Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32342d3234203d3e20323633383838.roa
File:                     3137302e3235342e37322e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          PXxl5I075RcgGEBhPuwwxkpiRAGoavX3GB/wDmWzwmo=
Subject key identifier:   8D:0B:AF:F2:A7:67:1C:A4:F2:78:D9:6A:3D:6F:CF:26:E4:69:DD:9C
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       364AFE17FEE19E9AF1605ECB655B4456AE688D12
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:00 +0000
ROA not before:           Tue 06 Sep 2022 14:55:00 +0000
ROA not after:            Tue 05 Sep 2023 15:00:00 +0000
asID:                     263888
IP address blocks:        170.254.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4a:fe:17:fe:e1:9e:9a:f1:60:5e:cb:65:5b:44:56:ae:68:8d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:00 2022 GMT
            Not After : Sep  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:07:41:7b:73:49:e1:b2:e8:56:04:98:ce:
                    71:07:5b:03:c9:b2:c6:7b:f5:8b:75:37:b8:51:cd:
                    1c:9d:30:52:ce:ce:f7:1a:62:71:93:37:1b:00:97:
                    39:16:29:1f:f8:11:0b:93:64:95:53:63:90:12:0f:
                    a4:3c:8b:c2:58:3b:93:e7:ec:8e:26:50:5d:95:fd:
                    07:fb:7f:47:a2:76:93:74:ab:bc:70:34:3b:27:be:
                    37:c6:88:82:0b:a5:9c:12:b7:92:90:2e:4a:e3:93:
                    8e:ca:a6:38:6d:65:7a:bb:99:3c:cf:d1:f7:d2:af:
                    4d:91:7a:06:cc:5d:d8:bd:6f:46:0a:e4:cf:40:cc:
                    9e:f6:b8:99:f3:de:55:10:8c:65:9d:dd:f1:04:e7:
                    8f:90:2f:fe:f6:4d:a3:22:d0:8f:c2:2c:a1:76:cb:
                    58:06:92:76:90:f5:52:b4:4b:70:72:3f:8a:15:c8:
                    d9:c5:5b:f5:21:74:85:42:83:f8:44:ff:5b:82:61:
                    3c:5f:5c:7d:fe:77:07:f4:17:a8:75:69:99:6a:15:
                    99:d8:59:c8:0d:96:aa:02:63:de:cc:fb:43:80:01:
                    e9:76:72:f4:48:91:9f:32:b8:8d:f1:e0:91:02:b8:
                    da:53:c8:4f:fe:8c:db:4d:6e:7f:71:12:c5:89:7d:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:AF:F2:A7:67:1C:A4:F2:78:D9:6A:3D:6F:CF:26:E4:69:DD:9C
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37322e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:b0:a8:bc:f7:ab:77:dc:61:de:77:53:b1:7a:f5:79:c7:
         75:2d:21:58:2a:5b:67:6f:0e:d8:2d:39:3f:7c:c6:d3:9e:f5:
         16:ed:90:55:1f:a9:34:fa:ec:f6:ca:ee:f6:d0:6f:27:5b:ca:
         ec:e3:5e:52:66:58:1b:c3:13:1d:52:05:bb:c1:d4:bc:57:c8:
         5e:df:68:b9:fa:a8:00:6e:6e:df:57:95:85:72:58:4f:3b:26:
         b2:cb:49:fd:0f:ab:a7:18:2d:15:50:5c:e5:87:9d:c7:60:e3:
         75:71:75:10:bc:69:b7:a4:b4:9e:d3:79:14:e6:29:9f:fd:83:
         de:88:06:5a:63:0f:37:02:71:d0:59:70:e0:6e:66:dd:2a:b4:
         be:d5:6c:c5:d4:90:fe:fd:49:46:b4:ac:b1:ac:58:20:c0:67:
         4b:ef:2f:4c:4d:ac:37:32:c9:0e:b1:06:ff:04:2f:46:eb:24:
         2d:16:f1:fd:4e:6f:78:a4:a4:e3:73:4c:55:8f:52:6c:77:cf:
         92:94:42:e4:d3:32:4d:0c:c4:e0:1e:6e:b1:47:fb:f0:d6:87:
         86:1e:ea:77:e8:86:b9:82:7c:81:66:68:3e:d5:4d:9e:25:12:
         14:83:2e:af:5a:6a:09:28:a0:b1:d7:0d:af:95:2e:62:c4:db:
         bc:61:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org