Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier:          iSz/oJalzeE7cRRife9FEmNgKrCnmlgkgYrpwZR7Kec=
Subject key identifier:   9A:DF:FF:08:58:F8:06:E8:B7:53:C7:45:B6:AE:3F:BF:09:B0:BE:6B
Certificate issuer:       /CN=DE93C72F22244480C517BC4501B196642FEC83A3
Certificate serial:       3561E744A77816C059D3477A37689CA73F7EE667
Authority key identifier: DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
Signing time:             Sat 16 Mar 2024 01:55:58 +0000
ROA not before:           Sat 16 Mar 2024 01:50:58 +0000
ROA not after:            Sat 15 Mar 2025 01:55:58 +0000
asID:                     266303
IP address blocks:        170.79.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:e7:44:a7:78:16:c0:59:d3:47:7a:37:68:9c:a7:3f:7e:e6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE93C72F22244480C517BC4501B196642FEC83A3
        Validity
            Not Before: Mar 16 01:50:58 2024 GMT
            Not After : Mar 15 01:55:58 2025 GMT
        Subject: CN=9ADFFF0858F806E8B753C745B6AE3FBF09B0BE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:ce:3f:5e:19:e1:d4:33:57:f4:b9:56:4d:
                    fd:67:c1:ea:b2:51:c9:10:01:76:f4:aa:d7:a1:8c:
                    e1:09:b0:67:3a:12:0d:d5:e9:a9:63:cb:cc:71:19:
                    31:d7:92:46:70:91:70:5f:67:bb:97:f2:b3:95:92:
                    c8:54:89:34:16:bb:76:6c:c7:93:b8:e6:23:cc:c4:
                    aa:1d:7e:e0:14:3a:b9:f1:be:8f:f2:9f:ac:3f:fe:
                    9d:83:be:c2:42:86:9f:22:d6:89:f3:3b:21:72:6a:
                    19:34:6f:3a:48:25:7a:cf:e5:d2:46:75:a5:6c:cb:
                    66:20:c7:42:7d:5a:b9:0c:77:69:ff:46:cd:78:12:
                    a7:74:1f:a0:19:18:a7:fe:b8:53:63:32:a0:a9:f5:
                    08:d5:8a:18:56:a5:51:ae:58:d3:55:d9:8d:ff:85:
                    fd:3b:11:51:51:a4:77:25:4a:84:21:38:a4:a3:7e:
                    e5:8f:c3:e2:b3:0c:4a:61:05:e2:a8:61:3b:00:9d:
                    db:2d:f7:d2:22:c0:5d:d5:8c:72:b3:9c:d9:33:1b:
                    b6:5a:66:f9:a0:5a:5b:67:35:3d:eb:95:fe:af:a2:
                    79:77:e1:d7:c9:7c:b7:0b:53:6a:a6:aa:6e:92:09:
                    d0:29:ea:ec:37:cf:79:e0:cd:c9:a3:3c:f7:31:b5:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:FF:08:58:F8:06:E8:B7:53:C7:45:B6:AE:3F:BF:09:B0:BE:6B
            X509v3 Authority Key Identifier:
                keyid:DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:00:32:75:aa:89:ec:9c:c6:3a:66:7d:5e:7d:5e:cd:68:61:
         3b:11:2f:8f:78:67:f2:72:da:76:e1:75:2a:0d:de:2c:7a:85:
         a3:00:e7:48:74:73:31:00:b0:68:d3:d9:fb:e8:29:49:e8:98:
         6a:6d:90:0e:48:02:fb:f9:dd:d4:7b:b8:2d:31:79:8b:28:20:
         6a:4a:88:42:76:5c:87:47:99:81:36:39:cd:20:a2:c4:36:6b:
         1a:d1:a1:20:b6:d3:0e:ca:6c:61:4e:3a:6f:d8:7a:9b:a8:0f:
         84:51:23:f0:5a:29:00:dc:ad:59:da:09:8e:81:82:98:81:10:
         0c:e9:1b:73:f1:a4:58:70:0b:15:0f:82:cf:cf:94:87:ea:18:
         5f:80:b3:f8:93:c0:75:83:d0:83:25:4f:10:24:33:a7:0f:6f:
         cd:a8:67:a9:13:08:a2:65:d6:f1:0f:09:3b:53:ce:e4:66:36:
         65:d8:f5:3c:c6:23:87:ad:8e:49:04:e7:9d:70:e5:9b:24:66:
         ab:91:90:32:b3:2a:9d:ce:d1:9d:52:83:ae:f3:f9:8e:35:b2:
         f7:21:05:b1:aa:42:ab:00:31:86:0e:6f:46:ea:6f:82:09:6c:
         a2:a7:0b:10:72:be:77:ed:8f:be:51:77:c1:03:ad:1a:a6:61:
         18:c4:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org