Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38352e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          IWrX1kh+kV72SRILerFFyD6kDWUw+voF9nFIma0LoI4=
Subject key identifier:   9E:89:E0:9D:65:3E:7D:B3:6E:2B:4C:05:13:AF:B4:26:34:D4:14:1B
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       7A29DBADB63DC472B2B6C63305FBB5CD7D4CC707
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:51 +0000
ROA not before:           Fri 23 Jun 2023 20:01:51 +0000
ROA not after:            Fri 21 Jun 2024 20:06:51 +0000
asID:                     264996
IP address blocks:        170.84.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:29:db:ad:b6:3d:c4:72:b2:b6:c6:33:05:fb:b5:cd:7d:4c:c7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:51 2023 GMT
            Not After : Jun 21 20:06:51 2024 GMT
        Subject: CN=9E89E09D653E7DB36E2B4C0513AFB42634D4141B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:9b:85:c4:91:ee:22:ad:99:b0:aa:43:70:
                    b8:78:1f:6f:69:f5:2b:d0:75:de:90:09:b2:01:62:
                    76:ee:f0:c9:d2:5c:4c:af:37:70:42:9d:a2:de:2a:
                    30:c0:9f:88:ac:ab:24:2a:97:70:c2:9a:91:c6:c6:
                    fd:ad:05:33:1c:1a:1a:40:e6:98:28:9c:19:7b:15:
                    15:d4:81:56:7b:81:09:02:15:f6:17:e6:55:14:81:
                    40:81:87:98:26:20:0e:fe:cf:93:62:6d:46:30:48:
                    f6:84:3a:f9:a1:52:93:a9:23:ac:29:7f:3e:98:e3:
                    34:c4:b8:65:89:bc:b8:18:69:d5:29:9e:2f:b5:30:
                    3f:44:18:da:76:94:81:fb:64:9d:39:4e:df:f8:6a:
                    a5:06:ef:ac:11:e8:99:a6:ef:c3:34:b2:fc:9c:6f:
                    e1:c0:26:55:04:0b:6c:7e:20:a8:5e:af:22:40:e6:
                    2f:29:d7:bd:9b:bb:dc:86:fb:28:97:53:06:4d:ed:
                    59:c1:62:13:56:ed:1c:5c:be:c8:38:08:e8:f3:d6:
                    05:2a:1b:fa:32:21:58:b9:64:63:25:ef:1a:1d:b7:
                    e6:17:e1:7d:16:c7:6f:16:d1:a4:64:cc:99:20:26:
                    90:5f:c0:8f:52:94:6b:ae:a0:53:76:d9:5d:ee:ac:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:89:E0:9D:65:3E:7D:B3:6E:2B:4C:05:13:AF:B4:26:34:D4:14:1B
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:bf:b4:9c:65:6d:c6:73:fb:da:95:6c:0f:77:0f:be:3c:
         e4:91:50:36:97:2d:0d:40:8a:f1:4c:43:c6:9c:ed:72:5e:d7:
         0c:31:2d:b0:c1:2b:74:ed:a7:fb:b0:ee:fc:dc:45:55:1c:fb:
         96:e8:fb:a2:a5:85:9d:c8:c5:eb:c5:e7:4c:dc:34:39:64:3e:
         88:23:d7:e3:2e:b7:05:b7:af:10:68:04:28:70:a2:18:be:b7:
         24:81:eb:74:66:a8:77:c4:82:43:cb:da:90:10:7c:b5:68:3b:
         e2:14:40:20:84:30:e3:fd:61:24:07:74:93:c7:70:1f:e9:e2:
         36:5f:d8:2f:28:ed:f8:b6:ba:b7:e9:1d:10:be:c2:d9:5f:a1:
         88:a5:5a:bf:b3:e8:b1:f3:7b:55:30:ae:69:b2:46:19:16:7e:
         f5:86:ed:25:2c:a4:00:b5:57:23:08:a2:54:17:88:71:8e:67:
         7b:b3:1d:1a:3a:7b:f3:ff:c2:fb:b6:ac:9c:17:b4:60:fd:68:
         c5:3e:d8:78:c7:6f:0b:b5:af:e8:99:56:3f:e5:68:c9:f4:9c:
         72:29:be:f2:b0:80:e2:bf:bb:e8:7e:38:53:c1:7b:c4:a5:b1:
         91:f5:87:ad:17:5c:22:f5:71:c9:9e:5c:e2:17:d5:eb:cb:5d:
         66:fb:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org