Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          dOkgOYN5qovH+8XoIeW4gTRSMIkvNWLaavJG3cxPadg=
Subject key identifier:   03:4B:D9:3E:5D:64:8B:F7:ED:55:1F:5D:CC:56:36:89:8B:3B:00:A5
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       34464689530A0180BF3D70805F0B77BCA5DA3AFF
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:30 +0000
ROA not before:           Mon 25 Sep 2023 16:56:30 +0000
ROA not after:            Mon 23 Sep 2024 17:01:30 +0000
asID:                     262352
IP address blocks:        170.246.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:46:46:89:53:0a:01:80:bf:3d:70:80:5f:0b:77:bc:a5:da:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:30 2023 GMT
            Not After : Sep 23 17:01:30 2024 GMT
        Subject: CN=034BD93E5D648BF7ED551F5DCC5636898B3B00A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:ad:fc:4e:76:c3:c5:de:1a:aa:c7:ee:70:
                    7e:ac:b1:17:93:7a:c7:42:33:99:f7:63:bb:44:4e:
                    bf:52:eb:bf:e1:fa:26:32:5f:4f:24:fc:21:b9:e6:
                    3e:75:19:26:e7:bf:2b:48:89:68:60:c8:23:be:79:
                    a3:48:9d:53:4d:d1:d8:6a:09:fc:d7:2f:af:51:b0:
                    f2:f8:b5:08:53:6a:4b:14:dd:b3:92:d2:a4:5f:67:
                    49:2b:47:98:c6:24:9c:20:0a:13:b9:74:f4:ea:ed:
                    38:27:1c:f6:1b:0b:3b:9c:f4:5a:61:49:09:23:1b:
                    90:87:e9:ce:f5:a9:1e:2e:14:b7:75:24:1d:69:ad:
                    d8:5e:a5:40:51:ce:4f:23:02:45:9e:9a:5c:1e:ae:
                    10:0c:f3:00:81:80:91:de:2c:5f:b2:c4:6c:c9:d7:
                    7e:3a:d5:18:99:cd:5f:82:7f:7a:98:90:83:0d:c6:
                    a1:29:21:18:6c:cd:7a:6c:90:62:f6:ba:d2:16:c4:
                    90:8f:12:f5:b5:51:69:91:8d:b0:e9:d4:b0:a0:49:
                    82:93:79:23:ff:f8:89:01:90:d3:99:34:1b:a3:1e:
                    5d:36:0c:92:ff:a3:eb:2b:6c:f2:ca:83:85:10:ee:
                    78:35:87:8b:54:12:65:5e:0e:99:77:0e:45:dc:35:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:D9:3E:5D:64:8B:F7:ED:55:1F:5D:CC:56:36:89:8B:3B:00:A5
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:69:8a:e0:f6:2d:ba:df:66:c5:2c:b4:ec:af:8a:cd:28:
         a5:16:ff:e9:f5:d7:7c:34:38:e9:c5:48:bc:b0:9e:fd:38:b6:
         7d:2f:e7:6b:49:fe:a5:85:2b:94:86:54:38:8f:d4:5d:f5:56:
         95:34:77:7d:b0:32:dd:c6:a5:8a:70:16:9a:68:bd:a8:00:27:
         fd:81:b9:00:b9:ff:04:d1:0e:6a:e6:99:84:f7:39:07:88:5c:
         91:b4:16:94:34:6b:6b:fd:df:2d:a9:71:c7:9d:8c:c9:7e:fa:
         aa:86:fd:a9:b2:7d:9c:a6:75:18:bc:06:c0:71:6d:c4:d3:54:
         8a:94:ee:a8:9b:58:89:b5:a2:48:51:c0:a5:33:01:17:1a:b1:
         1f:64:4b:5d:34:6d:33:07:00:76:47:3d:f9:72:5f:6d:76:4a:
         4a:57:27:0b:5a:c5:6c:b2:8b:4c:3a:6f:d7:ce:28:1d:55:02:
         d4:44:75:f4:bb:6e:47:46:0a:d4:28:8e:a3:1c:80:e5:74:f4:
         1a:4c:b4:48:7a:7e:62:f2:f9:bb:75:71:bf:d3:4c:bf:c0:1e:
         76:8c:ed:e0:4d:26:3c:89:f5:fc:18:0b:22:d0:f9:69:30:58:
         85:31:c6:ac:23:d4:e7:bc:65:05:bd:4d:03:ea:f0:fa:cb:e7:
         0e:4b:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org