Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          NjPh0GNuFCKyiSzSzRHb/AgFY//LJBokcTkSIvm9kYE=
Subject key identifier:   77:FD:F1:C9:CD:E3:F3:EC:8C:30:00:60:D9:65:6C:ED:3F:8C:8D:31
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       29CC7F345FE5A13C100244C873F68986A6C82FB3
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:58 +0000
ROA not before:           Wed 10 Apr 2024 00:15:58 +0000
ROA not after:            Wed 09 Apr 2025 00:20:58 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cc:7f:34:5f:e5:a1:3c:10:02:44:c8:73:f6:89:86:a6:c8:2f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:15:58 2024 GMT
            Not After : Apr  9 00:20:58 2025 GMT
        Subject: CN=77FDF1C9CDE3F3EC8C300060D9656CED3F8C8D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:b0:ee:85:d2:c7:4d:78:d7:22:19:57:ca:
                    05:d3:1e:0a:26:7c:03:c3:e4:bd:a5:ef:a3:e8:74:
                    b0:af:08:a7:4a:45:6f:4a:72:5b:df:19:b0:97:02:
                    b7:aa:88:42:28:87:7b:66:3d:92:e7:31:c4:1d:69:
                    fd:84:ed:1a:ca:19:bf:9c:00:2f:5c:82:0b:a2:51:
                    8b:92:37:ac:81:91:0f:1b:ce:fb:9c:f4:d3:ca:ae:
                    13:41:df:39:4f:2e:15:78:7c:4c:69:61:6d:05:f2:
                    00:b0:c9:ce:25:43:2f:c2:84:92:38:7a:46:f2:26:
                    1e:b2:a4:a5:48:54:81:19:74:70:bd:3a:8c:c3:92:
                    21:17:c6:87:5e:f4:85:b7:e5:6a:41:a8:af:ae:80:
                    38:5f:34:5f:4b:da:5d:ae:72:a0:3c:6c:62:a0:c9:
                    7a:bc:16:1d:bc:41:1f:04:dd:a5:87:0d:ec:a6:ff:
                    d7:e0:09:13:38:a9:e8:77:98:38:ea:6b:ce:0f:9f:
                    92:99:72:31:9e:9a:56:67:e3:08:a3:fa:17:c9:88:
                    2b:36:6d:d5:84:72:76:b4:6c:b6:c8:02:52:59:61:
                    8b:5b:e2:46:e6:ca:5e:6f:c5:50:e9:c8:af:ad:c1:
                    bf:22:a4:1e:76:93:97:bb:6e:c8:97:50:10:52:38:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FD:F1:C9:CD:E3:F3:EC:8C:30:00:60:D9:65:6C:ED:3F:8C:8D:31
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:e7:ba:22:37:be:67:79:d6:30:c4:65:45:9e:07:dd:ab:
         e3:e2:6a:e1:59:5f:b7:f3:8b:19:65:c6:62:63:96:3a:0d:f9:
         ea:b6:27:a3:3b:b1:81:3c:2f:8a:a8:96:6f:c9:01:c7:1d:ea:
         d9:dc:90:05:41:ff:f7:ea:c8:fd:ff:39:29:6f:90:43:7a:f3:
         dc:6b:c8:ef:68:14:22:f1:fd:57:07:30:19:a8:cc:71:7d:60:
         9c:fc:ff:1b:89:13:7d:8c:68:03:b0:62:fa:b2:f7:dd:cb:62:
         9c:89:ad:76:e9:d4:02:b4:38:08:df:34:80:25:18:e3:c2:c8:
         56:e3:96:88:50:41:79:86:c2:20:1d:d8:09:09:13:cb:fd:fb:
         a6:59:94:77:aa:a4:eb:5e:46:99:54:92:c6:0b:40:98:13:27:
         44:32:cb:11:58:b2:26:58:65:99:9a:d9:cc:9c:5d:ca:0c:c0:
         f0:93:9d:61:eb:22:ba:83:7f:ff:39:d4:7c:4a:a2:ba:84:11:
         02:a6:34:e2:30:5b:5a:e0:8f:27:24:74:73:19:f0:6b:00:bc:
         23:c0:1c:0f:f3:1b:26:d4:6c:06:cd:ec:49:5a:44:6e:95:7d:
         c7:2b:57:e9:8c:fb:e0:c3:aa:ad:03:df:6c:11:ab:3e:ef:d9:
         8d:23:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org