Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa
File:                     3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa (raw, json)
Hash identifier:          yn9s8ATm5VuUBvnc81Wy0630YDjtkcyOOV6oclOlvCM=
Subject key identifier:   09:00:F6:D7:10:3E:75:74:7B:B8:8C:4D:5B:DE:9B:B8:89:85:D5:42
Certificate issuer:       /CN=33699CF3A1A5B6B2E3A60A2EA3F96019106FD530
Certificate serial:       4234C4DEE95A344BC42A196101E1A530A5267C3D
Authority key identifier: 33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa
Signing time:             Fri 08 Dec 2023 20:14:45 +0000
ROA not before:           Fri 08 Dec 2023 20:09:45 +0000
ROA not after:            Fri 06 Dec 2024 20:14:45 +0000
asID:                     264202
IP address blocks:        170.233.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:34:c4:de:e9:5a:34:4b:c4:2a:19:61:01:e1:a5:30:a5:26:7c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33699CF3A1A5B6B2E3A60A2EA3F96019106FD530
        Validity
            Not Before: Dec  8 20:09:45 2023 GMT
            Not After : Dec  6 20:14:45 2024 GMT
        Subject: CN=0900F6D7103E75747BB88C4D5BDE9BB88985D542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:7a:d9:24:42:61:7c:11:75:c5:60:de:da:
                    83:b7:e4:a9:94:b6:64:89:1f:8f:9a:b8:2e:25:81:
                    c2:73:81:cb:88:b6:51:f0:14:5b:27:09:a2:85:2d:
                    93:8a:f2:64:cd:95:77:ab:c0:c8:e4:0c:f0:f3:03:
                    d7:40:b0:9e:16:e3:24:4a:72:75:e0:9a:60:60:99:
                    a9:9d:b5:4a:3f:8c:6f:30:cb:77:7e:9c:1f:28:ac:
                    59:31:24:fc:4b:c8:a6:d9:21:ee:53:14:0a:02:85:
                    ed:3c:6a:0f:f1:17:5d:3d:87:59:d6:29:a9:5d:34:
                    92:37:0f:b5:47:29:09:3c:fc:a8:3b:4f:a5:6c:d3:
                    37:f8:8d:23:30:a7:b7:82:03:c0:2d:33:cc:f7:95:
                    29:b4:a8:a0:08:eb:19:c9:3d:2c:2c:e9:d9:62:b9:
                    69:50:89:77:50:0a:d7:b4:e0:df:ad:c9:9e:7d:36:
                    1f:45:4c:a4:f7:6f:77:d0:88:8d:e4:9b:75:fb:aa:
                    05:03:5f:ac:83:ee:1b:66:4c:35:7e:d1:1d:13:97:
                    ca:34:f9:50:19:39:c6:0b:f1:d8:78:6b:d2:ec:d4:
                    1c:8e:9b:51:5c:75:80:b3:c5:87:42:ea:b9:51:1f:
                    45:3b:50:5c:23:73:b1:89:c2:8d:fe:f7:7b:a3:db:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:00:F6:D7:10:3E:75:74:7B:B8:8C:4D:5B:DE:9B:B8:89:85:D5:42
            X509v3 Authority Key Identifier:
                keyid:33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:44:94:fb:2b:52:cd:d0:fa:6a:f6:5a:e2:5d:64:4b:a9:50:
         0c:91:ba:38:35:1d:d6:00:67:f1:49:94:dd:65:68:b6:93:9a:
         a7:7d:52:fe:b7:2c:bf:a5:bf:8f:dc:e2:c0:d0:fc:6f:46:b7:
         9c:44:7c:64:21:c1:9b:68:dd:50:b5:b9:5a:f7:61:41:86:22:
         01:ec:5e:b4:dd:11:87:1e:b2:c7:07:91:2b:9f:a1:8a:48:b4:
         f3:1a:24:7a:e7:de:2c:47:7b:93:83:d8:09:d9:7f:60:39:9f:
         29:21:90:bd:5b:09:f3:63:68:91:f8:60:ee:95:99:8c:ef:cf:
         41:06:ff:db:21:56:ae:72:1d:8b:9b:74:9d:41:17:77:6f:1c:
         9e:3f:02:5e:a3:0c:17:f2:b8:2f:20:2d:4e:e6:f8:45:77:88:
         4c:86:f1:d0:be:06:3b:77:06:e7:96:12:74:dd:59:57:64:03:
         9f:f8:65:43:db:96:17:ac:32:d2:9e:ae:26:ee:52:a0:dd:ef:
         c3:c7:3d:f9:2d:11:9a:cc:f1:83:f7:1b:eb:8e:77:aa:3c:6c:
         eb:a0:55:ef:72:26:38:ad:06:3f:97:f9:fc:ad:d5:a7:b3:e8:
         82:3e:52:b1:40:46:23:b5:4c:f7:bf:81:d0:89:b3:d8:47:21:
         c3:90:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org