Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3137302e38302e36382e302f32322d3233203d3e20323633393035.roa
File:                     3137302e38302e36382e302f32322d3233203d3e20323633393035.roa (raw, json)
Hash identifier:          MuADpHATZ8Kqm0QejrEkMkVxNcTZYtR0QLdW0EjZXTY=
Subject key identifier:   C5:71:92:8A:86:1A:B1:9A:B9:8E:4F:6E:12:D0:C2:96:D7:FD:1F:6C
Certificate issuer:       /CN=DB85262D118B08D63F7DAED3E4A17DAC17432A79
Certificate serial:       6AC5FC86ACF8F101802D8C5914A5130AF6797C99
Authority key identifier: DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3137302e38302e36382e302f32322d3233203d3e20323633393035.roa
Signing time:             Fri 06 Jan 2023 19:53:25 +0000
ROA not before:           Fri 06 Jan 2023 19:48:25 +0000
ROA not after:            Fri 05 Jan 2024 19:53:25 +0000
asID:                     263905
IP address blocks:        170.80.68.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:fc:86:ac:f8:f1:01:80:2d:8c:59:14:a5:13:0a:f6:79:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85262D118B08D63F7DAED3E4A17DAC17432A79
        Validity
            Not Before: Jan  6 19:48:25 2023 GMT
            Not After : Jan  5 19:53:25 2024 GMT
        Subject: CN=C571928A861AB19AB98E4F6E12D0C296D7FD1F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:77:58:c4:1e:5c:d2:e5:4d:bb:8d:12:97:
                    e0:ae:07:b9:3e:5a:c6:43:f5:99:30:96:22:41:b5:
                    82:ab:fe:2b:97:fa:c3:fe:db:01:0d:1a:a6:d8:2d:
                    91:03:5a:fd:77:fc:51:37:de:18:10:44:2d:9e:c9:
                    93:a1:1f:5d:3f:a2:2f:34:a8:ec:be:ff:bd:c8:e9:
                    42:d1:ce:cd:0f:aa:62:83:21:1b:39:29:ae:07:d6:
                    e1:9f:9c:9c:9f:67:45:3b:c9:bc:b6:a7:e9:54:75:
                    65:af:09:e6:e6:8a:7f:3b:d0:71:e3:95:ee:a5:75:
                    99:68:89:9e:b0:53:9c:39:c9:3a:6d:3e:85:79:d1:
                    18:f2:ec:c2:32:fd:92:5e:d4:87:2f:22:02:5a:5e:
                    cb:4d:1e:9d:df:0e:e6:70:7e:f6:7f:a9:5e:0b:e3:
                    16:d4:56:bf:6b:3f:f4:13:69:dd:9e:d6:ab:4d:5d:
                    93:94:35:62:e2:ff:99:c3:8c:e3:5b:9a:7f:4a:61:
                    60:25:8b:06:53:e8:ee:12:af:9d:5a:22:68:7b:9a:
                    d9:1d:b7:74:6c:71:4b:9e:8c:33:af:77:63:c8:65:
                    15:d6:97:03:2a:6d:0d:12:20:15:b1:47:70:8a:fc:
                    70:82:b0:51:4d:59:d9:d7:68:9d:e0:a6:e1:d4:12:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:71:92:8A:86:1A:B1:9A:B9:8E:4F:6E:12:D0:C2:96:D7:FD:1F:6C
            X509v3 Authority Key Identifier:
                keyid:DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3137302e38302e36382e302f32322d3233203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:36:9d:9c:79:33:2f:dd:47:a3:ad:c7:04:b7:8a:8d:33:62:
         e6:53:6a:b1:82:ab:ff:cd:ee:e4:79:bb:a5:ad:b3:48:86:1f:
         c7:11:1c:10:43:2f:75:84:3f:43:25:fe:fb:68:a3:79:89:37:
         f4:32:4f:6b:53:06:43:6e:68:e8:2d:96:5a:92:d0:9a:e4:de:
         83:15:bc:42:1f:af:04:98:e3:bd:78:ed:3d:8c:a7:0b:e4:50:
         f9:29:34:49:7e:fa:2b:04:7b:ab:d6:49:99:2e:c8:24:19:3e:
         a2:12:3f:88:1d:e4:86:ec:e3:42:94:62:3b:4a:4e:ca:18:cd:
         6c:b3:94:ef:de:b6:bd:e2:e0:5b:0f:1f:85:09:48:25:b0:c2:
         29:f2:08:b6:de:c3:73:3e:15:d8:62:8b:d7:39:3e:c2:ba:6c:
         15:4f:42:6f:2b:a4:b9:83:5c:55:7b:6e:b3:27:e7:5c:b1:a5:
         3e:0f:0b:c7:9f:bb:84:d2:75:66:cd:ea:05:18:57:20:b1:ea:
         8a:e7:4d:20:02:14:66:37:d1:54:9b:2d:9d:e9:9c:b8:7c:94:
         17:ed:9e:ff:ed:26:59:06:bc:94:7e:b7:c7:fc:b1:70:13:71:
         74:52:b6:1f:b5:70:9f:7e:32:f3:9c:82:46:57:8b:6e:a2:36:
         d0:0f:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org