Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32332d3233203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32332d3233203d3e20323636333033.roa (raw, json)
Hash identifier:          Zs39QfWLOVwSzMAEmQ1UnOPjRicgTi8BBMAt7DruCE4=
Subject key identifier:   4B:67:D2:A2:22:CA:35:91:47:51:DA:0A:82:15:A5:5A:A1:DA:FE:8D
Certificate issuer:       /CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
Certificate serial:       72D635938488745DD86F61516C97949C17981495
Authority key identifier: 3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32332d3233203d3e20323636333033.roa
Signing time:             Thu 27 Oct 2022 19:35:11 +0000
ROA not before:           Thu 27 Oct 2022 19:30:11 +0000
ROA not after:            Thu 26 Oct 2023 19:35:11 +0000
asID:                     266303
IP address blocks:        170.79.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:35:93:84:88:74:5d:d8:6f:61:51:6c:97:94:9c:17:98:14:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
        Validity
            Not Before: Oct 27 19:30:11 2022 GMT
            Not After : Oct 26 19:35:11 2023 GMT
        Subject: CN=4B67D2A222CA35914751DA0A8215A55AA1DAFE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:b8:d0:40:b1:a0:87:5e:d6:6b:ef:b4:d9:
                    6a:0a:bf:d7:57:7c:f5:29:0c:77:3d:55:f4:9b:3e:
                    1b:21:43:ae:3d:0e:f9:a3:1f:99:ff:7b:bd:1e:3c:
                    b6:46:a0:f3:9e:d0:94:21:ea:45:67:02:73:6e:b4:
                    50:1a:fe:7b:9d:f2:6e:13:6b:ce:00:29:db:1c:5f:
                    e6:14:a5:36:c9:c7:3a:05:a3:e0:aa:f0:f9:64:a2:
                    1e:36:0f:63:81:29:1e:bd:bd:7f:8f:ae:bc:3b:16:
                    8c:ce:68:05:42:70:7c:33:1c:a8:83:21:22:83:ff:
                    f0:ad:0b:6d:1d:60:dd:23:e0:f3:b2:88:c5:05:9f:
                    6c:af:1d:3f:0d:e1:95:46:db:84:79:41:70:88:15:
                    9c:e0:26:58:0d:ac:5b:0d:d9:0d:61:72:d8:4f:8e:
                    fe:4d:a7:95:2c:68:57:3c:0a:7c:55:52:3e:82:d6:
                    4a:e0:2e:64:35:88:da:f5:84:74:71:6c:81:6f:eb:
                    33:0e:cf:25:74:ed:1b:7d:fe:fa:0d:ce:54:ae:07:
                    4c:9c:82:f4:09:9f:47:0a:bd:85:7b:0a:8e:a4:cb:
                    37:19:f9:ae:56:1d:37:4c:d6:48:4b:aa:10:f9:bb:
                    56:69:88:f2:7a:ef:f4:10:51:fe:b7:53:7e:90:a0:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:D2:A2:22:CA:35:91:47:51:DA:0A:82:15:A5:5A:A1:DA:FE:8D
            X509v3 Authority Key Identifier:
                keyid:3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32332d3233203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:e8:66:9a:87:6b:9c:d5:ec:b9:45:91:e9:b6:2e:bb:4a:
         8e:a1:bd:0b:3b:f6:20:cb:3f:96:39:ca:f9:7a:eb:d0:36:e8:
         fb:e4:10:fa:e4:c2:95:15:f4:b3:46:5b:f4:79:8d:16:b7:26:
         1a:a4:37:24:14:1e:5f:57:59:b2:65:7a:7d:81:71:aa:15:f4:
         08:1d:b5:28:35:b8:10:8d:a0:e8:98:8c:08:09:3a:cf:62:33:
         02:dd:3f:55:7a:b7:1b:ca:17:66:67:3c:c3:fc:42:ea:96:b6:
         aa:d9:7b:34:68:e8:43:a6:f7:4c:e1:10:5b:2c:8c:a1:22:fc:
         57:f7:aa:b7:75:24:fa:fb:dd:2c:b0:da:20:42:4e:18:f3:48:
         36:6a:a6:89:ab:7e:79:87:46:9b:1f:99:60:e8:6f:0a:7f:f6:
         f4:b8:38:55:47:18:0e:63:0f:64:11:18:54:11:73:16:07:f3:
         84:61:84:7e:77:a5:f5:e8:9e:69:3c:71:09:d4:90:55:ff:31:
         37:df:5d:12:a4:56:b7:5c:15:9c:6a:c0:4f:78:15:0d:57:d6:
         99:2f:87:6b:40:81:36:32:51:ca:cc:a1:28:7d:e1:d1:dc:96:
         f0:2f:dc:f8:24:12:c0:37:9c:b9:ae:85:e0:39:e5:82:3f:fc:
         67:a8:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org