Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa
File:                     3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa (raw, json)
Hash identifier:          mMv1PtMm6QRCC3q4W7kQno5r24zPMg8a+FJqy4Uydbw=
Subject key identifier:   5C:10:B9:A8:7A:60:F9:1F:03:83:15:DF:C6:CE:35:31:EC:E2:F2:F6
Certificate issuer:       /CN=320E46742A246F2F4D4D4E1DDF535FB80D30747F
Certificate serial:       31A855DE1A943188F8D6A7E20EB483658CD16060
Authority key identifier: 32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa
Signing time:             Mon 19 Jun 2023 19:13:26 +0000
ROA not before:           Mon 19 Jun 2023 19:08:26 +0000
ROA not after:            Mon 17 Jun 2024 19:13:26 +0000
asID:                     266446
IP address blocks:        170.82.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a8:55:de:1a:94:31:88:f8:d6:a7:e2:0e:b4:83:65:8c:d1:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320E46742A246F2F4D4D4E1DDF535FB80D30747F
        Validity
            Not Before: Jun 19 19:08:26 2023 GMT
            Not After : Jun 17 19:13:26 2024 GMT
        Subject: CN=5C10B9A87A60F91F038315DFC6CE3531ECE2F2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:7b:e1:2e:17:2e:fc:c5:69:f2:9f:35:59:
                    ab:95:c4:1f:64:6f:27:b6:7d:cf:08:7c:9e:5f:67:
                    b0:bf:fd:bd:79:2c:d7:99:bb:e3:c5:7e:5a:b3:63:
                    a3:e8:fc:8b:20:cf:0c:92:07:e9:2e:a6:ba:bc:dc:
                    88:39:bb:1a:13:7b:3a:0d:d8:d1:9c:c2:43:d2:9c:
                    2e:7b:8b:75:0a:40:93:51:1f:fd:d6:cd:6d:c2:e2:
                    d5:62:b8:25:12:eb:dd:cd:5c:37:2b:14:97:0b:7d:
                    67:d2:29:00:35:4e:20:c1:84:26:1c:cc:ad:f9:43:
                    9d:1b:45:93:1a:72:d4:40:d7:d2:ef:89:7d:eb:2e:
                    c6:38:36:94:9a:37:a2:3e:c7:8d:89:22:f3:19:b9:
                    40:d9:ef:c7:2d:8b:07:fb:3b:cd:5e:87:7c:a7:3e:
                    f9:42:95:b9:d5:18:36:f1:9c:a1:ec:80:6d:23:4e:
                    10:75:a1:01:e4:1d:cd:f2:30:bd:43:1a:29:04:0f:
                    d5:a4:b8:b9:77:72:82:6c:1a:2f:32:77:6a:c0:26:
                    66:ec:17:ee:9e:3c:a8:28:c5:db:cb:b1:25:f7:5a:
                    05:1b:ca:88:f9:65:00:0c:8c:1f:64:36:ab:ad:9c:
                    32:f4:4a:f9:3b:fc:e1:a3:8a:01:85:6c:77:a8:93:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:B9:A8:7A:60:F9:1F:03:83:15:DF:C6:CE:35:31:EC:E2:F2:F6
            X509v3 Authority Key Identifier:
                keyid:32:0E:46:74:2A:24:6F:2F:4D:4D:4E:1D:DF:53:5F:B8:0D:30:74:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320E46742A246F2F4D4D4E1DDF535FB80D30747F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3332203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:c8:ad:86:bd:38:d0:fa:76:1f:bc:35:be:bb:6c:51:92:
         b2:bb:d3:25:da:53:b8:b9:65:47:64:98:75:3e:91:e7:19:1a:
         7c:07:31:0c:e2:a3:37:d9:0b:e5:ab:38:ea:05:00:c2:3f:fc:
         44:96:cc:5c:82:4f:05:bd:93:9e:65:1d:95:ce:9f:3d:7c:5b:
         8a:7d:33:57:ab:90:b8:8c:b7:b0:66:21:41:77:9c:60:ce:f4:
         e0:df:80:9d:b4:70:9f:88:89:fc:87:71:15:2d:f7:a8:d6:ab:
         a5:7c:0e:9d:c3:39:70:3d:1f:42:22:7d:fc:9e:f7:b4:e4:f5:
         18:f1:83:5e:9b:a1:db:a3:ea:2d:04:77:5f:8c:ff:a1:7a:f7:
         57:b8:85:32:0e:19:f2:5f:d2:14:3b:06:b9:5c:7e:f4:da:a5:
         6d:55:19:eb:f2:2c:7c:23:b9:c4:7b:7f:fc:44:58:85:c6:cc:
         c0:d6:20:40:81:6a:1e:d3:12:8c:fc:af:b1:d0:c3:1a:9f:96:
         ce:6b:51:1a:68:8e:71:30:5e:06:23:51:2d:09:8e:8f:e2:82:
         f9:dd:ae:8b:9a:9d:02:ad:9c:56:43:1c:b7:0a:5b:81:2b:41:
         4c:1e:9d:0a:ce:4b:2c:d7:e4:bd:45:68:7d:b9:c2:da:df:e1:
         9b:f0:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org