Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          sB79MgccKAmfd3VqDcc+FaJ3+hD4OjXhMf/ycNTjupg=
Subject key identifier:   AE:D2:30:D0:24:17:D1:DF:5F:AF:FF:BB:2E:29:EB:EE:7A:65:40:1E
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       3DEE19480D3171A4831CB8F46366408432A88942
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
Signing time:             Mon 04 Dec 2023 02:35:30 +0000
ROA not before:           Mon 04 Dec 2023 02:30:30 +0000
ROA not after:            Mon 02 Dec 2024 02:35:30 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ee:19:48:0d:31:71:a4:83:1c:b8:f4:63:66:40:84:32:a8:89:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Dec  4 02:30:30 2023 GMT
            Not After : Dec  2 02:35:30 2024 GMT
        Subject: CN=AED230D02417D1DF5FAFFFBB2E29EBEE7A65401E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:9a:85:23:5d:e0:71:d3:1c:da:ae:d1:73:
                    88:f4:9a:0b:ad:f0:bc:b5:3c:b1:8d:e9:1d:88:fe:
                    93:64:af:5d:8f:bd:50:23:4e:2a:20:40:f6:c8:b1:
                    b0:06:08:92:cc:b5:ec:f9:06:5b:fa:a1:3d:37:f4:
                    18:85:74:5e:6b:22:3a:99:41:b8:4e:75:b8:ed:03:
                    17:2b:08:2e:d7:82:fa:72:96:82:6c:99:c2:e4:45:
                    2f:22:2e:cb:a1:4a:d6:af:21:31:2b:01:c4:bd:88:
                    f6:f8:40:be:98:9b:cd:71:57:51:eb:62:84:69:8f:
                    94:ad:c7:1e:32:86:cb:d2:29:23:8d:0a:02:98:e6:
                    72:4c:ab:c8:73:0e:da:e5:11:d9:38:21:5e:25:5c:
                    e2:be:02:96:53:22:d1:6f:37:22:2d:63:05:f2:8a:
                    0d:1f:c5:c1:47:13:90:3c:4b:cb:07:dd:b2:df:f2:
                    9f:61:d7:d3:47:cf:83:cf:0b:7b:91:78:af:35:7c:
                    4b:3b:42:c9:b8:af:e3:0d:4c:1c:3d:7a:df:ac:d7:
                    50:3a:38:1e:42:ed:f0:dc:5d:9c:54:0a:7f:5a:cd:
                    84:59:77:d7:c7:06:85:94:b9:be:dd:e0:18:46:62:
                    48:ed:7e:db:e6:55:60:d9:e1:e1:48:42:a6:b1:82:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:30:D0:24:17:D1:DF:5F:AF:FF:BB:2E:29:EB:EE:7A:65:40:1E
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:7c:a6:dd:15:c8:9b:ba:7c:09:4f:a9:0a:1c:1e:de:33:
         fe:4d:20:9e:8a:c7:af:4c:70:49:df:9c:68:a3:7a:75:f2:39:
         5f:4c:0b:b1:26:62:45:08:b9:f1:cc:c2:c6:79:7d:5e:73:d3:
         33:2a:91:4d:62:f6:5e:86:cf:69:54:4d:b3:d0:f1:47:e3:c2:
         ed:8b:ca:89:06:72:3e:93:e1:3d:9a:c6:79:f6:da:5b:92:0f:
         f0:aa:83:69:bc:fd:18:d2:62:ba:51:6b:ba:3e:db:eb:a9:59:
         e5:16:ca:be:83:69:8f:1f:ec:cd:55:36:2b:f8:7b:da:fc:3b:
         5e:d7:ea:fa:49:9f:a6:12:ae:1b:85:b4:af:cc:25:37:56:c9:
         32:05:36:9b:be:ba:01:a8:5b:31:44:9e:dc:02:f3:6e:b6:e0:
         f2:13:67:91:cd:aa:9f:7f:35:56:a4:89:a7:63:4c:13:a0:c9:
         d2:6b:eb:9a:5d:7b:ca:6d:7d:79:b7:70:1c:53:d4:e9:cd:33:
         6d:63:74:ad:5d:dd:a3:6c:a2:8c:96:12:08:a8:0a:00:ad:1c:
         d6:3f:12:7b:ca:29:c6:16:b0:1a:88:6c:54:63:13:b1:32:10:
         74:3b:2e:44:a5:8c:97:a9:06:7b:b2:87:24:66:06:6e:06:d2:
         68:b6:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org