Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32322d3232203d3e20323633383838.roa
File:                     3137302e3235342e37322e302f32322d3232203d3e20323633383838.roa (raw, json)
Hash identifier:          4mJzGZeYuf4uzaUAL5DRgnQLRq9ykek3Xf5ee4dvx6I=
Subject key identifier:   4F:1F:97:10:8E:E4:31:FD:D8:5A:E6:84:59:FD:78:D2:3E:B4:50:A5
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       1F243D3F4D9B026F8E16738E190B1B43FF47E85F
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32322d3232203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:00 +0000
ROA not before:           Tue 06 Sep 2022 14:55:00 +0000
ROA not after:            Tue 05 Sep 2023 15:00:00 +0000
asID:                     263888
IP address blocks:        170.254.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:3d:3f:4d:9b:02:6f:8e:16:73:8e:19:0b:1b:43:ff:47:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:00 2022 GMT
            Not After : Sep  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:83:7e:60:92:b7:d9:88:3f:3b:03:cf:74:
                    fc:e1:3c:b1:2e:48:bb:03:17:af:30:a6:8b:21:5f:
                    0d:fc:5b:06:be:12:a0:e8:e8:88:52:4f:13:85:7d:
                    51:53:a8:cd:03:15:0a:5f:41:67:87:b2:60:a9:5d:
                    69:23:05:81:fb:5e:42:15:e4:b8:57:2e:00:59:9c:
                    95:91:63:0a:f2:03:93:0c:86:61:19:80:7d:89:b8:
                    8b:66:98:ae:08:7a:65:47:09:22:a3:cb:dd:c3:81:
                    ab:f5:7d:09:49:b3:b6:a8:4f:b6:a3:d1:ce:41:7f:
                    f4:b1:40:b7:80:95:46:18:50:12:26:3e:87:82:df:
                    99:1c:bb:00:ef:46:cc:65:5a:64:e5:2c:f3:8f:cb:
                    9a:8e:57:d1:e4:72:47:75:ec:34:69:8d:3a:00:a4:
                    65:74:7c:c4:4e:4d:fb:c8:77:ad:b4:0e:e8:bf:2a:
                    16:71:59:ae:27:e1:75:2b:56:32:23:54:10:88:79:
                    23:19:f7:5f:3d:ee:d6:2d:67:9f:e0:59:0e:60:6e:
                    37:71:75:58:08:f5:13:ad:21:88:aa:a3:5f:2e:74:
                    8c:8a:1d:21:ad:c2:6c:55:28:b8:39:c7:47:23:7e:
                    98:45:28:0e:e8:a0:98:71:41:79:a9:de:eb:25:cf:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:97:10:8E:E4:31:FD:D8:5A:E6:84:59:FD:78:D2:3E:B4:50:A5
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32322d3232203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:f6:ce:8d:ea:5d:83:e6:4d:b4:24:2e:f1:bc:66:dc:49:
         c5:f2:71:03:e4:45:c5:bd:9f:ee:3f:27:fc:80:ce:d7:8b:ed:
         a4:a8:7a:aa:77:52:6c:8b:51:bf:86:f8:45:b1:a2:aa:7c:7e:
         2c:e8:35:1e:1e:38:b5:00:8c:7e:91:33:82:7c:a3:f2:3c:36:
         d1:f5:0c:5b:8d:40:4a:fb:d0:46:33:d4:69:f7:be:b6:e9:64:
         32:b9:51:38:35:c8:c0:ec:c4:38:20:c9:17:f4:6d:50:f2:7d:
         55:b1:cd:87:3e:05:76:ff:13:a0:aa:4f:7a:30:d2:0e:40:ac:
         82:cf:d7:19:20:4e:03:a5:b1:e2:65:94:a7:c8:28:f6:41:c5:
         a6:a8:ed:3b:c2:85:0c:ee:6a:c5:05:05:1e:b2:30:7c:7e:78:
         e0:40:f9:c1:7d:6d:f1:1a:77:aa:3d:00:5c:a7:16:4f:02:64:
         2e:65:a0:96:ba:e7:10:fe:02:89:ad:1d:12:a2:fe:e3:f7:e3:
         74:b5:7b:b5:53:22:62:c2:94:f6:fc:11:29:a1:b4:25:e2:bf:
         2c:7b:c2:78:92:8f:eb:13:db:85:b8:98:d7:a8:1e:ca:7f:87:
         32:ec:6b:25:a1:33:f5:fb:ad:84:25:49:d2:11:ad:a9:48:75:
         6b:a5:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org