Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa
File:                     3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa (raw, json)
Hash identifier:          quaWmCIdjUrdblnWD0izXDq2Yom2O2Y9MWrjFDIQ14Y=
Subject key identifier:   51:4B:03:1D:C2:40:61:09:32:77:26:46:5E:FD:92:6A:4D:07:34:B7
Certificate issuer:       /CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
Certificate serial:       2F7EA0E63A32C6EEAC6EDD728C6868057257E916
Authority key identifier: 48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa
Signing time:             Mon 10 Jul 2023 19:24:56 +0000
ROA not before:           Mon 10 Jul 2023 19:19:56 +0000
ROA not after:            Mon 08 Jul 2024 19:24:56 +0000
asID:                     266388
IP address blocks:        170.80.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7e:a0:e6:3a:32:c6:ee:ac:6e:dd:72:8c:68:68:05:72:57:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
        Validity
            Not Before: Jul 10 19:19:56 2023 GMT
            Not After : Jul  8 19:24:56 2024 GMT
        Subject: CN=514B031DC2406109327726465EFD926A4D0734B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:7b:be:cc:1c:82:5a:4d:6c:bf:e4:ae:8d:
                    ae:a8:b6:02:86:67:e7:f5:c6:b1:61:f3:7c:81:6d:
                    4d:a2:d5:cd:c7:be:bd:ba:17:51:32:78:59:e8:85:
                    5c:4f:c0:bc:f5:f0:cc:5a:f3:1b:db:a1:9c:c0:b3:
                    5c:80:99:ed:39:6b:c6:2c:9d:e9:e3:ec:5a:6c:4a:
                    1e:71:ca:71:07:ff:09:03:9b:67:6b:2f:cc:9b:b3:
                    6e:c4:8b:4d:2c:3c:3b:eb:ab:36:4d:05:ea:eb:83:
                    8c:59:a5:98:8b:bd:21:c6:0c:05:e1:93:45:56:d1:
                    0a:ab:c0:9c:83:92:e8:ff:cb:e6:68:ea:5a:74:28:
                    62:c8:b0:24:7b:40:e3:24:6a:19:83:18:db:ee:94:
                    36:99:13:fb:7f:65:c1:65:c6:3f:3b:d8:2e:35:f5:
                    84:83:12:17:84:64:c6:d2:a3:4d:0e:03:1c:e7:da:
                    92:5e:8c:f0:42:0c:36:c6:60:e6:fa:c7:f8:04:4f:
                    76:40:84:27:53:5b:ea:e2:e6:27:1e:e3:db:ed:0f:
                    bc:8c:54:1a:d5:25:35:c6:d5:c6:ce:33:b2:25:9a:
                    af:e3:c7:a8:4a:6b:23:47:4d:45:5f:5a:8e:c8:cd:
                    27:a2:27:a5:42:5e:d8:a7:57:d3:b9:d6:1c:53:ee:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:03:1D:C2:40:61:09:32:77:26:46:5E:FD:92:6A:4D:07:34:B7
            X509v3 Authority Key Identifier:
                keyid:48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:5e:e3:a8:90:e7:a3:ad:d6:2f:17:49:fb:b0:b9:90:82:
         9a:59:e9:72:1a:9d:05:ea:92:c4:57:f6:6f:14:d3:b6:f4:30:
         e4:5d:02:13:f9:57:8d:aa:ea:93:c7:27:81:3c:67:f6:cd:6e:
         d7:f0:9b:56:86:df:cc:c0:72:9d:ed:94:56:3d:b7:c4:e7:1a:
         f7:78:a9:89:94:33:fd:cb:b4:15:e6:02:58:e5:8e:66:aa:83:
         db:cc:ae:d4:37:50:46:1a:d6:9f:78:81:e9:11:b0:14:96:3b:
         eb:86:05:44:8c:68:f3:8c:6f:f9:38:69:22:43:60:6d:a6:e0:
         74:e7:4c:ee:b7:9f:3d:e4:54:ad:8c:63:06:56:c9:7d:7d:e9:
         c4:2f:10:cc:95:d4:c8:64:36:b1:a0:08:c7:44:41:f4:67:d2:
         dc:bd:40:c0:0f:ae:23:d4:01:33:7e:28:e7:dd:ff:44:62:c5:
         d4:e2:02:98:e1:7e:78:c0:62:58:55:a9:f0:86:98:4d:13:ae:
         eb:e3:29:d9:3d:63:f3:8e:29:3e:62:cc:91:1f:b4:c0:f8:7f:
         80:a1:12:c6:b9:62:4f:36:ba:9c:fc:6a:c5:bf:e7:93:e4:99:
         3b:a5:38:b6:ea:2a:16:ff:35:3c:8d:16:79:9b:55:c4:28:95:
         f1:d5:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org