Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32332d3233203d3e20323634393936.roa
File:                     3137302e38342e38362e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          FLOzUEp5Xf5FlLV9j+Y3BMiEkvB8y3844L25CxAPqw0=
Subject key identifier:   ED:33:25:59:99:96:8A:2E:9E:28:E3:CE:FA:1F:B2:63:07:E1:53:CF
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       6BCAC5E1053B732ED6A398906342EBD74E3E6D7D
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32332d3233203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:49 +0000
ROA not before:           Fri 23 Jun 2023 20:01:49 +0000
ROA not after:            Fri 21 Jun 2024 20:06:49 +0000
asID:                     264996
IP address blocks:        170.84.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ca:c5:e1:05:3b:73:2e:d6:a3:98:90:63:42:eb:d7:4e:3e:6d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:49 2023 GMT
            Not After : Jun 21 20:06:49 2024 GMT
        Subject: CN=ED33255999968A2E9E28E3CEFA1FB26307E153CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:b7:68:3c:1e:d0:8d:35:98:a9:a6:93:4c:
                    b4:c7:01:d4:ff:54:a4:13:fc:51:4e:e4:2f:d7:af:
                    07:4c:48:8a:33:f0:7c:2b:59:18:8a:25:f9:e3:65:
                    dd:79:2c:a3:c1:ff:3c:73:ca:ce:02:d1:2a:1d:aa:
                    02:90:e6:a3:13:54:47:e7:d9:da:f3:ec:ea:d0:e0:
                    d9:15:a8:dc:29:1b:1c:14:b8:62:00:a3:54:40:b8:
                    2e:e5:8e:17:d7:bb:61:e8:fc:12:a3:39:f8:6f:67:
                    34:f1:f1:5e:9f:ed:e2:88:40:ed:30:c6:78:c2:3a:
                    a1:a0:c0:8b:a6:cb:97:6a:f8:62:aa:75:99:29:1b:
                    24:de:72:f6:45:8a:4b:82:49:e3:f2:aa:59:73:65:
                    dc:4b:4f:84:bb:0e:a3:a7:ec:ac:f3:93:3e:7b:d4:
                    7b:50:07:3e:b2:7d:06:cc:e9:e1:b7:2c:51:cd:e3:
                    6b:c5:4b:3f:94:1b:f2:05:7d:f9:48:49:54:0c:51:
                    44:01:52:a8:ba:57:e7:07:5d:50:77:d2:68:89:6f:
                    9b:a4:8d:e7:04:54:5a:7d:e5:e4:a7:71:19:4d:ea:
                    2a:72:b0:84:f2:9e:a3:ae:2b:8c:d1:68:27:37:5b:
                    76:ca:5d:31:1a:df:a3:e7:8d:97:a6:47:b1:bf:41:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:25:59:99:96:8A:2E:9E:28:E3:CE:FA:1F:B2:63:07:E1:53:CF
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:be:9c:de:c2:ef:19:b0:7c:2f:82:30:2c:16:55:ca:e0:a5:
         bd:74:43:f3:8f:a1:9a:4e:a1:c7:2c:77:17:82:49:12:28:4f:
         d3:4d:1e:74:3f:ff:2d:b1:a7:33:d3:af:4a:8e:14:0f:ad:88:
         c9:29:a7:5b:ca:bf:5e:a7:7c:18:9e:a7:6f:54:8c:10:d9:da:
         2a:09:bc:ec:b1:9a:15:8c:5a:8e:04:af:c6:b0:7e:ae:6f:af:
         65:fd:93:34:45:2c:cf:51:02:c3:31:3e:68:5e:21:cd:05:3f:
         0e:a4:b1:0e:fa:b9:d6:a6:d9:73:fd:c6:20:6f:7e:96:43:1b:
         ac:d5:40:d0:93:3b:69:c9:15:49:54:47:f6:86:7f:33:0a:e7:
         43:29:20:37:80:fd:ee:fb:96:41:ca:89:01:70:5b:5c:db:e6:
         4f:39:bc:e5:b8:ec:cc:e7:31:0f:96:76:b1:73:c0:ff:98:ad:
         b7:06:68:44:50:0b:de:37:19:a3:24:e0:f8:0f:f4:ed:33:b6:
         e1:79:38:9f:c3:6d:1b:49:a8:6a:67:e4:17:02:70:ea:70:27:
         5d:bf:44:c8:df:d2:79:a4:7e:8f:8e:49:43:22:29:3a:e9:6b:
         22:f4:26:27:e1:e6:7b:d0:c8:53:3d:fb:35:72:e6:19:96:17:
         84:40:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org