Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3234203d3e20323636343533.roa
File:                     3137302e38332e33362e302f32322d3234203d3e20323636343533.roa (raw, json)
Hash identifier:          UIcCSOK886gefX1WBTUJmK5AZVqt621cgt44yr6ijDk=
Subject key identifier:   7A:0C:9D:DF:15:E5:DB:9E:72:EE:0A:24:94:A2:67:DE:65:1F:72:1E
Certificate issuer:       /CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
Certificate serial:       2098F39230A6FBB6324F32577797E4139098CAAE
Authority key identifier: 83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3234203d3e20323636343533.roa
Signing time:             Wed 09 Aug 2023 13:16:26 +0000
ROA not before:           Wed 09 Aug 2023 13:11:26 +0000
ROA not after:            Wed 07 Aug 2024 13:16:26 +0000
asID:                     266453
IP address blocks:        170.83.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:f3:92:30:a6:fb:b6:32:4f:32:57:77:97:e4:13:90:98:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
        Validity
            Not Before: Aug  9 13:11:26 2023 GMT
            Not After : Aug  7 13:16:26 2024 GMT
        Subject: CN=7A0C9DDF15E5DB9E72EE0A2494A267DE651F721E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:d8:ad:73:47:a8:00:f2:9d:15:65:e0:23:
                    e7:18:99:06:b3:a3:a8:9b:a3:30:14:18:a5:43:18:
                    dc:65:82:8d:9b:a5:e3:ce:e0:a1:10:a9:a2:33:4e:
                    b9:90:76:6c:00:98:58:c2:c4:28:67:74:4b:5a:bd:
                    f6:43:d3:41:5c:ed:53:9c:ca:00:81:9a:fb:52:cd:
                    2a:b3:f7:d5:60:66:0d:5f:b4:8d:09:48:12:b4:00:
                    00:66:4b:c0:b8:dc:a7:c2:f5:32:2c:07:54:3c:bd:
                    c3:41:c0:a6:7c:b9:a4:bd:5b:71:21:c0:e3:a0:b7:
                    69:61:a2:75:44:36:ff:fa:f2:2f:dc:c9:b2:54:fb:
                    81:34:42:d5:9e:a2:76:bd:4a:ff:b4:d0:21:42:b8:
                    a7:05:7f:03:d5:46:2a:b4:81:6f:13:b5:06:50:7a:
                    3c:6e:50:60:8a:af:ef:10:90:76:35:4f:e8:4c:f5:
                    8d:56:c9:ef:36:c5:2e:8c:ee:77:61:b0:e3:04:41:
                    e7:90:5b:0e:d5:e6:2f:83:95:6b:7d:a4:65:9a:e1:
                    79:0a:30:ec:7e:64:43:a9:74:bd:60:3a:b9:9a:6a:
                    b7:15:0b:4c:16:87:45:60:9c:30:94:71:93:3d:b8:
                    75:c3:2d:a2:d3:f8:a8:c1:4f:a5:de:ab:65:e4:12:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:9D:DF:15:E5:DB:9E:72:EE:0A:24:94:A2:67:DE:65:1F:72:1E
            X509v3 Authority Key Identifier:
                keyid:83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3234203d3e20323636343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:b9:56:cf:94:dd:a1:8b:10:4b:f8:ae:9b:5d:08:21:b8:
         0c:dd:6f:78:02:06:44:c6:42:fc:08:7a:62:a8:89:c8:b6:24:
         bb:c9:ac:d0:1c:e3:08:0b:80:02:8a:90:33:ad:38:f5:94:7e:
         dd:ed:7a:b1:c9:78:ac:d7:6c:ee:45:19:42:48:f3:f7:e1:7a:
         6b:c5:2d:d5:4e:5d:74:2d:08:82:bf:01:52:21:e8:37:37:b9:
         2f:ee:9e:95:41:a2:5a:41:3b:0d:61:b5:61:78:2e:93:3c:72:
         5c:28:d1:33:b0:b7:5c:4e:72:f3:98:6f:a1:fa:06:e6:de:d1:
         7e:1d:cb:2a:1b:21:40:fe:66:fd:b7:75:81:ca:2d:18:b8:6b:
         0e:c2:9d:a0:05:ad:b1:d5:f7:7d:13:2a:1e:bd:a0:6c:9c:f1:
         fc:a6:ed:a1:f3:26:88:3f:44:20:e3:85:31:f0:c8:59:77:18:
         4c:7c:19:67:fb:31:6d:f1:bb:cb:37:04:bd:b1:0c:d4:a0:19:
         d2:9f:9a:da:00:71:af:ce:33:0d:66:af:66:b1:35:62:44:76:
         4b:3a:fc:da:08:bc:e9:ff:a6:6e:74:db:a8:33:0f:19:3a:19:
         39:50:83:ec:36:04:ae:b3:8d:67:e6:5c:ff:ef:d4:01:07:fd:
         21:ea:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org