Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          TRp9oZt/R+x8twjDyoFsl8kEVjSmS+XxqIPZR3tRmdE=
Subject key identifier:   A2:DF:34:81:69:8E:E0:74:77:EE:FB:FF:20:47:81:6F:FC:3A:69:CA
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       03B4F375DE9096A87064887A8626DF1170973D75
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:08:36 +0000
ROA not before:           Wed 27 Mar 2024 21:03:36 +0000
ROA not after:            Wed 26 Mar 2025 21:08:36 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b4:f3:75:de:90:96:a8:70:64:88:7a:86:26:df:11:70:97:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:03:36 2024 GMT
            Not After : Mar 26 21:08:36 2025 GMT
        Subject: CN=A2DF3481698EE07477EEFBFF2047816FFC3A69CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:85:ca:ad:c0:ce:08:58:0a:ab:5a:26:a9:
                    cf:7c:4d:6a:48:ef:30:7c:a4:39:cd:0b:f5:4f:06:
                    a2:19:5c:ad:71:c0:4c:c6:f8:bc:69:87:17:a4:83:
                    e1:9a:f0:3f:2e:1a:4d:b3:9d:9e:f6:a4:62:a4:06:
                    47:46:23:d4:96:01:4a:3f:e0:60:dc:37:12:66:1a:
                    ea:91:20:f2:66:48:d0:4c:f2:c9:38:45:b0:de:a5:
                    91:f1:14:54:c1:64:e3:80:48:b8:f6:2d:5f:02:78:
                    48:17:33:9b:c1:79:12:03:56:92:90:41:51:da:e8:
                    11:16:52:c3:63:7b:e4:bd:86:cc:ac:53:9b:b3:1f:
                    6b:89:1c:bf:b3:6d:7a:4f:70:bc:aa:0b:cd:1c:ce:
                    66:4c:c6:af:00:f8:8c:3a:6b:d0:d3:9e:3c:de:8e:
                    0a:3f:a0:53:3d:a5:8c:01:0f:38:45:f2:6a:d8:56:
                    96:da:e8:a6:35:ae:5f:41:50:ed:0a:7b:34:f2:43:
                    cf:a7:a4:2d:6a:b9:1d:7e:ae:af:db:53:1e:e5:1b:
                    da:9b:9d:5b:56:ec:be:1b:5e:9e:7f:af:54:e6:71:
                    69:61:af:1d:46:8f:cd:46:35:08:0e:d7:da:99:5d:
                    0a:3a:59:69:8b:2a:e5:2e:f6:2a:db:ae:db:4a:20:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:34:81:69:8E:E0:74:77:EE:FB:FF:20:47:81:6F:FC:3A:69:CA
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:1d:4e:2d:d4:4f:b7:f6:f4:24:8a:24:6d:28:26:fa:55:
         fa:1b:6b:91:31:06:f7:f2:14:83:b9:08:a2:09:9d:fe:6f:e3:
         60:e7:9a:d2:38:eb:7c:2e:80:da:ca:7c:cb:4a:b9:3c:bf:c9:
         06:65:ba:f2:6f:38:1c:8a:2a:60:09:3c:f4:c6:d0:3e:ce:22:
         91:3c:b5:bc:80:e5:2e:ab:35:ba:41:82:ed:20:38:c3:e8:57:
         83:15:3e:9e:f1:d5:44:0b:72:03:08:84:ce:20:f9:84:4e:08:
         c7:3e:1c:c8:5e:35:a7:3e:f2:ff:c7:02:a6:20:6a:0a:0f:61:
         07:c1:48:2e:9d:5d:e1:5f:00:a8:f7:d6:a0:a1:d8:f2:ce:f7:
         ac:0e:ff:8c:6e:07:e2:0e:f9:10:86:60:06:ba:a8:23:ff:d5:
         87:db:89:d5:09:10:d5:c3:56:9c:ed:68:d8:ea:a6:bb:97:99:
         62:ba:18:da:d1:e7:b6:6f:23:74:68:21:7d:08:5e:0a:eb:15:
         a5:86:f3:2c:61:e2:e4:4b:83:6a:a1:20:d4:07:09:2c:36:44:
         66:8d:c7:2d:04:94:5d:2f:8f:90:af:6b:33:bc:54:42:c1:2a:
         63:b9:e3:97:79:27:a1:00:a5:70:c0:90:82:e0:72:c3:55:b3:
         e4:0a:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org