Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa
File:                     3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          /Kz1VwIlf5TOmw05mf5MX8qEKS5/l1B2Z8q1OyPr5tg=
Subject key identifier:   72:C7:0B:C4:2B:35:45:C8:13:A0:C5:A4:4A:D3:65:E6:3A:C8:37:41
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       36A322578256B265E7459DBAFB06BB1BC92A66DF
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa
Signing time:             Sat 03 Feb 2024 12:27:44 +0000
ROA not before:           Sat 03 Feb 2024 12:22:44 +0000
ROA not after:            Sat 01 Feb 2025 12:27:44 +0000
asID:                     262880
IP address blocks:        170.82.206.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a3:22:57:82:56:b2:65:e7:45:9d:ba:fb:06:bb:1b:c9:2a:66:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Feb  3 12:22:44 2024 GMT
            Not After : Feb  1 12:27:44 2025 GMT
        Subject: CN=72C70BC42B3545C813A0C5A44AD365E63AC83741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:b3:57:a8:ea:f0:13:c3:dd:ba:98:29:78:
                    ee:52:83:57:ea:7f:84:37:13:38:e2:6f:04:dc:84:
                    00:8a:14:df:e3:80:78:8b:f2:43:2b:b4:c3:28:06:
                    28:10:22:10:b7:3f:f6:fd:a5:31:0f:8f:15:34:03:
                    8b:a7:ca:87:3d:b1:b7:ca:db:d4:86:24:b7:74:d6:
                    ad:52:9d:bc:08:1c:ee:1f:c0:07:00:fe:fe:39:de:
                    c9:db:5a:9e:fe:e8:bf:3e:84:7a:81:cb:c2:a3:73:
                    58:9b:6b:f8:15:5b:9f:8a:dc:1e:fc:78:67:74:2e:
                    29:7f:9a:7a:4d:27:b2:5f:73:ae:d7:b5:0e:0e:53:
                    f2:97:8a:d4:7c:18:6c:73:02:79:00:75:dd:29:6c:
                    70:26:59:5d:a4:04:4e:ff:c7:9e:50:df:85:66:78:
                    fb:f6:83:a1:df:89:cf:a7:58:a1:fc:98:06:2e:b4:
                    3d:24:16:90:cc:93:c5:a2:41:a2:02:50:b9:98:ed:
                    9f:ad:c1:dd:27:0f:04:e8:e8:5b:3d:bf:e9:1a:f0:
                    74:ff:d0:e4:42:60:95:be:79:96:a6:1b:05:74:93:
                    8f:14:8d:28:b6:29:8e:f4:0b:bb:af:4e:2a:0c:62:
                    a2:59:6c:92:47:c7:e4:d8:2e:39:f6:3d:c0:7c:f1:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:0B:C4:2B:35:45:C8:13:A0:C5:A4:4A:D3:65:E6:3A:C8:37:41
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:9a:86:3c:50:2d:c8:fe:61:45:fe:5a:ea:b1:a9:4e:ea:
         1c:ac:81:35:15:e0:d3:26:b3:74:6a:06:9b:ab:64:f9:52:a7:
         65:18:c1:1e:77:62:cb:a3:b9:5f:83:a2:40:9b:b6:10:ed:b4:
         65:20:db:88:f3:82:35:f3:ad:20:f3:64:66:78:61:d1:47:31:
         a6:a0:fc:3e:9f:86:66:62:bb:ca:02:c1:5b:6c:83:9d:44:24:
         e4:2d:ee:42:ea:b6:ed:e3:9f:d6:b3:71:56:cc:8e:26:76:42:
         b6:2e:80:3f:1c:40:01:e6:e4:23:22:5a:f0:2e:cf:81:94:3c:
         de:37:c0:8a:4e:58:9d:45:45:80:44:1e:81:c1:37:6c:2e:ce:
         1a:69:30:8a:3f:e3:01:be:7f:5a:53:fc:89:b5:ee:47:a1:d8:
         33:3a:e0:90:99:8b:c2:0a:18:2f:f9:44:53:54:3d:77:48:09:
         97:b1:08:e9:4f:7c:fa:41:8e:b0:ff:12:d4:85:e2:02:7e:13:
         7b:5a:dc:2a:31:04:4e:b6:1d:ac:63:20:41:1b:62:50:58:00:
         a5:61:74:08:93:3c:77:06:cb:59:69:61:ad:4c:93:74:2d:9b:
         52:60:f9:73:e6:0a:45:dc:fc:c7:3f:ab:a0:4f:85:45:8a:4a:
         93:31:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org