Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32332d3233203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32332d3233203d3e20323636343337.roa (raw, json)
Hash identifier:          tPF+hIoWUMRnDx9UhhyQ7Z2105fbpAVrp+hnV2Yfobc=
Subject key identifier:   EE:51:F8:BD:8F:90:D4:E7:4D:D3:81:C1:EF:B7:B5:71:77:38:33:4A
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       3543F1B6CAF31A7BD65EFB00F373D1863D46E566
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32332d3233203d3e20323636343337.roa
Signing time:             Mon 20 Jun 2022 20:45:57 +0000
ROA not before:           Mon 20 Jun 2022 20:40:57 +0000
ROA not after:            Mon 19 Jun 2023 20:45:57 +0000
asID:                     266437
IP address blocks:        170.82.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:43:f1:b6:ca:f3:1a:7b:d6:5e:fb:00:f3:73:d1:86:3d:46:e5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: Jun 20 20:40:57 2022 GMT
            Not After : Jun 19 20:45:57 2023 GMT
        Subject: CN=EE51F8BD8F90D4E74DD381C1EFB7B5717738334A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:b2:68:90:c9:ed:fa:d6:e5:01:a5:4c:6e:
                    37:fb:33:0c:b0:f7:96:db:39:a2:18:2e:2c:2b:90:
                    0b:7f:1d:47:6e:74:63:18:db:4f:8c:06:c5:dd:c2:
                    41:b7:ce:fd:ce:1a:47:4d:52:d9:b4:d6:2a:2e:97:
                    0e:42:41:32:24:5f:84:a1:da:67:f6:f2:26:a9:ce:
                    4e:1b:20:53:5f:5b:74:a8:0a:c6:3d:65:06:c7:d2:
                    90:68:13:47:6d:da:80:9d:7b:4c:3b:39:64:73:2b:
                    c6:39:fe:9e:7d:25:20:04:24:61:e2:3d:85:ca:e6:
                    8c:0e:9a:28:56:c7:dd:9c:5c:a5:0e:91:f2:35:6a:
                    79:b2:6f:95:b9:b3:2e:58:0d:8c:f2:30:46:91:0d:
                    40:cc:95:ea:a2:de:8e:4c:ff:6e:2a:e5:48:31:a1:
                    21:57:67:20:bb:5f:11:fc:47:27:75:69:ee:01:3e:
                    5e:39:7b:41:44:2b:35:50:ee:4c:e7:6a:fd:da:80:
                    b7:5c:9e:12:dc:a3:1e:2c:a6:00:a0:8a:e0:11:f8:
                    e7:a0:c6:a5:87:d8:b7:fb:c1:e3:4f:cc:b4:53:0a:
                    82:55:67:ad:55:5a:46:77:47:32:e8:c2:ec:ee:34:
                    65:0c:aa:29:72:0b:34:47:a5:91:b3:80:bd:3d:e3:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:51:F8:BD:8F:90:D4:E7:4D:D3:81:C1:EF:B7:B5:71:77:38:33:4A
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32332d3233203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:09:8f:fe:14:e1:9d:09:8a:3c:ec:bc:78:34:50:6a:41:9a:
         06:2f:16:0b:3f:91:6b:40:a5:f9:e6:d0:0c:b8:04:4a:81:87:
         33:45:85:07:19:ab:c6:d2:b1:0a:bb:28:99:0b:6e:70:6a:28:
         6c:11:5e:65:a2:ff:0a:36:4e:63:eb:32:e5:ec:ca:c2:6d:0b:
         03:3e:eb:3d:2b:34:32:96:65:3d:c1:cb:9f:c4:d5:2d:d9:4b:
         ff:47:ba:7a:7b:f8:d9:4a:6f:54:0f:f5:50:09:cd:a6:22:ce:
         81:7d:7a:3e:34:18:b1:a2:0f:e6:ff:65:46:f1:cc:5d:89:3b:
         24:08:b2:eb:0a:c0:83:17:ed:f9:f6:85:d7:d4:39:b7:01:58:
         80:24:c6:cb:b0:48:1c:08:f5:ab:1e:45:29:a0:ce:04:67:3f:
         44:ac:40:d3:39:42:b1:1d:81:84:04:de:6f:08:19:e3:e1:2b:
         9f:76:28:0a:a2:48:35:9a:14:31:f5:e7:54:f8:18:92:00:87:
         8e:b8:15:84:67:a9:51:20:09:6b:fd:de:ef:45:94:5d:a3:b6:
         de:e1:1b:c9:ba:34:5e:99:3b:2c:91:cf:b8:c0:90:05:b2:6e:
         cd:9c:bd:b3:12:d6:a4:e8:3f:c3:46:6d:f2:1a:de:ec:33:27:
         10:5e:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org