Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
File:                     3137302e302e37362e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          c/qIJc4wuhDeV5V10E5Mdrc+ha9/0A7hcNSdLjzAwb4=
Subject key identifier:   89:A1:8D:93:B7:04:14:3F:6F:EB:09:63:54:65:A3:DF:BC:8A:CC:0F
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       457C8607FEC7BFD3F458BDAA8D4CF84DF945A09B
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:02 +0000
ROA not before:           Mon 26 Jun 2023 13:03:02 +0000
ROA not after:            Mon 24 Jun 2024 13:08:02 +0000
asID:                     270413
IP address blocks:        170.0.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7c:86:07:fe:c7:bf:d3:f4:58:bd:aa:8d:4c:f8:4d:f9:45:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:02 2023 GMT
            Not After : Jun 24 13:08:02 2024 GMT
        Subject: CN=89A18D93B704143F6FEB09635465A3DFBC8ACC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:5f:43:2f:e3:83:bf:3e:03:6c:f2:c8:b2:
                    c8:57:40:d8:ce:46:1f:46:14:6c:c1:ed:f7:8c:bc:
                    ae:d6:1e:cb:e6:e7:6c:42:f3:be:00:bf:49:b3:c1:
                    c5:53:ab:3f:8a:81:0e:32:23:7c:64:00:da:0d:be:
                    26:b9:8e:52:39:4b:5c:ae:94:64:fa:f5:1c:ba:78:
                    c7:1c:67:fc:ee:c5:51:60:d7:3d:ae:50:04:2e:b3:
                    36:09:c5:df:f7:13:15:79:67:68:d1:3f:a3:10:ea:
                    ae:47:1b:73:02:6d:9b:7f:f9:4e:49:0f:fc:d5:60:
                    28:e9:44:6f:8d:8e:dc:38:f0:5e:25:4c:47:31:1d:
                    b1:36:df:7f:bc:b0:17:a5:3d:31:32:c7:3c:32:57:
                    bf:7c:f3:28:c4:4f:12:ba:65:45:d4:4d:65:16:69:
                    29:f4:d8:33:f6:97:1b:95:39:7b:c4:fc:9e:34:32:
                    5c:71:29:fd:de:9d:6f:93:ef:bb:98:a5:81:e2:ec:
                    fb:60:12:49:73:88:0a:a7:0a:f0:e7:90:8b:c0:47:
                    66:06:39:bc:e0:0d:6e:ad:9e:ee:f4:3e:05:d7:e0:
                    46:4c:08:43:f5:32:75:83:a8:00:2c:da:ed:ea:9a:
                    a1:3a:a8:8d:18:39:bc:6f:a1:34:41:a0:f8:79:9b:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:8D:93:B7:04:14:3F:6F:EB:09:63:54:65:A3:DF:BC:8A:CC:0F
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:27:d8:fd:b9:c2:55:c5:56:ae:cc:31:0e:a5:f6:8e:49:d0:
         ab:27:56:2d:d0:49:9b:2c:96:39:a1:d1:54:b0:19:5c:cc:54:
         6a:da:de:50:b8:67:b1:15:60:80:66:78:51:15:47:6e:a7:f7:
         71:46:99:f2:3f:75:d3:71:4d:1f:18:29:32:38:4f:d3:e6:17:
         58:66:ea:9f:ae:b2:15:c1:2c:49:07:d6:49:ed:45:a8:3d:4a:
         6e:1d:6c:e0:85:b2:ba:c8:d0:17:ca:de:e4:2a:b2:b7:18:3c:
         eb:14:55:91:0d:62:a4:a4:4e:15:12:85:96:e1:1e:d8:ca:9c:
         07:96:dc:24:4b:36:e2:95:2f:ce:b4:da:95:13:cd:c5:7a:ed:
         e1:93:3d:3b:fa:3a:c4:5d:4c:6a:c9:2c:27:1f:e7:cf:d6:33:
         b0:67:f6:bb:44:e1:bc:15:31:e5:f9:d0:68:52:27:10:81:fa:
         de:39:71:39:7f:0f:2b:a5:0f:f0:37:b2:6d:85:fc:76:68:af:
         cf:2e:e4:02:58:2b:fc:08:cc:10:1c:ff:07:f5:28:57:b4:fb:
         48:2c:11:41:9b:70:48:02:b6:fe:fc:ae:33:06:b5:12:33:4c:
         20:59:1f:89:69:99:d5:3e:00:51:ee:05:c0:f1:ee:80:ff:96:
         b9:6e:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org