Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa
File:                     3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa (raw, json)
Hash identifier:          ubClWMJ7Kbn/YgZmQHILn5GvyetniPJuvOwOBeqkjmw=
Subject key identifier:   09:8A:61:B7:96:7D:E1:57:85:E3:B8:8C:1A:A4:31:2F:F9:05:BD:BA
Certificate issuer:       /CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
Certificate serial:       6FB796D966BF10D95B786EAD116B552A1A87289F
Authority key identifier: 2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa
Signing time:             Fri 08 Dec 2023 19:27:55 +0000
ROA not before:           Fri 08 Dec 2023 19:22:55 +0000
ROA not after:            Fri 06 Dec 2024 19:27:55 +0000
asID:                     266297
IP address blocks:        170.79.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b7:96:d9:66:bf:10:d9:5b:78:6e:ad:11:6b:55:2a:1a:87:28:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
        Validity
            Not Before: Dec  8 19:22:55 2023 GMT
            Not After : Dec  6 19:27:55 2024 GMT
        Subject: CN=098A61B7967DE15785E3B88C1AA4312FF905BDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:eb:cb:00:26:0a:2b:f1:49:ee:e8:95:27:
                    3e:cd:fc:28:86:08:76:04:3c:e6:1b:ba:f9:65:05:
                    b4:ce:d7:e6:5f:6b:6a:06:b1:b0:36:6e:f3:a4:38:
                    d6:19:ed:59:c8:55:06:a3:4c:cc:ae:0f:8b:fc:a0:
                    98:80:bb:6b:bf:c8:fe:2d:ad:54:3f:15:b6:ac:6e:
                    0b:65:6a:ab:fd:9f:db:10:10:0d:29:f7:9b:8d:75:
                    c2:9b:ba:a0:db:be:c8:3c:e1:5c:4d:7b:bf:96:67:
                    00:2f:d5:a3:0b:bb:c0:cc:27:9d:e2:10:2b:36:99:
                    5d:71:f1:07:a8:7d:83:2c:d6:34:db:d1:a5:0a:3b:
                    01:63:c6:aa:2e:a7:40:f1:e7:71:6b:44:60:7f:01:
                    06:79:48:46:f1:fc:74:66:27:ce:85:db:fc:ce:8c:
                    6e:31:7c:68:a3:55:f4:ab:eb:5c:a1:2e:e3:19:65:
                    c0:2f:83:8e:8f:dc:92:6d:0a:03:5d:7a:9f:29:5c:
                    20:b8:18:e7:4d:91:2b:91:97:aa:d2:7c:93:47:62:
                    4e:ae:34:a9:56:b9:00:50:74:09:02:73:2a:28:a2:
                    59:cd:53:9d:38:a2:d4:71:87:31:ed:5a:6a:e7:50:
                    bd:8d:e2:b6:4d:98:19:53:f8:20:64:2b:9e:e8:ea:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:61:B7:96:7D:E1:57:85:E3:B8:8C:1A:A4:31:2F:F9:05:BD:BA
            X509v3 Authority Key Identifier:
                keyid:2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:74:81:47:a8:9a:a6:66:78:b6:4a:e1:15:0c:68:31:35:
         9d:a4:09:09:32:b4:ae:24:5f:e1:59:12:02:31:3b:9a:b7:e7:
         a4:79:1e:63:75:31:1b:ce:16:53:92:52:e3:07:2c:5e:36:ca:
         a4:c9:e6:1c:8d:df:3d:91:cb:03:55:94:90:e4:bc:cf:5e:be:
         e3:06:4e:19:e9:aa:81:7f:61:cc:25:13:e8:a1:e3:8f:60:56:
         85:13:54:b7:8b:c9:8d:0d:29:98:e5:75:c2:d5:35:27:fc:9d:
         f5:6d:38:a1:c4:d3:aa:59:29:76:a3:07:36:7a:2a:6a:78:7a:
         ea:a5:ac:54:47:c0:9a:10:0a:59:d3:b1:a6:c6:b1:cf:70:ab:
         a0:d8:45:0e:61:e7:7d:1e:b9:1b:9d:6b:75:b8:01:7a:65:34:
         d6:6c:21:a2:b3:d0:3b:b7:4e:5a:a5:a1:b5:ed:b4:87:05:a1:
         ba:df:d1:17:45:7e:2d:97:54:5f:60:c9:1b:b0:2b:4f:a4:aa:
         60:01:25:34:96:f8:64:55:b7:62:30:e8:a8:4e:7a:5b:f8:37:
         81:fd:29:5d:9c:14:3d:d7:bf:34:a9:fb:98:89:03:d3:c3:b2:
         db:63:71:3e:7a:0e:36:9d:15:f6:82:f7:14:ec:5d:f6:fc:fd:
         bb:4d:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org