Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
File:                     3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa (raw, json)
Hash identifier:          7tS+rfbwbGZWLfo0dWFbHS94ggkgMH5dqPktANKvWUc=
Subject key identifier:   66:F1:83:B5:05:F2:B3:0D:65:F6:73:5A:E5:FA:4E:1E:A8:00:C0:36
Certificate issuer:       /CN=6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688
Certificate serial:       79F675A9BD8EE692898D93BBBC2F38A8C5963E3B
Authority key identifier: 6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
Signing time:             Wed 01 Nov 2023 16:00:00 +0000
ROA not before:           Wed 01 Nov 2023 15:55:00 +0000
ROA not after:            Wed 30 Oct 2024 16:00:00 +0000
asID:                     265037
IP address blocks:        170.84.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f6:75:a9:bd:8e:e6:92:89:8d:93:bb:bc:2f:38:a8:c5:96:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688
        Validity
            Not Before: Nov  1 15:55:00 2023 GMT
            Not After : Oct 30 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:78:89:d5:dd:e0:a1:54:e0:d0:97:e1:e5:
                    86:f3:6a:69:5d:66:f4:6a:7d:4e:52:79:7b:d0:b5:
                    f7:04:dc:e8:ee:24:53:ff:cf:ee:b8:98:67:75:86:
                    81:94:3a:6e:b2:88:0f:c1:a3:31:27:8a:7b:c0:fc:
                    2f:4c:ce:79:ea:0a:5a:4a:e4:fa:bd:3c:33:11:ad:
                    8d:e0:34:71:08:66:ef:f7:e3:20:12:b1:1b:09:20:
                    5f:08:20:a4:c0:44:a8:db:68:73:62:86:11:a2:98:
                    ce:a4:9c:73:bc:0a:a4:96:84:c7:3c:cd:0a:7e:60:
                    12:d1:bd:9d:1c:97:cc:30:f1:8a:f2:f5:43:3a:37:
                    12:30:da:29:a4:88:70:63:f8:5a:a3:b3:82:3f:14:
                    81:8b:17:1b:72:fb:0b:c9:ae:4d:3f:53:3e:28:47:
                    e0:de:16:d0:53:b3:49:c3:1d:e2:af:d5:fa:b7:e9:
                    d4:ac:e7:5c:27:4f:bc:71:74:97:44:2a:93:7c:5f:
                    f3:2d:82:7e:da:85:e2:45:b6:6c:f5:30:5c:68:72:
                    6c:36:87:bc:72:c8:f5:3e:7e:38:67:03:fc:05:90:
                    8b:0c:0c:13:ed:08:96:b9:78:13:f6:12:7f:4c:e9:
                    0c:c8:45:4a:87:4d:55:0d:04:37:2e:c5:08:13:0e:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:83:B5:05:F2:B3:0D:65:F6:73:5A:E5:FA:4E:1E:A8:00:C0:36
            X509v3 Authority Key Identifier:
                keyid:6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:8f:ad:30:2b:7a:55:b1:27:28:c3:59:c1:5c:36:78:0a:
         34:a5:d3:b3:74:85:60:7a:e1:d1:78:37:1e:a5:19:ba:b9:a9:
         82:c2:44:de:cd:4f:30:23:85:a8:f1:d8:d0:0b:d8:62:3f:62:
         5f:97:9c:d1:b1:9e:21:f5:f6:d3:07:dd:cb:63:06:d6:72:d0:
         7e:67:08:0c:20:f3:f7:ee:7d:3c:4d:ab:f4:60:32:b1:35:61:
         12:53:20:1e:fc:db:c3:9e:fd:eb:60:2f:6c:b6:ef:57:a1:02:
         ef:43:ee:27:d1:29:a6:b6:5f:12:e8:4a:e0:1d:58:34:07:76:
         48:99:25:c4:b5:0a:00:87:a1:ea:17:5b:75:88:ac:07:f8:5d:
         b8:5d:d1:9e:1e:b7:bc:23:11:a1:8e:5a:85:a3:7d:71:89:a1:
         e7:de:df:de:1a:cf:50:ff:e5:8f:b0:a9:a6:a9:c1:27:26:f5:
         d7:38:47:b4:c9:9e:e7:6d:94:79:5d:51:c3:9b:6d:4b:52:7c:
         12:d3:ad:c0:64:bd:95:30:14:75:c8:f6:47:9f:fd:51:16:5b:
         0e:96:ac:45:f2:0b:6f:66:35:84:5d:1a:c4:64:6b:38:7c:b0:
         62:f2:be:8b:bd:d2:07:fd:22:4b:90:2b:98:0e:8e:ac:3b:6e:
         f3:12:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org