Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32332d3233203d3e20323636333533.roa
File:                     3137302e3233392e3134322e302f32332d3233203d3e20323636333533.roa (raw, json)
Hash identifier:          Q/n6sMOyxHcGjnqMXiJrCg7801jSUL1qIhlqgETWWUs=
Subject key identifier:   89:BE:99:D1:09:12:EE:A9:51:FD:EC:5A:BB:A0:9B:23:13:39:77:A4
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       04555E782FED3F721A40171CC6C5C87A8B792F32
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32332d3233203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 20:00:01 +0000
ROA not before:           Wed 27 Mar 2024 19:55:01 +0000
ROA not after:            Wed 26 Mar 2025 20:00:01 +0000
asID:                     266353
IP address blocks:        170.239.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:55:5e:78:2f:ed:3f:72:1a:40:17:1c:c6:c5:c8:7a:8b:79:2f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 19:55:01 2024 GMT
            Not After : Mar 26 20:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:89:20:6d:8f:e4:a2:4c:65:83:a4:fd:a2:
                    ae:b0:01:c6:2b:9b:60:3b:e8:dd:f8:e0:12:2c:d1:
                    e7:db:31:44:43:c9:c5:a3:4c:24:06:70:67:a0:27:
                    32:6f:48:16:2c:d7:58:6d:ba:22:e3:a7:4b:67:0c:
                    3f:4c:e5:3a:0e:a5:92:91:ce:4c:b8:b6:12:c9:3c:
                    ac:aa:32:36:97:70:da:b9:10:37:f4:9b:d5:70:3a:
                    59:74:70:f8:3e:fc:d8:58:9c:8b:65:d3:30:94:49:
                    78:6b:aa:4e:4b:7b:42:88:b5:b8:aa:3d:34:7b:ef:
                    6c:ac:7e:ba:87:df:ab:ee:d3:64:d0:eb:a6:27:d5:
                    d0:a6:d7:d1:a5:77:d2:73:6f:94:62:3a:6e:bf:91:
                    15:ce:c9:b8:7f:4a:fb:01:45:48:bc:bc:f4:27:ab:
                    e6:10:f9:96:93:9a:55:e2:bb:88:91:7b:9f:1d:20:
                    22:49:86:30:bf:f8:3d:6c:e3:08:80:9e:25:8a:8c:
                    26:41:e5:6e:d5:8f:bc:06:45:cf:bd:51:f1:37:03:
                    95:68:61:d1:e4:b3:14:27:d2:22:71:e3:79:4d:e2:
                    4b:b9:1c:39:f5:03:d0:27:e7:7a:5c:4e:67:25:2f:
                    df:00:2d:61:bc:22:5b:2e:11:bb:5f:93:42:0b:ae:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BE:99:D1:09:12:EE:A9:51:FD:EC:5A:BB:A0:9B:23:13:39:77:A4
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32332d3233203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:91:2b:32:0b:d3:ab:1e:ca:bf:e5:25:9b:01:38:2e:40:
         63:05:83:67:bc:15:c7:41:d8:f8:aa:f2:cd:b6:39:97:e4:e0:
         2e:18:27:2a:74:19:3f:84:a2:e1:8f:89:f6:16:93:ba:96:23:
         8b:14:91:fc:f9:8d:4f:26:89:96:50:2e:38:9e:63:07:82:1d:
         aa:b6:e3:ff:b8:d5:29:84:b2:aa:e6:ab:52:14:2a:d6:33:18:
         45:18:fa:a8:ed:72:d2:e4:bc:d1:e1:25:5e:e4:89:91:d1:09:
         16:2e:eb:71:af:82:4d:0b:91:fd:c2:45:7f:3a:99:0e:8a:52:
         b1:ab:10:fc:f6:d0:43:fe:c4:b4:b6:e9:43:31:50:b9:e3:be:
         1e:cf:bf:b4:c6:1d:a0:5a:51:70:e2:2f:f0:e0:5d:47:9b:43:
         e0:d2:6e:8b:5a:80:c6:2b:7e:ef:e9:00:0d:7a:84:b9:31:81:
         d4:88:8c:ea:a1:42:bc:4b:0a:49:34:34:83:af:ed:38:c7:12:
         1f:37:87:3e:b2:b2:9b:e9:c5:99:1e:c3:4d:57:cb:08:5a:e6:
         29:02:03:ff:64:50:b4:7c:82:a5:f7:38:bb:62:06:51:02:ef:
         29:c2:08:45:04:6e:ae:db:ce:fb:80:8c:c7:02:ba:fb:9c:7e:
         35:88:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org