Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa
File:                     3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          cov2500sYsMoXbWQwRTCCCzdwdsW413daCTCConIIis=
Subject key identifier:   90:5B:02:F6:8D:81:2A:21:CE:5B:B1:67:53:30:EA:9E:C2:91:3A:8F
Certificate issuer:       /CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
Certificate serial:       72D1D66E39E24E7921F698884F875732EC8EF48B
Authority key identifier: D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa
Signing time:             Fri 03 Nov 2023 12:46:38 +0000
ROA not before:           Fri 03 Nov 2023 12:41:38 +0000
ROA not after:            Fri 01 Nov 2024 12:46:38 +0000
asID:                     266356
IP address blocks:        170.239.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d1:d6:6e:39:e2:4e:79:21:f6:98:88:4f:87:57:32:ec:8e:f4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Validity
            Not Before: Nov  3 12:41:38 2023 GMT
            Not After : Nov  1 12:46:38 2024 GMT
        Subject: CN=905B02F68D812A21CE5BB1675330EA9EC2913A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:64:f8:b6:97:7d:dc:c9:b3:54:24:9c:f1:
                    22:3b:d3:1f:f9:30:aa:02:3c:fa:b5:6d:cd:0f:28:
                    22:40:ef:23:b4:9d:97:1b:c3:2f:ac:5d:16:c7:f5:
                    2f:08:2b:c6:b4:29:dd:83:8a:18:69:17:15:1b:e1:
                    14:fe:48:6f:38:f1:c9:92:7f:d0:ec:6b:76:75:51:
                    f0:bd:dc:89:1d:52:74:84:bf:09:9e:0d:fe:71:bb:
                    95:80:1a:fb:c9:c9:c8:1e:e1:b1:14:12:f3:c2:a7:
                    b0:51:36:4e:02:fe:94:40:71:f5:48:4b:5a:6f:7d:
                    41:4a:55:6c:48:3a:f2:f0:51:92:33:5d:ba:e0:0f:
                    7f:75:6b:a0:46:5c:67:e9:72:ef:f5:7d:5b:3d:19:
                    a7:f3:7c:67:6c:9d:bd:0c:b3:f3:4d:5a:40:6d:b6:
                    c1:97:c6:af:dd:0b:66:58:cf:b5:d8:92:41:d2:29:
                    b1:bf:3e:df:2f:82:cb:a8:a3:ed:d0:cd:31:32:0b:
                    94:78:e5:00:e5:f7:ea:48:57:6c:94:19:ec:62:57:
                    34:c6:0b:36:fe:9e:9a:65:8f:60:8f:a4:04:5c:94:
                    f1:21:b7:a2:e3:1e:8d:57:3d:6c:4a:47:c5:d7:7e:
                    da:58:0a:d7:c5:80:33:97:9d:0d:11:fb:60:50:c2:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:02:F6:8D:81:2A:21:CE:5B:B1:67:53:30:EA:9E:C2:91:3A:8F
            X509v3 Authority Key Identifier:
                keyid:D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:6e:ff:81:ff:02:c4:63:c0:5f:b0:b3:0c:bc:91:28:4a:
         aa:68:b5:df:28:d5:6c:80:6d:c9:3e:ea:3f:07:04:44:17:3f:
         c7:b0:c7:09:90:7a:d7:47:f9:7b:1e:bc:b0:0f:e8:7b:9b:0f:
         ba:79:15:fa:c1:8d:5d:6a:71:1d:64:07:2e:e0:89:84:5e:58:
         57:c6:52:2d:78:ef:ea:32:1d:ee:04:82:fd:76:53:21:94:46:
         5e:6f:72:57:ac:78:5e:93:46:f9:94:45:4a:b3:64:8e:23:5f:
         80:c4:cf:8e:76:a2:67:af:60:3a:e6:a9:8f:52:d7:45:d1:09:
         61:10:ad:c5:d1:e3:7c:f1:6e:1b:2e:a5:9d:1c:00:72:26:47:
         15:0f:39:cf:c8:06:61:ce:89:04:81:18:36:68:1e:ed:e4:1a:
         51:1a:0e:94:7e:46:55:fc:19:9e:bc:07:4c:e3:cc:0d:d2:65:
         31:ff:ad:c7:61:88:2e:c7:d3:78:25:aa:25:17:7d:16:03:4e:
         e5:fb:0e:36:84:bf:a6:28:fa:e9:52:c7:5c:c0:5c:f7:91:d2:
         13:30:7e:28:fa:2b:c6:9c:ae:00:45:ea:31:e3:36:31:3e:20:
         44:cf:f6:b7:7a:7c:69:a9:d2:0d:71:e4:7c:e6:d6:4b:fd:a1:
         ba:55:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org