Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3234203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32322d3234203d3e20323636333033.roa (raw, json)
Hash identifier:          o0PBjHCmMe+xbmXZ0a7Tw36H8yUKh1EQIv49bkcjdRI=
Subject key identifier:   B6:55:9E:98:BB:AA:6B:8F:81:1C:EA:64:EC:5E:21:13:5C:56:E8:31
Certificate issuer:       /CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
Certificate serial:       2EC5FF31C7EF3FF97EE0D66D00710AC1541D4C7F
Authority key identifier: 3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3234203d3e20323636333033.roa
Signing time:             Fri 02 Sep 2022 01:20:33 +0000
ROA not before:           Fri 02 Sep 2022 01:15:33 +0000
ROA not after:            Fri 01 Sep 2023 01:20:33 +0000
asID:                     266303
IP address blocks:        170.79.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c5:ff:31:c7:ef:3f:f9:7e:e0:d6:6d:00:71:0a:c1:54:1d:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
        Validity
            Not Before: Sep  2 01:15:33 2022 GMT
            Not After : Sep  1 01:20:33 2023 GMT
        Subject: CN=B6559E98BBAA6B8F811CEA64EC5E21135C56E831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:57:11:8f:fd:7c:fb:48:6e:c6:86:b2:6c:
                    13:24:6b:93:ce:95:57:52:9e:02:af:a9:be:21:91:
                    fa:c2:3d:dc:8c:bc:60:74:28:d8:8f:87:92:69:5b:
                    75:ad:11:af:6b:22:87:e5:46:7e:ec:9d:6f:8d:26:
                    6b:5b:b0:12:e2:23:7d:20:ed:89:c0:cc:4c:77:a3:
                    bc:dd:88:4f:8b:92:4f:53:c5:7b:59:3b:1d:67:f3:
                    13:9a:7d:e8:2b:2e:49:a3:cb:91:4b:71:e1:e7:e3:
                    97:97:28:38:6a:b1:70:49:9a:a8:31:4d:dc:ab:3e:
                    3b:b9:ae:dd:85:05:8d:f1:47:fa:7e:d6:5d:e4:b1:
                    7a:a5:a4:7b:0d:a1:08:ce:1c:a2:7e:70:7d:93:03:
                    d2:7a:c1:d6:b8:4e:9c:7d:32:c7:54:28:a2:a5:97:
                    36:5b:a1:46:be:0a:f7:70:79:55:d9:35:9b:d6:b2:
                    cc:cd:9b:bf:ab:0f:b3:84:10:3b:41:e6:88:e9:d1:
                    12:ec:4a:f9:10:a1:02:dc:fc:65:7e:35:a8:0d:71:
                    14:d4:e1:1a:8c:32:41:5f:c3:6f:7f:b2:a3:a8:a4:
                    e2:1a:20:bf:91:0d:5e:b6:80:63:47:a3:7d:13:0b:
                    d5:9e:c9:a2:7a:42:22:a0:58:0c:e2:bc:b5:c5:0f:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:9E:98:BB:AA:6B:8F:81:1C:EA:64:EC:5E:21:13:5C:56:E8:31
            X509v3 Authority Key Identifier:
                keyid:3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3234203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:a7:3c:a8:2b:ff:f6:d2:49:e4:85:07:db:0c:f4:e2:e0:
         eb:05:ab:78:87:67:bb:56:f9:d3:87:53:44:17:61:60:f6:f0:
         54:c6:1c:9d:bb:b5:3c:e2:52:3f:a8:68:d5:d0:d5:13:5c:4f:
         76:e1:12:7d:d4:05:9d:f2:6e:cd:aa:77:2d:28:b4:c7:36:78:
         cb:00:89:08:8d:2e:3b:ab:c7:cd:ae:ab:cc:21:39:04:a7:b6:
         90:7b:ad:33:0d:3a:99:e8:78:1a:ee:7a:08:15:c9:85:d3:5e:
         3b:61:85:90:9a:a7:20:00:96:7d:6f:e8:48:7a:d3:c0:d9:df:
         f3:6e:f6:dd:ba:b9:b4:d2:d2:83:f0:e3:ca:a6:ef:9f:57:31:
         6e:bd:6b:3b:59:95:8e:36:5b:aa:83:8a:79:6a:f9:38:d2:b0:
         56:d7:16:f5:2f:27:9e:24:46:30:e8:28:59:67:b2:df:1f:bf:
         c1:a2:8d:ac:02:42:f6:33:9e:79:76:d8:7c:30:67:0f:41:fe:
         b1:95:00:46:a1:64:dc:87:66:b5:e8:28:e4:e2:38:87:27:63:
         9c:fd:d7:04:5f:64:96:6c:8d:86:d8:29:29:b0:a1:a7:f9:45:
         1e:47:00:e2:19:26:cc:a4:2a:ca:9f:29:92:a4:c4:bb:1e:16:
         3d:08:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org