Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36362e302f32332d3233203d3e20323632353134.roa
File:                     3137302e38302e36362e302f32332d3233203d3e20323632353134.roa (raw, json)
Hash identifier:          HpPYXPY3dovtmjGiZv42YQ9sCQamrACQg4bpcYZ1y00=
Subject key identifier:   E3:83:7D:3B:66:2B:20:F6:B2:75:E1:65:58:EA:C9:67:95:87:E2:7C
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       2728094CAE259EA41ACC0BA940A7D40AB83F64E0
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36362e302f32332d3233203d3e20323632353134.roa
Signing time:             Mon 17 Oct 2022 20:40:19 +0000
ROA not before:           Mon 17 Oct 2022 20:35:19 +0000
ROA not after:            Mon 16 Oct 2023 20:40:19 +0000
asID:                     262514
IP address blocks:        170.80.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:09:4c:ae:25:9e:a4:1a:cc:0b:a9:40:a7:d4:0a:b8:3f:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 17 20:35:19 2022 GMT
            Not After : Oct 16 20:40:19 2023 GMT
        Subject: CN=E3837D3B662B20F6B275E16558EAC9679587E27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:86:de:73:5b:83:db:f4:aa:55:5a:1a:94:
                    c8:84:00:18:cd:b5:60:6b:7d:ec:4d:ce:cb:7f:02:
                    77:3d:dc:d2:9e:b1:fb:da:da:4b:9b:57:ea:04:2f:
                    b9:d1:bd:74:8a:96:35:45:c4:cf:da:bc:b2:0e:3e:
                    ff:7c:91:a3:23:5a:53:50:76:4d:d3:fc:7e:00:a0:
                    dd:c5:e6:04:b9:f6:48:db:28:3d:a0:0f:2a:ad:cb:
                    19:19:27:1f:62:ac:23:46:3e:53:42:bf:50:b8:14:
                    39:97:53:ef:be:6b:41:ba:c5:bb:9a:1b:17:19:82:
                    c0:e7:55:7c:6a:71:76:0c:f7:ab:1e:b2:7d:50:2a:
                    85:f5:28:7e:e8:70:66:be:ef:8e:83:94:5b:5f:6b:
                    2d:8e:17:78:5b:6d:87:4a:c8:ab:27:eb:14:9d:73:
                    65:a4:98:bd:9b:8f:33:0a:f6:cb:7a:43:4e:05:58:
                    2e:ab:6c:20:df:ea:e4:4e:6e:84:84:fe:dc:ea:e4:
                    4b:e6:a5:c4:01:ac:7a:85:2a:82:15:47:14:14:13:
                    ec:6c:60:f9:87:52:a7:ba:ca:e0:6d:fd:04:28:b6:
                    b9:5e:cc:6b:41:53:9b:37:c9:a0:fe:cc:91:ac:fd:
                    06:2d:3a:73:9e:6f:78:8f:ae:59:7b:13:2c:b0:43:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:7D:3B:66:2B:20:F6:B2:75:E1:65:58:EA:C9:67:95:87:E2:7C
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36362e302f32332d3233203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:3d:7e:ff:47:28:ac:df:ca:67:0b:26:04:1d:72:1c:3e:
         0b:a1:33:07:26:70:7c:27:07:3d:0a:07:9e:c3:83:ab:de:16:
         d1:cd:1a:9b:6a:56:08:9b:4b:83:33:42:da:1f:e0:da:76:db:
         95:e8:c7:b3:84:d6:3e:ea:a4:bc:8b:4c:d0:0a:d5:7c:7f:e4:
         23:b3:f0:34:27:eb:28:1e:21:85:bb:b4:4b:60:d7:2d:f0:56:
         f9:fc:59:ce:39:fc:a6:4e:bc:09:65:d3:0f:f5:fb:b5:78:df:
         86:ef:76:6b:79:9e:d6:4e:2f:f4:09:e1:81:0f:d0:21:46:1b:
         9b:cd:91:d2:cf:f4:1c:5b:f1:0c:bc:7c:b5:ae:a9:e6:81:f5:
         09:68:45:f7:e5:f9:ee:e3:c4:cc:fb:3d:43:fe:ca:05:84:5b:
         bc:79:fe:88:a1:51:2a:e9:35:c8:80:83:69:96:f3:21:34:3f:
         64:19:35:24:a6:86:90:46:d8:ed:16:cd:2d:1c:41:59:c6:22:
         3e:b5:b8:1b:92:28:ab:53:73:7e:4c:f9:5d:c3:fa:c1:5d:61:
         79:84:9b:5e:62:48:00:0f:3d:e8:b9:22:d6:ee:02:34:f9:9c:
         a2:9c:60:8d:c3:79:34:39:ce:9a:f4:a7:c8:b2:5b:74:94:0b:
         81:f8:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org