Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32322d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          p5Z8WpDD2EirGXcqsipo38+9VY4Jh7rI6BqQjd5adFM=
Subject key identifier:   7F:7A:7F:9E:10:80:D6:CD:E2:BE:38:57:D1:5E:1E:10:0F:3B:44:4A
Certificate issuer:       /CN=11CF1DAA865E94BF55A7973E9151246D838C3946
Certificate serial:       11FA767436714297296E893ABC624F52B22D29D4
Authority key identifier: 11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3234203d3e20323633323633.roa
Signing time:             Tue 02 Aug 2022 14:13:00 +0000
ROA not before:           Tue 02 Aug 2022 14:08:00 +0000
ROA not after:            Tue 01 Aug 2023 14:13:00 +0000
asID:                     263263
IP address blocks:        170.244.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fa:76:74:36:71:42:97:29:6e:89:3a:bc:62:4f:52:b2:2d:29:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CF1DAA865E94BF55A7973E9151246D838C3946
        Validity
            Not Before: Aug  2 14:08:00 2022 GMT
            Not After : Aug  1 14:13:00 2023 GMT
        Subject: CN=7F7A7F9E1080D6CDE2BE3857D15E1E100F3B444A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:4e:54:e7:19:11:43:d1:79:b9:62:e2:fb:
                    55:31:4d:5f:af:11:be:54:77:db:32:36:34:8e:97:
                    66:9f:15:65:4e:e6:4d:dc:a7:00:01:59:8a:b7:46:
                    2f:25:99:b9:2d:cd:52:f1:57:ac:03:eb:30:05:07:
                    60:f9:b7:ea:39:1c:9a:ec:d1:ca:57:4c:db:37:1d:
                    f8:6a:72:aa:5b:fd:20:a2:2b:bb:4c:82:ff:da:d2:
                    4f:8e:db:35:24:6f:16:57:03:d2:85:3b:fc:42:23:
                    d1:b6:2b:91:65:6d:4e:6c:fc:c8:60:5a:5c:f4:34:
                    97:7b:12:32:4f:27:7f:67:bb:c4:9c:eb:43:4d:98:
                    71:f8:f3:a5:2c:ca:53:b4:e6:92:32:65:8a:43:db:
                    9e:c2:d2:8f:0e:3e:5a:ac:9f:76:f3:cc:1e:1b:df:
                    a2:5a:ba:ca:21:bc:be:9a:7e:36:da:be:ea:c0:5a:
                    64:fb:7f:bc:c5:ed:37:e8:fa:55:e8:aa:13:5f:1f:
                    31:5f:02:2d:8e:fb:bc:92:75:2c:d1:cf:90:03:30:
                    20:68:c6:43:35:42:03:93:35:b9:e0:8e:94:92:a3:
                    03:4f:e7:fb:28:e0:6b:c6:a7:45:be:51:72:f6:a9:
                    1a:87:2a:4a:6a:8c:90:ec:f3:58:85:e5:fb:ae:dd:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:7F:9E:10:80:D6:CD:E2:BE:38:57:D1:5E:1E:10:0F:3B:44:4A
            X509v3 Authority Key Identifier:
                keyid:11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:eb:c8:b7:48:7e:4b:58:2c:82:86:d3:97:d7:23:45:c7:
         6b:d2:f4:51:a2:5d:f3:28:18:bb:4b:40:f2:08:14:76:f4:58:
         51:b3:ff:bb:8b:0d:56:06:3a:16:54:b1:70:57:d0:df:d9:37:
         1e:0b:1c:04:c1:79:85:a4:61:d7:7b:33:9e:43:52:a3:69:89:
         dd:fe:24:79:93:61:93:d3:78:02:0c:80:aa:dd:93:14:80:22:
         6c:36:43:fc:42:65:d6:35:c7:31:ea:a0:4f:6b:92:da:a2:54:
         bb:96:69:26:db:95:4c:de:f9:9d:18:5d:6f:93:77:db:01:c8:
         ef:d6:25:89:88:d3:95:46:68:7a:75:40:26:96:53:35:58:14:
         43:55:9f:0e:42:2c:c5:15:87:a5:f7:e3:85:4c:7f:4c:56:0d:
         58:f5:af:9b:2d:fe:98:01:10:45:3d:bf:cf:3e:ba:57:ef:c8:
         2a:d0:19:99:ff:d3:67:b4:3c:90:a6:78:8f:c1:e1:8a:ba:58:
         4c:b6:61:d0:95:77:7b:bc:d5:5d:88:6e:de:3f:c7:50:e6:e7:
         b8:87:f4:f4:e0:67:a3:f0:43:bd:1f:b3:13:9d:86:d3:84:41:
         7a:92:c4:c8:33:69:a6:1d:76:e5:cf:4e:8f:d6:79:8c:16:ae:
         ab:2d:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:01 2023 by rpki-client on console-fra.rpki-client.org