Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa
File:                     3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa (raw, json)
Hash identifier:          hgYoftdJCLt4HbbJ6j/6KaEkGYQUP3zuxHgCe02/o7s=
Subject key identifier:   4E:EC:C5:8F:25:BB:A8:54:62:2B:6C:26:65:F9:C0:3B:13:89:11:30
Certificate issuer:       /CN=E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B
Certificate serial:       10C7F093F57CE132666944097A3FCBA057E4EF61
Authority key identifier: E3:84:2E:2A:AD:1E:39:3B:5C:B7:57:59:B6:45:8B:7E:CA:1A:3B:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa
Signing time:             Tue 16 Jan 2024 19:47:31 +0000
ROA not before:           Tue 16 Jan 2024 19:42:31 +0000
ROA not after:            Tue 14 Jan 2025 19:47:31 +0000
asID:                     266484
IP address blocks:        170.83.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:f0:93:f5:7c:e1:32:66:69:44:09:7a:3f:cb:a0:57:e4:ef:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B
        Validity
            Not Before: Jan 16 19:42:31 2024 GMT
            Not After : Jan 14 19:47:31 2025 GMT
        Subject: CN=4EECC58F25BBA854622B6C2665F9C03B13891130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:1f:8f:76:84:e1:74:90:33:99:26:21:ae:
                    31:8e:27:b1:02:39:15:d5:44:e6:e7:d8:d9:24:0a:
                    f7:14:3d:a9:5a:c1:33:83:ec:ce:37:91:f3:cb:f2:
                    38:82:cd:7a:0e:d6:4c:74:db:c6:6c:25:92:d3:0d:
                    f1:d7:21:65:63:27:f0:1d:5e:d5:d2:7b:42:3b:14:
                    cb:8c:fa:e6:32:c1:38:02:39:1a:7c:ae:ad:bf:dd:
                    22:04:9f:bf:da:3b:d3:4a:d5:c2:f5:e0:26:83:ac:
                    3b:2a:6b:ad:87:79:18:40:62:c5:2f:2c:6c:0e:b0:
                    39:39:dc:98:d5:ac:f8:ae:e5:b8:42:31:41:4b:68:
                    ed:7d:b2:2f:ae:5f:0f:3f:1b:a8:65:51:e4:59:75:
                    34:b8:72:3c:c1:c8:3b:3f:1d:e5:0b:93:93:b5:47:
                    0f:74:85:89:65:ae:c1:25:c9:34:7e:29:0f:ea:c9:
                    54:1c:b2:4a:01:93:9a:ff:9e:be:98:7f:e4:59:40:
                    8f:aa:18:d8:aa:e7:10:d1:9e:58:90:65:89:9d:e4:
                    9c:64:1d:bf:49:f7:98:0e:8e:20:d3:88:94:ba:cb:
                    86:6d:7a:cc:6d:44:fe:3f:fc:b4:49:2c:c8:3a:0b:
                    3e:e7:de:fe:e5:7a:ba:d9:2c:ce:91:66:86:a5:50:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:C5:8F:25:BB:A8:54:62:2B:6C:26:65:F9:C0:3B:13:89:11:30
            X509v3 Authority Key Identifier:
                keyid:E3:84:2E:2A:AD:1E:39:3B:5C:B7:57:59:B6:45:8B:7E:CA:1A:3B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:76:aa:2d:76:f3:8e:c6:9f:a5:23:56:37:1e:36:f4:63:d1:
         67:fe:0c:06:12:03:fb:32:f1:f4:48:5d:76:ec:59:5c:c7:d6:
         0e:34:33:9e:7b:66:6b:45:41:dd:2d:56:ec:cb:7c:d1:98:a6:
         fb:b9:cf:59:c5:9f:dc:ba:75:a0:a2:bb:44:27:b6:c3:57:25:
         e8:e5:45:bd:18:ff:0f:11:fe:5c:d0:2c:38:3f:10:91:7e:c3:
         8f:a6:8e:f4:ab:d0:c3:35:b7:14:a9:cd:e6:8c:b9:75:fa:21:
         15:25:9c:b3:e9:b8:38:df:92:fe:1e:a4:c0:eb:4e:46:1a:c7:
         9a:1d:df:b1:b7:78:d3:26:1e:8e:b4:9a:69:e5:7b:c3:1d:c0:
         a3:13:e0:b4:18:38:c9:f0:59:55:f5:92:76:4a:48:fb:02:f9:
         5d:8a:46:6b:1c:b6:63:00:41:4c:88:88:73:6b:de:49:c7:b2:
         86:e0:e9:cb:87:46:0d:dc:1b:75:ea:92:8d:34:b4:bc:bf:a7:
         ec:0f:98:32:c1:01:14:32:91:48:73:14:47:0d:63:e8:80:18:
         7e:6e:92:6b:4a:ea:8c:c6:19:d7:7c:74:65:6e:32:81:6f:f0:
         a4:9b:f9:d2:58:0c:c9:81:f8:8a:76:df:9f:ee:30:01:be:95:
         d5:f8:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org