Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa
File:                     3137302e302e3132382e302f32322d3234203d3e20323634393732.roa (raw, json)
Hash identifier:          jhCkEJnxOeI9nPrRvfWl3tjMzS7k7yWRgzw32F+/BcE=
Subject key identifier:   B4:9E:66:C2:33:03:F5:2B:01:04:81:F0:AD:7F:7E:03:C4:CE:FF:86
Certificate issuer:       /CN=7CF43A57517C789B2BE267EAA44CF309FD33CC5D
Certificate serial:       28DF41F5BB5490C97984ACDB974773D2625270CD
Authority key identifier: 7C:F4:3A:57:51:7C:78:9B:2B:E2:67:EA:A4:4C:F3:09:FD:33:CC:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa
Signing time:             Wed 29 Nov 2023 19:32:17 +0000
ROA not before:           Wed 29 Nov 2023 19:27:17 +0000
ROA not after:            Wed 27 Nov 2024 19:32:17 +0000
asID:                     264972
IP address blocks:        170.0.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:df:41:f5:bb:54:90:c9:79:84:ac:db:97:47:73:d2:62:52:70:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF43A57517C789B2BE267EAA44CF309FD33CC5D
        Validity
            Not Before: Nov 29 19:27:17 2023 GMT
            Not After : Nov 27 19:32:17 2024 GMT
        Subject: CN=B49E66C23303F52B010481F0AD7F7E03C4CEFF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:fc:07:26:e0:ba:cc:8f:c5:43:3b:f3:96:
                    1a:f3:76:b8:18:d5:b9:53:5f:12:12:d7:c5:7f:90:
                    42:8f:2f:c9:dc:79:b3:04:62:e3:bb:26:27:ce:3a:
                    42:ac:9c:46:98:b8:8b:f0:ae:89:e8:5f:4f:84:fa:
                    7c:89:9c:f2:8e:19:57:02:f5:a3:9a:1b:3e:ad:4b:
                    d7:ff:2c:94:54:e6:d2:6a:01:a9:fb:d0:9b:fd:0d:
                    f1:ce:3e:2f:27:b9:7d:55:bc:c0:8c:48:23:41:c9:
                    c9:b9:07:74:50:de:7b:16:2f:9f:c7:e3:42:96:73:
                    cf:28:dd:11:42:b7:f7:fd:12:e2:b1:9e:2a:cc:c5:
                    3a:4a:10:c2:f2:73:4c:e3:a1:40:f1:bc:b3:2a:69:
                    1e:78:b5:e7:67:b2:55:13:f0:d8:81:83:ec:ae:fb:
                    03:b3:78:34:9a:3b:d1:35:49:a3:b8:d0:e9:f3:f1:
                    31:9a:03:b5:88:3c:9f:0c:4e:c7:82:62:fc:fc:98:
                    0c:15:d0:25:06:45:69:8d:d9:1d:48:f6:4a:97:eb:
                    37:d4:3b:71:ea:d0:73:57:b3:5b:7a:3b:c4:80:00:
                    4b:9c:6f:4e:f9:ba:5e:4c:18:8f:2d:d5:9d:91:00:
                    f7:92:c5:0e:03:d3:28:d8:c8:e0:eb:29:75:6e:49:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:66:C2:33:03:F5:2B:01:04:81:F0:AD:7F:7E:03:C4:CE:FF:86
            X509v3 Authority Key Identifier:
                keyid:7C:F4:3A:57:51:7C:78:9B:2B:E2:67:EA:A4:4C:F3:09:FD:33:CC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/3137302e302e3132382e302f32322d3234203d3e20323634393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:f0:8e:80:10:06:cd:57:c5:91:a8:fb:82:81:bd:48:e8:80:
         b4:ca:f5:ef:7b:40:d7:db:c9:32:52:49:2f:39:fb:7d:44:e0:
         7f:8c:28:8b:98:6c:d2:0a:74:3e:25:86:75:a6:20:e4:2f:8c:
         09:b8:28:3a:9c:6f:e7:1c:cf:2a:f2:f0:53:16:fe:4d:2e:8c:
         db:ea:2d:ad:a7:9c:7f:99:68:17:1b:d5:32:7b:78:18:dd:28:
         d8:9d:d0:69:9d:c6:d6:2d:54:cb:14:37:9a:a6:8b:fb:5c:5d:
         29:07:a3:d6:66:ca:05:45:6a:dd:24:68:8c:36:b4:95:0b:4e:
         7c:60:40:e3:b9:cb:ee:01:17:bd:e8:c1:51:fb:bb:53:94:b4:
         f5:5a:cc:67:fc:37:a0:66:53:bf:61:34:5d:8c:42:a5:9f:2b:
         06:03:21:f0:65:d5:b5:c7:03:c0:d7:ce:7f:7b:e7:84:5a:f9:
         9a:9b:98:f9:23:23:7c:8f:68:6d:ac:15:d6:aa:88:da:a5:a6:
         08:b9:2c:fb:cd:cf:7c:93:0d:84:7c:2f:9f:2c:d9:49:6c:89:
         45:21:fb:a1:e1:e3:f7:dd:80:f6:d0:a1:30:77:ea:03:55:5e:
         ef:6e:5e:16:d5:3e:8c:2e:5b:4b:be:fd:0e:bf:0c:66:eb:d5:
         2c:3d:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org