Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32332d3233203d3e20323730343133.roa
File:                     3137302e302e37362e302f32332d3233203d3e20323730343133.roa (raw, json)
Hash identifier:          GD+Zyk9yjkEQs11KV3K4w/if9Xabje6us8ZAPYNUWvo=
Subject key identifier:   D0:11:2C:BD:0E:B3:D0:78:66:22:1D:A3:8C:E8:F9:92:41:A2:EE:AC
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       2D36AE07297813A70E31524413FE45E78CFCDE2A
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32332d3233203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:03 +0000
ROA not before:           Mon 26 Jun 2023 13:03:03 +0000
ROA not after:            Mon 24 Jun 2024 13:08:03 +0000
asID:                     270413
IP address blocks:        170.0.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:36:ae:07:29:78:13:a7:0e:31:52:44:13:fe:45:e7:8c:fc:de:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:03 2023 GMT
            Not After : Jun 24 13:08:03 2024 GMT
        Subject: CN=D0112CBD0EB3D07866221DA38CE8F99241A2EEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:fd:c2:69:5c:ed:cc:fe:e5:20:d9:3a:6e:
                    16:98:04:63:a9:e6:88:a2:bd:a6:a1:03:e2:18:48:
                    65:52:f0:01:89:ae:ab:1e:f4:24:f0:e1:0e:a3:72:
                    26:32:56:c8:e6:50:7d:9a:23:8e:c5:5f:a2:39:bc:
                    e1:f7:26:2e:1b:e3:b8:51:de:f0:4c:7d:75:6b:47:
                    b4:ea:f1:8d:32:0f:e5:d0:c5:3c:71:b2:70:84:51:
                    4e:0e:87:73:66:61:78:97:e3:91:94:06:d1:49:74:
                    52:eb:0e:2c:29:74:4e:48:a6:f3:3a:b9:c9:47:cd:
                    f9:3d:b1:02:1a:19:0a:36:53:11:0d:b8:aa:e4:b8:
                    2f:a2:07:72:24:ae:0c:02:7e:88:f1:b8:25:e8:a9:
                    33:d2:27:8d:57:d5:0d:37:c9:b9:ac:da:f4:79:2a:
                    4c:82:8f:b7:73:49:5a:72:e4:81:8b:9f:95:dd:0f:
                    c2:72:d0:2b:34:27:19:db:24:1f:8d:0d:f6:a3:a5:
                    60:87:fc:fb:d6:62:a7:40:dd:f1:da:f5:5a:b6:07:
                    a2:7a:98:a2:64:93:63:6e:ca:3a:de:ab:e6:99:bd:
                    94:d5:1e:a0:b8:d9:c0:20:63:ca:35:37:b3:f2:35:
                    a2:4a:81:71:63:1e:87:50:61:6e:23:5d:d9:27:04:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:11:2C:BD:0E:B3:D0:78:66:22:1D:A3:8C:E8:F9:92:41:A2:EE:AC
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3137302e302e37362e302f32332d3233203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:98:8c:a7:00:c5:7f:10:69:41:16:46:03:bc:ee:bf:7a:f7:
         95:95:e2:e0:ca:53:8d:59:c5:d8:e9:d7:53:5c:8f:56:34:2f:
         69:4d:29:c8:98:5e:ea:1f:5b:e5:e2:ba:97:50:a5:91:c6:33:
         72:db:23:44:fb:1b:af:34:f4:f3:3d:af:00:ca:c3:da:a5:38:
         80:31:c4:6d:33:82:7b:24:fb:e7:c0:1a:5e:07:53:c8:a3:c1:
         9e:9d:b5:36:20:93:21:c5:90:b4:e9:35:f4:c9:c2:3e:e0:ee:
         56:76:1a:7e:31:bb:ef:ba:b0:34:31:76:96:fe:60:fd:e9:69:
         7f:b6:f2:34:90:0b:00:13:20:5f:f3:ed:5b:2a:65:47:dc:2b:
         0a:c0:89:5f:46:4a:84:f1:2c:d5:44:d6:85:ce:20:3e:9f:e8:
         7f:5d:a7:23:ec:92:64:a8:e6:ec:ca:ef:b2:11:fb:b3:32:8f:
         bd:7c:71:7a:d9:be:7a:46:11:22:d2:bf:ca:10:a8:04:3b:30:
         c4:64:7e:3d:d0:0d:9c:25:9c:29:81:ef:d9:c7:4d:85:a5:64:
         05:8b:14:f4:47:14:af:d1:84:88:c6:a6:ca:ea:c2:7b:93:d6:
         54:d2:36:00:68:8e:40:a6:9f:7e:85:34:f8:31:75:93:64:15:
         43:1a:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org