54:1f:fa:b2:04:99:1c:9c:
                    79:26:e4:ca:9e:ca:0b:f9:09:14:00:8e:16:f8:a4:
                    d8:c8:f7:09:2a:d4:a5:0f:68:6c:59:f1:64:d9:96:
                    d8:61:03:d8:3d:21:0e:0e:76:55:6e:52:37:03:bc:
                    fb:15:e0:1f:93:04:dc:45:c3:f3:93:ac:e5:9d:5d:
                    e7:ff:e9:e5:c1:d1:d3:de:a9:02:00:47:83:1e:51:
                    ef:7d:0c:a3:05:21:aa:62:b1:49:4c:23:ce:d8:05:
                    ba:b8:9a:b2:7e:fb:60:d5:d5:ac:70:08:8d:a8:fe:
                    dd:60:6f:f4:4e:c3:4f:6b:4a:3d:ad:fd:7b:5a:cc:
                    1e:e3:2b:81:12:33:6d:f0:b6:20:96:ea:c4:12:42:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:7E:2A:FB:9D:BC:25:E9:EE:8C:B2:04:1D:05:3C:D9:09:AA:9C
            X509v3 Authority Key Identifier:
                keyid:2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:23:35:fd:5b:33:96:08:17:53:27:37:13:8d:0a:a4:e3:
         39:21:0e:e4:0e:f4:11:e6:60:47:36:33:74:fb:29:27:bc:7e:
         18:2e:27:d5:c8:8d:23:27:f2:9d:9d:fa:7e:c7:b3:58:13:26:
         4f:a5:35:b2:71:17:2f:2a:21:f8:b2:0c:eb:39:45:4e:d0:b0:
         e0:cb:e8:89:5c:a8:7c:d4:69:ff:97:56:44:21:dd:c5:82:c6:
         8b:1d:81:30:2f:33:5a:97:29:10:b7:e3:7a:83:b8:c2:55:80:
         e8:53:e6:a5:d6:2a:91:0d:60:69:2c:fa:24:65:69:5f:25:48:
         35:ac:81:a8:46:d0:24:7e:54:27:20:cb:4c:96:8e:e0:75:a0:
         61:3e:dd:25:34:20:ab:82:90:c3:2d:41:d9:36:05:c8:c3:61:
         dd:c6:c4:b2:48:6f:d7:27:f8:bf:19:b2:a6:b6:94:21:b2:28:
         1d:de:34:3e:51:88:2a:09:c3:86:89:0d:78:27:3a:7e:93:b0:
         71:1f:a2:02:c4:b3:55:46:27:e6:0b:ba:a9:b7:bd:eb:d8:3a:
         98:da:8e:68:17:e8:84:1c:e5:38:7b:53:bc:3c:ce:6f:d1:14:
         05:3d:bc:d8:f9:22:9f:93:9e:49:48:01:7d:9d:f3:e2:d7:36:
         be:1a:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org