Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa
File:                     3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          isVBXpmL+hwLjf6VBfEmQlFCiVpL17hAQh72aWZ4L88=
Subject key identifier:   CD:E6:C3:21:DF:04:89:88:15:11:9B:40:6B:67:21:0D:C4:25:55:52
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       44BF20E55504507E83E020D1972D37BA09FEAC0A
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa
Signing time:             Fri 23 Jun 2023 20:06:47 +0000
ROA not before:           Fri 23 Jun 2023 20:01:47 +0000
ROA not after:            Fri 21 Jun 2024 20:06:47 +0000
asID:                     265274
IP address blocks:        170.80.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:20:e5:55:04:50:7e:83:e0:20:d1:97:2d:37:ba:09:fe:ac:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Jun 23 20:01:47 2023 GMT
            Not After : Jun 21 20:06:47 2024 GMT
        Subject: CN=CDE6C321DF04898815119B406B67210DC4255552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:f5:0a:33:0c:d5:6d:54:d0:e1:a7:dc:e6:
                    6d:8c:56:d9:7a:93:5d:2b:c3:54:8e:0b:de:48:7d:
                    ae:42:9a:77:8c:ee:2d:2d:08:31:e4:ec:b6:96:5c:
                    d2:5e:81:b5:94:88:c4:4b:51:5e:20:33:b2:30:e0:
                    89:ab:3f:5f:8b:8a:22:8d:a4:e4:7c:45:21:fe:34:
                    27:20:ce:ec:00:ac:ae:ca:77:75:a0:1c:07:e1:27:
                    a3:d2:8d:20:6f:b4:49:f8:98:73:f6:6b:46:a3:74:
                    47:27:08:59:ea:c2:45:5c:fa:b9:ec:dc:17:d4:64:
                    03:a2:ee:31:3b:2b:ad:87:92:87:66:b7:50:4e:3d:
                    a3:a6:13:25:11:ef:27:87:b8:92:de:4e:f8:d0:71:
                    71:7a:28:d2:23:30:a8:18:dd:35:66:e4:da:c6:8a:
                    ed:c9:a1:09:cf:aa:a5:74:fd:23:49:b8:be:19:48:
                    17:58:34:cd:3f:f2:62:10:49:08:9f:b1:55:c0:ec:
                    dc:e8:65:e7:c6:8a:b5:7e:4e:e3:bc:aa:8a:4f:1a:
                    38:5a:a6:c1:0d:20:dc:ec:90:03:76:72:99:c5:d7:
                    5c:50:b9:39:5a:b4:39:2f:04:3b:fc:06:02:fe:8e:
                    e0:a6:d4:c3:2d:b6:e4:a9:d8:27:02:87:8c:ef:31:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:C3:21:DF:04:89:88:15:11:9B:40:6B:67:21:0D:C4:25:55:52
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:7c:b6:aa:62:d9:8a:cc:cf:70:5e:7f:e4:ee:05:12:83:
         66:14:c7:a5:4a:53:03:3d:df:9d:07:e6:85:fe:58:87:bd:42:
         a8:5d:59:8e:60:51:1f:46:ea:e9:be:c4:73:f5:3b:3c:84:8d:
         e9:c3:dc:15:08:b0:59:e1:34:83:33:e1:dd:5b:a2:31:86:9a:
         4b:9a:76:b8:6e:a0:b4:64:10:12:96:8c:c0:40:9f:ae:4c:c1:
         58:fa:68:e7:f5:b5:60:13:9f:7a:ca:a0:2d:a3:d2:8f:a0:c7:
         10:c0:53:c4:e2:b5:82:ac:83:b3:18:ea:b4:11:79:67:92:9c:
         35:eb:6c:a8:b9:f4:ea:3a:c9:8f:e9:f2:b5:30:f7:fa:48:49:
         ad:f0:91:69:14:dd:71:67:94:14:15:57:19:dc:3f:e2:aa:30:
         80:fd:16:80:36:76:3a:81:32:2e:a8:29:4c:d0:fb:9c:be:a9:
         60:9f:7c:8b:40:99:7e:6b:12:a6:dd:87:db:ff:82:18:41:49:
         4d:53:d5:17:9d:7d:6b:5c:2a:37:c5:4e:31:e5:d2:66:ea:4d:
         99:0a:08:7c:57:aa:80:9b:ed:33:e8:5a:74:91:c7:c9:b1:65:
         dc:97:c2:ad:14:61:af:aa:ff:65:55:4f:b7:a1:95:a4:1a:15:
         f1:58:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org