Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/3137302e302e302e302f32322d3234203d3e20323634393537.roa
File:                     3137302e302e302e302f32322d3234203d3e20323634393537.roa (raw, json)
Hash identifier:          jyx7Wc7SRgdbPbb0bR5a1s4YjYqTcKLyde+byv00BE8=
Subject key identifier:   3C:50:2C:29:F4:C3:13:3B:BB:2E:7E:06:58:61:5B:92:C7:13:31:D4
Certificate issuer:       /CN=9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B
Certificate serial:       43431576196D5F236EEAB857A327BCAE2E747CD2
Authority key identifier: 9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/3137302e302e302e302f32322d3234203d3e20323634393537.roa
Signing time:             Tue 30 May 2023 18:32:00 +0000
ROA not before:           Tue 30 May 2023 18:27:00 +0000
ROA not after:            Tue 28 May 2024 18:32:00 +0000
asID:                     264957
IP address blocks:        170.0.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:43:15:76:19:6d:5f:23:6e:ea:b8:57:a3:27:bc:ae:2e:74:7c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B
        Validity
            Not Before: May 30 18:27:00 2023 GMT
            Not After : May 28 18:32:00 2024 GMT
        Subject: CN=3082010A0282010100D1A91C65292DD627B6C79A402CE18E0067A6723C5E856296170E46EC524F4A1FCA3D0AB2469CFE1FAF5E4A085D6C39264131736B7EB2DB3FACEEDF9E1A301C1F761BA5CFF2B0D86E89302DD6C500EC857E8D53BDD696FD4CE784E456EF18E3E57325198206BF8ECD596840AEDF3EFD144F7329630DFAF5C1116CF89C3DE0A23BC793025D07920C979353A495ED7E459C03BE359E6B4E74C67E76F0570E49C54CDC5564E651CE072E9C5D597C966089273FFCF9C8044DE92A7E579EB6F1C7EE162A7D25A7F477AB68F2968330911C64C96E9A7F87176DD6874BF816A5F5FEC488C28BFD200D002DD909A8BFF38FB991139E1B55554498A39477159B091439234D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:1c:65:29:2d:d6:27:b6:c7:9a:40:2c:e1:
                    8e:00:67:a6:72:3c:5e:85:62:96:17:0e:46:ec:52:
                    4f:4a:1f:ca:3d:0a:b2:46:9c:fe:1f:af:5e:4a:08:
                    5d:6c:39:26:41:31:73:6b:7e:b2:db:3f:ac:ee:df:
                    9e:1a:30:1c:1f:76:1b:a5:cf:f2:b0:d8:6e:89:30:
                    2d:d6:c5:00:ec:85:7e:8d:53:bd:d6:96:fd:4c:e7:
                    84:e4:56:ef:18:e3:e5:73:25:19:82:06:bf:8e:cd:
                    59:68:40:ae:df:3e:fd:14:4f:73:29:63:0d:fa:f5:
                    c1:11:6c:f8:9c:3d:e0:a2:3b:c7:93:02:5d:07:92:
                    0c:97:93:53:a4:95:ed:7e:45:9c:03:be:35:9e:6b:
                    4e:74:c6:7e:76:f0:57:0e:49:c5:4c:dc:55:64:e6:
                    51:ce:07:2e:9c:5d:59:7c:96:60:89:27:3f:fc:f9:
                    c8:04:4d:e9:2a:7e:57:9e:b6:f1:c7:ee:16:2a:7d:
                    25:a7:f4:77:ab:68:f2:96:83:30:91:1c:64:c9:6e:
                    9a:7f:87:17:6d:d6:87:4b:f8:16:a5:f5:fe:c4:88:
                    c2:8b:fd:20:0d:00:2d:d9:09:a8:bf:f3:8f:b9:91:
                    13:9e:1b:55:55:44:98:a3:94:77:15:9b:09:14:39:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:50:2C:29:F4:C3:13:3B:BB:2E:7E:06:58:61:5B:92:C7:13:31:D4
            X509v3 Authority Key Identifier:
                keyid:9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/3137302e302e302e302f32322d3234203d3e20323634393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:b3:ba:c1:aa:c9:7d:a1:e7:32:8e:99:a5:95:1d:5a:eb:
         6e:0e:d3:af:5d:af:e8:e1:78:e5:bd:7a:1c:b1:3e:76:c8:6d:
         ee:93:ef:b1:df:1e:fd:c2:de:b1:35:63:35:63:fc:02:9a:04:
         ad:b1:84:1b:fd:a4:1c:dc:82:92:a9:0f:42:23:f2:2c:c9:ca:
         ef:c8:4a:e4:22:57:d5:7a:15:3a:97:b7:38:fc:ab:b5:4f:61:
         05:68:90:25:9e:52:ab:c1:73:58:cf:f1:68:02:35:d4:22:47:
         1f:8e:8c:61:fa:82:93:c7:f2:cc:df:2f:18:44:db:fd:33:9a:
         d2:8c:90:64:3d:03:3d:99:e8:4f:95:fc:0a:d4:07:7d:0d:ea:
         49:f7:15:c0:8d:e9:fb:9d:50:2e:57:bd:10:be:a6:69:82:55:
         15:41:af:5b:d0:a3:41:c2:8b:10:19:9e:39:6c:5e:7f:7d:9e:
         c3:af:21:76:a1:f3:d3:4c:9a:12:f6:6b:88:07:18:d6:01:b1:
         99:3b:15:6b:0a:6e:43:28:7b:ff:b0:c8:ed:73:51:90:df:cb:
         fb:99:be:e1:de:e8:50:8f:1f:c1:0a:06:8c:f3:01:58:b0:63:
         1a:a7:82:e4:da:e2:8c:74:ba:31:3b:9c:78:14:ec:f5:ff:a9:
         64:4f:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org