Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77QjmNhRcV4tsR65LsSn8Kfy4X7UYUWSuc5XZdn2D1xM/0/3139302e322e36382e302f32322d3234203d3e20323730333335.roa
File:                     3139302e322e36382e302f32322d3234203d3e20323730333335.roa (raw, json)
Hash identifier:          91p2R7VRKhAmLQB6IYx9zJADSDmQypjUjOq3JjdNkkE=
Subject key identifier:   70:A3:87:F8:BF:05:22:B8:15:83:41:93:24:4D:E6:39:38:D1:06:6B
Certificate issuer:       /CN=317A46C330F61DA904DAB94C11A20251D726D872
Certificate serial:       4F8432592D862C65D0A6BF4880C1A83815DD3519
Authority key identifier: 31:7A:46:C3:30:F6:1D:A9:04:DA:B9:4C:11:A2:02:51:D7:26:D8:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/317A46C330F61DA904DAB94C11A20251D726D872.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77QjmNhRcV4tsR65LsSn8Kfy4X7UYUWSuc5XZdn2D1xM/0/3139302e322e36382e302f32322d3234203d3e20323730333335.roa
Signing time:             Thu 17 Nov 2022 15:00:00 +0000
ROA not before:           Thu 17 Nov 2022 14:55:00 +0000
ROA not after:            Fri 17 Nov 2023 15:00:00 +0000
asID:                     270335
IP address blocks:        190.2.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:84:32:59:2d:86:2c:65:d0:a6:bf:48:80:c1:a8:38:15:dd:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317A46C330F61DA904DAB94C11A20251D726D872
        Validity
            Not Before: Nov 17 14:55:00 2022 GMT
            Not After : Nov 17 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:7f:10:1d:9e:34:12:88:b4:e7:c0:c8:9b:
                    9c:6e:59:1e:e8:d0:b4:31:4d:4c:97:ab:11:34:88:
                    b1:f8:e3:10:3c:89:1f:3a:2b:33:0a:cf:74:6c:27:
                    d9:a0:66:6b:ea:ce:86:55:76:93:18:75:2e:6d:a5:
                    5b:9b:04:3f:7c:e4:62:fe:8a:6c:a9:45:9f:26:7a:
                    bb:52:b3:c6:a2:28:b3:00:9c:c3:db:d9:31:17:64:
                    7e:2d:36:dd:bb:c0:61:be:e9:da:f1:40:37:d1:8e:
                    21:84:97:5a:97:13:0f:d9:00:4c:d0:e4:80:46:01:
                    53:5d:58:e7:cc:cf:b8:12:d7:65:3d:5b:6d:88:e2:
                    00:b9:d1:45:d0:e6:39:63:61:75:a5:d2:c8:e4:27:
                    74:36:1d:c4:0e:ba:ca:3b:eb:fd:f2:21:13:e1:f3:
                    c0:9a:b7:9d:db:6c:86:e3:06:6f:35:8e:a6:1c:d6:
                    8d:42:1d:21:b6:0e:26:2a:b7:70:c4:12:fb:cb:c6:
                    e6:a7:69:68:41:bb:cd:3f:b8:8d:92:db:4d:9a:8a:
                    c4:c6:1e:45:ca:bf:a3:53:b8:dc:fa:aa:2f:dd:5f:
                    0a:f4:ea:4f:8a:ba:87:62:e6:11:de:f4:b4:7f:3b:
                    79:f9:7d:2b:08:61:37:4f:54:6f:f7:9f:79:0a:06:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A3:87:F8:BF:05:22:B8:15:83:41:93:24:4D:E6:39:38:D1:06:6B
            X509v3 Authority Key Identifier:
                keyid:31:7A:46:C3:30:F6:1D:A9:04:DA:B9:4C:11:A2:02:51:D7:26:D8:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77QjmNhRcV4tsR65LsSn8Kfy4X7UYUWSuc5XZdn2D1xM/0/317A46C330F61DA904DAB94C11A20251D726D872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/317A46C330F61DA904DAB94C11A20251D726D872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77QjmNhRcV4tsR65LsSn8Kfy4X7UYUWSuc5XZdn2D1xM/0/3139302e322e36382e302f32322d3234203d3e20323730333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:a5:bb:a4:44:82:a6:2c:bb:e7:f4:9b:d7:2a:1c:fa:a5:
         aa:12:76:07:ff:8c:89:d1:c0:a2:a4:47:9d:c9:c7:7f:16:11:
         d7:85:33:cc:11:a8:7e:05:66:7a:6e:32:ea:48:32:71:6c:b2:
         1c:f8:b6:06:36:53:b9:87:15:b2:af:67:ef:67:76:5b:0a:0f:
         c5:40:97:23:db:86:74:05:de:75:82:ce:62:53:08:b1:86:5b:
         be:83:2a:f4:9f:bc:04:a2:f3:86:c5:0a:63:a5:43:a1:c6:eb:
         df:06:12:74:fa:c9:c3:3e:e4:3e:db:e8:b8:c0:09:aa:f5:27:
         27:2c:07:9e:05:4a:46:63:b7:1b:05:f6:ef:74:02:46:41:6a:
         88:8a:36:3f:79:ba:a0:b5:bb:c9:e5:de:26:75:66:ee:aa:fe:
         96:a1:3b:22:03:29:46:5b:96:fd:a8:0d:a8:1e:87:ac:23:a1:
         b1:89:0c:62:93:62:c5:aa:56:0d:40:c3:ed:12:f6:07:6a:03:
         e9:77:08:88:00:0d:9b:ec:d0:8f:3a:29:c8:d2:3d:a9:d6:ff:
         58:56:51:49:03:d9:5d:f4:ed:d8:9e:5e:4d:16:19:b5:87:39:
         fa:4d:c1:18:7f:8a:29:e0:5b:15:c5:87:5f:f2:fd:8e:65:69:
         e0:e0:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org