Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3234203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32322d3234203d3e20323634393938.roa (raw, json)
Hash identifier:          PjSiD5EWXwmKtyL13ttJaDVhRL/4w8c1g108trfpVdw=
Subject key identifier:   77:1B:71:0E:E6:AC:88:47:9B:A2:30:E0:24:3E:EB:C0:40:10:9F:2B
Certificate issuer:       /CN=2B8C048D5678769A63BDDF77C151B142C39211C1
Certificate serial:       6CF9EE71F7E03EEA0A19305D2C1EB70C4A9538BF
Authority key identifier: 2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3234203d3e20323634393938.roa
Signing time:             Sat 23 Apr 2022 19:35:57 +0000
ROA not before:           Sat 23 Apr 2022 19:30:57 +0000
ROA not after:            Sat 22 Apr 2023 19:35:57 +0000
asID:                     264998
IP address blocks:        170.84.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f9:ee:71:f7:e0:3e:ea:0a:19:30:5d:2c:1e:b7:0c:4a:95:38:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8C048D5678769A63BDDF77C151B142C39211C1
        Validity
            Not Before: Apr 23 19:30:57 2022 GMT
            Not After : Apr 22 19:35:57 2023 GMT
        Subject: CN=771B710EE6AC88479BA230E0243EEBC040109F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:ff:bc:d5:ae:32:30:15:24:b8:cd:f4:7a:
                    3e:cb:20:b5:05:5f:0b:2f:f9:eb:a1:27:ce:1d:53:
                    55:0f:f0:d2:24:14:a9:46:39:3a:ee:92:5c:a5:8b:
                    aa:32:e6:04:75:bb:3c:89:30:7c:a3:a5:b9:e7:5b:
                    0c:ac:99:67:c5:a0:68:63:8f:ba:a4:60:f1:a2:4d:
                    59:f2:89:a0:2d:a3:47:a3:5a:ef:45:4b:9c:19:fc:
                    35:76:e4:64:d8:39:07:72:b0:d9:53:e3:bb:e8:b8:
                    e4:f3:19:44:c2:34:9b:1e:78:32:c3:de:37:73:19:
                    3f:77:f2:9a:2f:39:5e:cf:ed:01:0e:72:9c:97:ce:
                    f8:85:3f:45:88:00:90:e7:e3:ee:7e:84:ae:03:8f:
                    54:d1:f7:e5:85:4f:4c:f3:3c:27:97:d8:ad:a3:73:
                    d6:38:74:ee:42:6d:3f:76:18:ba:8b:de:30:3e:65:
                    0b:5a:2d:f4:61:85:a8:d7:6f:29:13:1d:25:29:9b:
                    00:32:dd:55:2a:54:07:19:0d:79:ea:ce:09:e2:bf:
                    59:af:d6:49:1d:04:4d:ba:5b:de:41:b4:6c:28:3f:
                    3f:94:be:05:72:98:78:08:9d:9b:02:6a:ea:6a:e2:
                    cf:89:e8:1a:e9:f6:05:36:e9:31:00:21:c7:5a:6d:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:71:0E:E6:AC:88:47:9B:A2:30:E0:24:3E:EB:C0:40:10:9F:2B
            X509v3 Authority Key Identifier:
                keyid:2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3234203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:fa:0b:26:cb:24:6b:d8:3c:2e:e3:93:92:49:60:68:dc:
         9d:4c:e3:57:65:12:7c:32:26:f9:e3:76:e1:19:08:56:e7:50:
         18:3d:4d:f6:98:1b:ff:92:ab:eb:34:a1:8b:fb:f2:b3:fc:51:
         b9:92:a5:ee:d0:a1:ae:1a:79:8b:d3:96:51:be:bd:45:57:a0:
         57:86:8c:cc:e0:54:0b:72:c4:cc:4e:f8:8a:56:c2:1e:5f:84:
         33:05:c7:67:84:31:c4:77:05:d7:4e:e5:23:eb:69:68:53:20:
         b5:12:51:e1:a6:94:e7:52:0a:3d:50:15:38:2d:08:f7:91:87:
         c7:94:8c:4b:b4:de:37:43:01:b9:3e:2e:03:25:af:80:0d:96:
         6c:11:1f:84:00:ca:67:db:9e:fa:26:60:ef:b5:08:09:c6:55:
         40:d2:37:97:ad:18:ca:15:0d:58:8f:cf:21:b5:09:ef:7b:a7:
         6c:55:99:98:2e:d1:be:49:44:08:69:c9:c3:b0:c0:ab:eb:ca:
         79:fd:8e:90:16:29:12:12:cf:d3:1f:51:98:2a:92:a6:a4:c5:
         bf:8b:ee:ff:c2:7b:ce:c3:8c:f9:4f:19:65:05:d0:c6:ca:77:
         7f:a1:37:a7:88:0b:e4:94:a4:e1:b7:3d:77:b1:c9:6f:d3:8f:
         5e:8e:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:25 2023 by rpki-client on console-fra.rpki-client.org