Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa (raw, json)
Hash identifier:          WvV9RiKHxNa0nOZcnpW9uj110LHXc+9Oy+jHDaUqYFk=
Subject key identifier:   2A:5A:A4:9D:32:DF:83:0E:B8:DC:44:6B:D9:68:42:BF:F5:C0:35:9B
Certificate issuer:       /CN=DE93C72F22244480C517BC4501B196642FEC83A3
Certificate serial:       1DB83D2C3D6EFD43304FF036B88A389525E4C25D
Authority key identifier: DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa
Signing time:             Sat 16 Mar 2024 14:38:34 +0000
ROA not before:           Sat 16 Mar 2024 14:33:34 +0000
ROA not after:            Sat 15 Mar 2025 14:38:34 +0000
asID:                     266303
IP address blocks:        170.79.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b8:3d:2c:3d:6e:fd:43:30:4f:f0:36:b8:8a:38:95:25:e4:c2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE93C72F22244480C517BC4501B196642FEC83A3
        Validity
            Not Before: Mar 16 14:33:34 2024 GMT
            Not After : Mar 15 14:38:34 2025 GMT
        Subject: CN=2A5AA49D32DF830EB8DC446BD96842BFF5C0359B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:f6:a0:1e:e4:95:63:15:ae:34:47:a4:f5:
                    31:f1:d6:ff:59:74:d6:68:05:9c:fe:9d:d3:3d:da:
                    02:9f:bf:98:0e:91:e7:e4:fd:55:59:31:e6:38:1b:
                    94:f4:a2:6b:f2:17:6a:c8:91:35:3c:52:e3:94:9c:
                    8a:55:dd:40:ed:3e:61:e3:0d:aa:63:1e:d4:3f:24:
                    0c:30:2d:e8:93:5f:3c:52:de:4d:13:6f:8b:4c:f8:
                    d5:cf:0b:79:4b:d1:84:a7:61:a8:f8:73:f5:0e:bd:
                    ba:89:10:a0:b0:10:ad:77:55:0f:61:59:ff:48:a3:
                    18:91:96:bb:7e:85:7f:c8:df:75:19:91:a1:a8:75:
                    51:4c:68:47:48:f3:5b:0d:40:0b:e0:ef:20:98:21:
                    2c:c0:9b:78:85:14:d0:9b:88:d9:0e:09:8c:a3:2b:
                    ed:0a:0e:2e:1b:c1:68:88:e6:5e:94:46:94:7c:f4:
                    d4:ec:c2:16:b3:70:2a:41:70:b4:a6:82:57:ed:54:
                    27:a6:89:74:bc:5d:33:91:02:2f:2e:f5:a1:08:ab:
                    4f:aa:a9:a4:3e:38:8e:c1:ca:5c:00:70:80:7e:6a:
                    58:c3:29:8e:c5:0d:f5:44:65:6f:45:8c:96:f2:2e:
                    86:10:f8:9d:90:ad:ee:6c:45:89:0b:a5:e3:d2:13:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5A:A4:9D:32:DF:83:0E:B8:DC:44:6B:D9:68:42:BF:F5:C0:35:9B
            X509v3 Authority Key Identifier:
                keyid:DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:bf:44:11:8b:29:34:5e:b3:81:c4:27:c8:84:bd:07:4b:
         6e:a4:33:3d:5b:94:74:32:0b:b7:45:5e:bb:9a:56:b8:5d:ca:
         5d:b4:51:35:fc:74:cf:88:cf:e0:52:6d:7e:28:6d:7c:07:62:
         43:39:67:66:95:16:74:d6:f8:c5:69:84:23:86:9e:58:e6:fa:
         34:95:f3:70:0d:36:f3:c9:19:36:23:5f:df:b9:91:40:fb:c7:
         11:32:f3:4d:6a:b9:75:cd:9a:55:80:6e:d7:82:6c:a2:28:4c:
         2f:3b:c7:cc:7a:f5:b9:dc:42:da:6c:b2:d1:4e:41:b4:c3:fb:
         b8:eb:2f:1e:e1:6f:cd:21:78:81:0a:0b:3d:6b:e2:21:98:c9:
         e5:7f:90:a6:c8:4c:04:e2:4d:36:f9:ea:ed:df:62:8e:73:00:
         38:23:0c:dc:59:36:7d:c0:1a:48:39:39:38:d4:a6:fe:f3:05:
         dd:cc:cb:51:8b:ce:5c:6d:dd:7e:ee:d3:45:e7:8d:ab:94:60:
         aa:f1:59:44:8b:40:aa:0c:53:f6:0c:76:a2:a5:11:e5:a4:aa:
         5f:20:e4:74:52:3c:78:6d:5d:e1:0a:a3:25:cd:c1:f0:da:28:
         20:7d:51:7f:b0:b2:e8:a3:48:d1:49:ac:ce:b7:ea:11:86:9e:
         21:d0:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org