Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137302e3234342e302e302f32322d3234203d3e203532363939.roa
File:                     3137302e3234342e302e302f32322d3234203d3e203532363939.roa (raw, json)
Hash identifier:          UIb025YjRJULxosQQA+KCI023l8kNfEBeKkh9LIIx7s=
Subject key identifier:   6F:BC:7B:95:DD:7C:EB:3D:D5:7E:14:8A:7A:0E:94:AF:A4:0C:CF:9D
Certificate issuer:       /CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
Certificate serial:       7C05F2C37B0BDDAEFC90FE33B8B676496D26C766
Authority key identifier: B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137302e3234342e302e302f32322d3234203d3e203532363939.roa
Signing time:             Tue 01 Aug 2023 18:13:18 +0000
ROA not before:           Tue 01 Aug 2023 18:08:18 +0000
ROA not after:            Tue 30 Jul 2024 18:13:18 +0000
asID:                     52699
IP address blocks:        170.244.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:05:f2:c3:7b:0b:dd:ae:fc:90:fe:33:b8:b6:76:49:6d:26:c7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
        Validity
            Not Before: Aug  1 18:08:18 2023 GMT
            Not After : Jul 30 18:13:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:90:77:7c:ed:42:17:b2:b7:6d:0f:3d:7c:
                    3f:2d:1d:ba:05:d0:0d:50:a8:c3:d4:2d:5d:de:02:
                    de:81:c5:c4:ff:df:1c:9b:34:b2:47:08:70:6e:f4:
                    f1:18:17:81:03:f3:b9:f3:34:28:f4:59:6c:f6:f8:
                    66:c6:0d:d2:f6:18:a9:b7:39:2f:92:d8:ca:71:04:
                    7a:a7:a8:74:75:3a:66:ee:24:80:9a:93:eb:ff:cf:
                    78:93:ea:eb:6b:ed:62:ed:12:51:4a:6c:46:1e:71:
                    a9:eb:03:99:24:84:1d:be:90:c3:b5:e2:a9:21:c5:
                    38:aa:48:37:df:ba:7a:9a:e5:1b:7a:72:70:74:80:
                    31:9b:ae:38:0e:0c:af:53:53:88:f4:36:16:a5:a5:
                    d0:79:c8:b9:85:b3:27:67:41:6f:ca:c4:cb:4f:a0:
                    e4:3b:95:12:a2:bf:1b:88:23:66:78:b4:b3:e6:7e:
                    18:d4:f4:83:db:e8:24:5d:ea:70:cc:c2:df:15:23:
                    58:1b:85:bb:c8:74:7f:2c:12:08:bd:97:ee:2e:e2:
                    97:44:b7:ac:aa:92:13:cb:51:d7:a9:57:ad:5e:8d:
                    bd:2a:63:5f:b0:b7:d9:f6:17:21:c7:0d:1c:b1:42:
                    c3:5f:68:7f:2b:d5:0e:67:68:58:b7:52:5e:7e:11:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:7B:95:DD:7C:EB:3D:D5:7E:14:8A:7A:0E:94:AF:A4:0C:CF:9D
            X509v3 Authority Key Identifier:
                keyid:B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137302e3234342e302e302f32322d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:1d:e1:0f:05:d7:8c:b4:99:9c:f2:11:8e:34:7f:d6:82:
         76:22:38:82:33:97:fc:4f:75:7f:80:a4:8e:0a:f9:15:d9:47:
         72:32:0c:e2:bd:3c:2a:21:38:56:91:b8:e6:43:7b:5a:82:ac:
         3e:85:3b:cd:fa:db:fb:2f:a8:69:71:a5:99:62:ed:db:9a:25:
         18:37:e3:18:ad:ee:ed:42:b3:a9:d3:9e:4e:c7:86:a7:d1:e7:
         84:04:d9:fa:35:48:a8:5f:4b:07:bd:a2:34:84:cd:8c:03:aa:
         85:a7:15:71:bf:b9:a6:94:7e:97:90:0f:66:04:69:2a:19:c9:
         1f:aa:f6:13:d1:f2:f3:97:cb:0d:68:5b:e9:e6:5c:a8:5a:33:
         fb:96:95:24:45:66:34:62:dd:51:39:b8:cf:6a:1d:54:25:70:
         43:14:64:02:da:bd:2a:d7:33:8e:b1:37:32:96:63:01:53:3d:
         a2:6d:f8:76:e6:6d:a7:48:67:7d:44:0c:fd:b0:2c:d8:71:f7:
         0e:4e:95:01:c0:b1:86:ef:f1:fa:df:17:c7:0f:7a:3d:92:e7:
         b2:e1:11:59:ea:81:60:ea:39:a6:a1:38:02:af:99:4c:33:e0:
         70:95:df:cb:e9:60:29:ec:4c:49:49:48:c6:e9:e3:ca:44:59:
         b5:8d:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org