Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z1STqpT8tBA1xAsn5nbAbLZicNmHKEXwSPFuVckNpHv/0/3137302e3233382e33362e302f32322d3332203d3e20323636333234.roa
File:                     3137302e3233382e33362e302f32322d3332203d3e20323636333234.roa (raw, json)
Hash identifier:          2doOyGOmF+GQg9nmh+krmhNvCsYW5hVSgLft202N2a4=
Subject key identifier:   DF:B9:F8:DC:86:E4:60:BC:2B:51:03:22:3B:97:A2:2A:AB:F3:87:C7
Certificate issuer:       /CN=74E58BB6811C76DFE33942F5C7AE3F217E59725C
Certificate serial:       5216AE9D77F5F569570E208B7035F11059E78283
Authority key identifier: 74:E5:8B:B6:81:1C:76:DF:E3:39:42:F5:C7:AE:3F:21:7E:59:72:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E58BB6811C76DFE33942F5C7AE3F217E59725C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z1STqpT8tBA1xAsn5nbAbLZicNmHKEXwSPFuVckNpHv/0/3137302e3233382e33362e302f32322d3332203d3e20323636333234.roa
Signing time:             Sat 17 Jun 2023 01:10:17 +0000
ROA not before:           Sat 17 Jun 2023 01:05:17 +0000
ROA not after:            Sat 15 Jun 2024 01:10:17 +0000
asID:                     266324
IP address blocks:        170.238.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:16:ae:9d:77:f5:f5:69:57:0e:20:8b:70:35:f1:10:59:e7:82:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E58BB6811C76DFE33942F5C7AE3F217E59725C
        Validity
            Not Before: Jun 17 01:05:17 2023 GMT
            Not After : Jun 15 01:10:17 2024 GMT
        Subject: CN=DFB9F8DC86E460BC2B5103223B97A22AABF387C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:a7:93:33:05:cb:25:79:9f:98:c4:ed:cf:
                    d6:7f:bc:9b:19:76:99:a1:c0:2e:12:c5:29:ab:06:
                    95:fc:c4:ec:8f:ea:2b:93:8a:97:2c:f7:56:e3:0f:
                    aa:3d:88:d7:bd:62:88:22:ed:2c:61:ca:d5:b3:fa:
                    e5:ab:f3:4f:98:85:39:da:65:6f:c2:56:bf:d6:fa:
                    f2:a8:15:3b:f1:b9:84:45:08:ba:86:ce:d2:25:17:
                    23:28:25:14:f0:d3:fa:d1:7c:ee:38:b1:cf:b9:4a:
                    fe:fe:7e:ed:d9:c9:f0:08:9e:a7:9c:95:6f:ef:2b:
                    51:da:c8:56:8a:8e:a3:25:db:a0:27:51:77:be:1f:
                    1c:8d:a5:36:ff:69:e0:f8:ad:d0:e5:e9:00:e0:c8:
                    4c:66:bd:ab:9f:90:f9:3d:c3:44:0d:c5:be:c8:4f:
                    b9:f5:e9:49:39:ef:58:af:36:85:5d:5b:01:5e:21:
                    19:90:2c:2b:0a:e4:9c:9a:e5:ef:e9:aa:a0:32:61:
                    6a:13:f2:e6:0d:55:91:b7:91:26:df:c9:10:3a:fe:
                    a2:28:4b:ab:60:51:c5:bd:a9:5d:64:63:b2:ed:00:
                    b0:cc:57:47:cc:31:14:ee:b7:19:ac:d5:db:ac:d5:
                    e6:e5:20:7c:3c:63:1f:f5:c8:1e:17:d2:79:13:50:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:F8:DC:86:E4:60:BC:2B:51:03:22:3B:97:A2:2A:AB:F3:87:C7
            X509v3 Authority Key Identifier:
                keyid:74:E5:8B:B6:81:1C:76:DF:E3:39:42:F5:C7:AE:3F:21:7E:59:72:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z1STqpT8tBA1xAsn5nbAbLZicNmHKEXwSPFuVckNpHv/0/74E58BB6811C76DFE33942F5C7AE3F217E59725C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E58BB6811C76DFE33942F5C7AE3F217E59725C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z1STqpT8tBA1xAsn5nbAbLZicNmHKEXwSPFuVckNpHv/0/3137302e3233382e33362e302f32322d3332203d3e20323636333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:6e:f7:f3:05:75:16:88:12:07:9c:66:05:7a:2b:b1:0b:
         23:51:48:da:13:29:03:27:52:4c:d1:fc:b3:c8:bf:64:26:79:
         ea:fa:7b:de:bd:25:de:bb:b6:ea:18:26:61:14:c3:5a:9a:9b:
         63:84:95:14:dc:5c:92:df:ad:62:53:6d:88:15:7e:e2:69:06:
         f3:22:8c:13:83:b7:05:5e:5d:c6:93:e0:53:17:4c:8c:6e:f8:
         58:53:72:c8:c4:e2:6f:63:c1:c2:2e:7c:81:a2:14:56:20:58:
         c8:22:d3:a8:02:53:a6:3e:ab:bd:2d:45:26:12:3d:69:1e:75:
         07:42:6d:8e:8f:a9:ef:7c:d1:5f:f1:58:51:0e:75:bc:db:9c:
         09:40:12:52:2f:16:0a:9e:bb:f8:22:63:18:34:99:a9:93:a8:
         26:ba:26:29:f2:0c:7d:d4:14:90:d6:85:06:4b:31:96:3f:3a:
         b2:e3:b5:74:b2:6d:1e:81:27:e3:5c:c9:cd:62:5c:ca:d5:06:
         64:10:77:de:31:29:dc:b5:43:c8:03:64:a6:5b:03:30:39:c0:
         dd:60:1f:f0:c3:00:8f:d8:74:ad:a9:bb:1a:88:fe:fc:94:54:
         f2:15:0b:f8:e7:44:b4:33:a1:db:0d:3b:ec:0f:fa:0b:a8:87:
         e9:b5:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org