Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3137302e38332e34342e302f32322d3234203d3e20323634323930.roa
File:                     3137302e38332e34342e302f32322d3234203d3e20323634323930.roa (raw, json)
Hash identifier:          NDSQ2eJoKcTg5ZTD7jumjsHuOw6Knj8b3SLD1rrQ4wM=
Subject key identifier:   C0:79:FD:74:41:80:AC:2E:FA:21:A4:5A:7F:03:5F:DE:3B:0A:49:F5
Certificate issuer:       /CN=40810794BC870729306E5291F7A80E4B1F810D7F
Certificate serial:       3BB81A9150CC9FAD845B0CA6DCB5B32B9D4BDC74
Authority key identifier: 40:81:07:94:BC:87:07:29:30:6E:52:91:F7:A8:0E:4B:1F:81:0D:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40810794BC870729306E5291F7A80E4B1F810D7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3137302e38332e34342e302f32322d3234203d3e20323634323930.roa
Signing time:             Wed 31 Jan 2024 20:05:19 +0000
ROA not before:           Wed 31 Jan 2024 20:00:19 +0000
ROA not after:            Wed 29 Jan 2025 20:05:19 +0000
asID:                     264290
IP address blocks:        170.83.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:1a:91:50:cc:9f:ad:84:5b:0c:a6:dc:b5:b3:2b:9d:4b:dc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40810794BC870729306E5291F7A80E4B1F810D7F
        Validity
            Not Before: Jan 31 20:00:19 2024 GMT
            Not After : Jan 29 20:05:19 2025 GMT
        Subject: CN=C079FD744180AC2EFA21A45A7F035FDE3B0A49F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:10:d7:3f:c8:c6:c0:ce:af:44:78:08:2f:
                    86:99:6b:e2:61:c5:3f:57:28:a6:40:73:9d:25:1a:
                    ec:19:e9:9b:f4:10:a1:1f:05:32:bb:12:9c:09:12:
                    d8:a5:e5:f9:ed:19:1b:78:ec:eb:34:05:fd:85:7a:
                    12:4b:e6:6f:16:ad:28:9d:e1:af:4a:30:e8:0a:41:
                    af:7e:dd:8a:46:dd:b6:46:d0:b1:ed:ff:9d:45:37:
                    d4:30:dd:42:00:e2:f1:0d:32:02:c2:cb:50:99:46:
                    d0:a9:53:9a:ff:95:90:77:f9:bb:6d:7b:22:b5:a5:
                    23:d7:c4:af:11:bd:b6:e6:7f:d4:cd:1e:6d:74:65:
                    10:ca:aa:9b:5c:e1:11:d3:b2:5b:2b:37:33:df:e1:
                    92:f8:17:85:5e:df:00:fb:ac:a3:74:2e:25:e9:34:
                    ac:39:c5:19:2c:81:06:88:92:f1:fe:92:72:cf:15:
                    73:38:24:04:e4:95:ad:b1:e1:9f:ba:98:78:80:08:
                    62:5d:f1:3e:85:4d:ec:09:83:a4:24:eb:6e:b6:c3:
                    e4:b8:95:00:20:7f:77:29:26:49:a0:bb:b7:cf:4b:
                    02:38:3e:73:4e:99:00:78:bf:90:e8:04:53:4b:04:
                    34:53:22:bd:e6:fd:a1:b0:88:4a:a0:e0:a3:fe:9f:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:FD:74:41:80:AC:2E:FA:21:A4:5A:7F:03:5F:DE:3B:0A:49:F5
            X509v3 Authority Key Identifier:
                keyid:40:81:07:94:BC:87:07:29:30:6E:52:91:F7:A8:0E:4B:1F:81:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/40810794BC870729306E5291F7A80E4B1F810D7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40810794BC870729306E5291F7A80E4B1F810D7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Y2Djc5ndRZDT7u7JX2EhatQgvmaF6SnHFou9KbvJkAe/0/3137302e38332e34342e302f32322d3234203d3e20323634323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:f6:4f:fc:b9:a9:14:ac:02:41:b7:01:c0:a0:e3:3b:89:
         be:63:c6:08:47:7f:a7:3c:5a:57:23:1c:60:14:b8:39:d5:c1:
         5d:c4:62:5f:e3:a3:69:47:f7:f2:42:6c:a4:20:c3:2e:3d:be:
         d8:b2:22:24:8c:31:06:f2:5e:54:66:b9:c8:7a:fb:04:25:91:
         e3:e6:4f:9c:e5:f1:29:92:ed:98:1b:a4:ea:1c:bf:45:74:c6:
         b6:16:9c:e7:00:80:27:a0:41:e6:c4:a9:04:98:df:79:cc:8c:
         35:aa:26:83:bd:a1:c6:7c:d1:76:a7:cc:d5:3d:f5:35:91:c2:
         61:b6:79:e9:e6:9c:92:72:61:15:3a:94:dc:80:bf:52:07:b3:
         d0:96:be:15:58:64:b5:2d:17:2b:8e:c2:75:83:c3:69:15:89:
         a4:71:23:38:cb:71:b9:6f:a2:30:25:7b:78:98:d9:13:d8:c1:
         f9:85:a2:7e:8c:c3:8d:b1:70:a7:65:08:a3:9c:fb:da:d1:c2:
         16:4d:2b:2c:09:7d:6d:16:00:9c:41:ac:df:c3:6f:5e:4f:99:
         c3:66:33:7a:f2:b8:dc:98:d5:9b:99:b5:74:34:6f:f2:51:4c:
         94:fe:b3:08:bc:35:ae:07:22:bb:36:7e:b2:83:3d:70:a7:b7:
         a3:d8:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org