Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa
File:                     3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (raw, json)
Hash identifier:          ECSHQqeJxZ5Mq6d1SeR1Vm8oDkkZvaV9S+zWH+Pr/Pw=
Subject key identifier:   59:6F:92:C9:12:AE:BB:0B:04:D2:9B:49:AC:58:BE:79:B4:CE:79:8D
Certificate issuer:       /CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
Certificate serial:       067F7B4990406D9F8D7DCBF0EF93514860F69652
Authority key identifier: 5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa
Signing time:             Wed 22 Nov 2023 16:00:23 +0000
ROA not before:           Wed 22 Nov 2023 15:55:23 +0000
ROA not after:            Wed 20 Nov 2024 16:00:23 +0000
asID:                     266410
IP address blocks:        170.80.80.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:7b:49:90:40:6d:9f:8d:7d:cb:f0:ef:93:51:48:60:f6:96:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
        Validity
            Not Before: Nov 22 15:55:23 2023 GMT
            Not After : Nov 20 16:00:23 2024 GMT
        Subject: CN=596F92C912AEBB0B04D29B49AC58BE79B4CE798D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:fc:58:8f:84:25:5e:aa:79:67:d8:1b:0e:
                    59:00:8c:6a:57:33:0e:c3:4e:8a:8a:c6:8e:54:88:
                    80:13:97:aa:7b:f0:b2:fa:3f:c8:cc:84:2f:23:d3:
                    3a:6d:e3:72:3a:ac:ec:59:ab:b0:b0:29:f0:49:66:
                    c2:12:d1:c0:4e:1d:99:30:cf:e2:a9:e0:47:31:e8:
                    5c:60:85:f7:01:60:f8:b2:4e:9c:af:cb:ec:3b:a9:
                    f8:f2:13:de:06:0e:5a:b4:5b:ab:6f:99:33:af:40:
                    b2:6b:d7:43:e8:29:23:ea:b9:3a:e3:4e:53:ab:09:
                    b8:6b:f7:d4:4f:24:c4:a9:26:f5:88:b8:96:15:b9:
                    48:cd:fa:76:52:23:f2:d8:43:af:85:11:1b:36:19:
                    24:6d:8b:08:53:bf:bd:3c:ee:d6:18:1d:4a:8c:66:
                    4c:9d:c6:6f:91:99:0c:28:57:25:6e:a7:a9:95:48:
                    09:70:17:d3:d4:dc:aa:4d:62:6a:1c:a2:44:af:06:
                    f1:7b:92:82:b9:09:26:5f:6d:36:1b:22:91:35:ec:
                    65:e5:ff:c3:8c:d3:d1:29:72:9a:60:e9:0d:81:0a:
                    50:43:66:c3:d5:72:ab:21:95:cb:ba:ef:96:4b:e8:
                    52:8d:05:8b:f2:e5:e4:74:f3:2a:ca:84:02:b7:c2:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:92:C9:12:AE:BB:0B:04:D2:9B:49:AC:58:BE:79:B4:CE:79:8D
            X509v3 Authority Key Identifier:
                keyid:5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:bc:d4:ca:f0:aa:70:e5:db:79:12:8c:67:14:8e:49:ee:
         ee:77:1c:54:b2:18:4f:7c:50:be:1a:c4:74:c8:ad:7a:1c:f9:
         27:75:b4:d9:e0:d6:53:52:7a:4e:6b:7e:5f:87:b5:7e:d2:bb:
         2c:f6:64:91:d2:5e:7b:99:9d:54:d0:b9:c7:9b:e0:20:90:15:
         98:3b:fd:d6:c7:ed:11:e0:9c:d9:fa:38:5d:16:5b:82:97:9a:
         55:52:56:09:5f:ef:17:7b:b3:8e:29:94:7a:f8:77:b0:05:8a:
         47:15:2f:4d:7f:70:b1:b9:89:18:34:a0:6f:18:25:51:10:88:
         97:2d:d3:5e:7d:55:e9:05:0d:9d:b6:2b:fe:a2:7f:76:4d:13:
         d6:43:96:93:c3:0e:c7:91:3e:aa:8b:90:2d:49:92:02:e5:93:
         0f:23:9b:95:33:bf:bd:a3:41:48:2c:5a:5a:07:05:2b:27:df:
         83:10:49:a6:7f:3b:6c:cd:79:00:f1:46:4d:be:66:e7:9b:5f:
         c0:b4:7a:0a:2b:4a:85:91:80:ea:ff:8d:ba:04:d2:4a:ba:3b:
         75:cd:09:74:6d:91:d5:3b:35:20:ac:4e:ab:bf:fa:1c:cf:ae:
         54:5c:d4:f1:85:cc:2a:75:a4:da:34:e5:8e:0e:b0:27:3c:ce:
         6f:c4:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org