Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa
File:                     3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          JJ10Jx7Gh61xQOzxk+BlhCwdYEgfVouYYnk0af0Mnrc=
Subject key identifier:   CB:99:22:3F:46:8E:8C:23:B8:96:CB:0B:FA:15:CA:AD:65:95:FF:B8
Certificate issuer:       /CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Certificate serial:       62379F414617A02B1A3C53CA11AACF1A89620A89
Authority key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa
Signing time:             Fri 22 Mar 2024 19:06:34 +0000
ROA not before:           Fri 22 Mar 2024 19:01:34 +0000
ROA not after:            Fri 21 Mar 2025 19:06:34 +0000
asID:                     264404
IP address blocks:        170.82.140.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:37:9f:41:46:17:a0:2b:1a:3c:53:ca:11:aa:cf:1a:89:62:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
        Validity
            Not Before: Mar 22 19:01:34 2024 GMT
            Not After : Mar 21 19:06:34 2025 GMT
        Subject: CN=CB99223F468E8C23B896CB0BFA15CAAD6595FFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:e0:18:7a:52:bd:c0:a8:17:04:80:34:7c:
                    a6:1c:1e:a2:c8:31:84:cc:86:77:20:89:3e:c4:23:
                    48:66:d4:c9:5c:26:5f:c9:4d:52:67:0e:d9:7c:4f:
                    0f:cc:11:58:17:81:ff:74:5c:f8:28:29:f0:ea:46:
                    08:63:b6:ca:31:26:1d:b6:ad:ed:90:c8:3a:56:67:
                    cc:13:1e:a0:b7:0b:be:3e:5a:f7:12:fe:c8:95:58:
                    b4:9c:be:cf:f6:98:f8:51:bc:c5:95:27:aa:a9:c3:
                    1f:b6:a2:89:fb:ec:9e:07:7c:68:3c:68:0c:97:50:
                    9b:05:30:07:ad:9b:5d:8b:36:71:d5:4c:82:e2:84:
                    c6:bd:02:5b:af:aa:04:a4:b6:0e:e5:6f:f2:8b:86:
                    0b:9d:8c:1f:97:e1:48:17:4e:9d:ce:0c:ea:94:52:
                    ab:d8:2f:49:ab:36:5f:83:b4:5a:0b:6a:4b:47:27:
                    0b:7e:e1:7c:f1:ee:61:8f:12:0e:60:4d:a9:3a:a7:
                    c8:31:ea:52:38:51:7c:11:b9:13:d0:57:6a:7d:c9:
                    02:41:bf:a7:59:81:14:d1:2f:fd:56:91:04:b8:08:
                    3c:22:6c:7d:07:08:6d:b9:d2:65:3f:2a:92:85:a8:
                    66:4f:dd:e0:f5:49:ae:56:a0:a7:ed:b3:80:6b:b5:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:22:3F:46:8E:8C:23:B8:96:CB:0B:FA:15:CA:AD:65:95:FF:B8
            X509v3 Authority Key Identifier:
                keyid:7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:11:7e:8d:41:85:7b:6a:7a:81:1d:05:62:c6:99:95:de:a2:
         07:8c:c4:78:57:88:ea:49:61:9b:e0:a0:d5:87:75:35:a9:89:
         b5:b4:81:cb:41:1d:39:a2:e6:0a:50:c8:a8:42:02:dd:d9:25:
         e3:c1:db:b4:fc:e5:06:fd:df:9b:be:74:e5:7f:e6:5a:ad:6d:
         5b:ac:d4:a5:78:f3:83:54:9b:c6:08:52:12:53:02:89:6c:e3:
         b8:74:1f:22:d4:1f:56:49:49:a9:3d:2b:5e:c3:81:71:56:90:
         0b:50:1b:6c:92:c9:e1:5f:57:44:fc:ec:b1:4b:72:76:40:53:
         d2:74:ca:69:79:de:bf:78:c4:b4:08:30:f1:ad:9b:f6:57:d2:
         d5:3d:71:fc:21:6a:af:7a:df:c2:3f:d1:88:f2:c9:7e:2b:fb:
         69:eb:78:2b:06:d4:ec:8d:dc:96:93:1f:da:e6:90:a7:ce:4d:
         3a:7b:0f:3b:33:95:ea:39:61:2d:a9:d7:f6:0d:53:8e:73:9d:
         21:3c:e2:04:98:a9:70:42:50:52:2e:6b:25:36:99:a4:64:68:
         1c:06:9e:5f:49:6c:70:84:a8:2a:6a:c3:d8:17:50:80:b9:71:
         d1:6c:20:ec:8c:d2:c4:f7:b1:03:cf:e9:34:fd:d0:4c:4b:4a:
         23:f6:46:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org