Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37332e302f32342d3234203d3e20323633383838.roa
File:                     3137302e3235342e37332e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          8slh/Ycs8+BBpFkn0G/Ddr6o17s4t2HZCLS3laHCx78=
Subject key identifier:   C0:59:73:1E:75:8F:3B:9D:4B:C0:94:5E:70:12:A2:63:66:D8:D5:8B
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       2B93DED884F578A4752F1E2293B16C8F5EE60847
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37332e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:00 +0000
ROA not before:           Tue 06 Sep 2022 14:55:00 +0000
ROA not after:            Tue 05 Sep 2023 15:00:00 +0000
asID:                     263888
IP address blocks:        170.254.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:93:de:d8:84:f5:78:a4:75:2f:1e:22:93:b1:6c:8f:5e:e6:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:00 2022 GMT
            Not After : Sep  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:8a:98:57:f3:51:35:2a:10:90:5c:10:b2:
                    96:88:54:d3:76:e2:a4:8f:8f:1d:44:ba:ea:37:6a:
                    c5:ad:89:03:e2:9d:56:1b:13:8d:1d:5d:c2:19:74:
                    ce:0f:37:ae:26:9e:5d:3e:d6:aa:a6:bb:cc:b7:34:
                    cb:1b:82:9a:24:86:fc:c7:8a:aa:83:3a:ba:c0:a9:
                    59:ab:7d:9a:70:31:5e:dc:dd:16:47:b8:14:f5:f6:
                    d8:1f:b6:07:f3:bf:4d:04:0a:61:b3:99:1a:37:cd:
                    31:00:f5:dc:92:c7:12:e5:3a:75:0d:46:b4:c1:7a:
                    8e:36:78:73:27:6a:80:92:69:9e:ec:c7:06:92:d3:
                    cb:6f:36:2e:1a:fb:5d:c2:79:67:d9:ac:88:2b:f9:
                    90:4c:25:42:57:54:56:77:2d:f3:7a:30:44:07:2c:
                    da:42:23:8c:9c:6d:67:7f:11:5b:6c:ab:98:47:e1:
                    07:c0:58:4a:7c:23:4f:06:b9:50:9b:b7:bd:cc:89:
                    98:01:19:01:f8:39:42:dd:f9:74:58:8f:6f:12:17:
                    00:96:4f:6e:7b:46:c2:c1:c2:43:18:6d:b7:41:8b:
                    f0:6e:e5:1d:b6:d6:b2:a9:e1:76:c4:1c:17:ba:65:
                    3e:94:6c:7f:7e:81:d6:06:05:72:f1:3d:a1:c5:57:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:73:1E:75:8F:3B:9D:4B:C0:94:5E:70:12:A2:63:66:D8:D5:8B
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3137302e3235342e37332e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:94:c7:22:de:ec:78:dc:5a:6c:3b:56:a4:57:b8:e3:b3:f4:
         6e:06:31:1c:99:47:a5:a1:e3:f5:ca:c1:90:80:63:0a:07:82:
         95:03:5f:33:4b:7a:cf:fb:72:50:ab:9c:8b:b4:7d:56:67:7f:
         6e:d0:3b:8f:27:73:58:86:13:85:83:31:c2:42:e8:05:a2:b3:
         c3:77:ad:ca:89:06:e8:dd:2a:05:29:6f:78:d5:84:08:a9:5a:
         94:64:e1:a7:ca:0b:bc:88:4a:79:40:08:da:bc:75:f8:8f:31:
         4e:8b:5e:c6:b1:e5:60:ba:10:9c:25:e1:8e:87:90:5b:ce:f3:
         ac:c3:42:15:9a:4f:fe:95:41:99:a1:70:b5:7f:32:a4:e6:24:
         48:0a:63:f3:f3:ae:48:80:43:f4:d0:e6:77:05:2f:66:a9:b6:
         1e:13:83:ae:99:a7:59:5c:59:32:57:d8:0f:83:55:70:b4:8e:
         01:bc:10:70:ee:85:de:b9:1c:b2:fe:87:e2:99:cb:c3:83:46:
         fb:63:c4:a8:dc:9f:4d:ce:28:c5:ee:57:ff:e6:5b:44:04:39:
         47:34:bd:5a:3c:ec:b7:f6:dc:04:3b:34:33:29:d2:25:ba:e7:
         47:4e:cc:4b:db:a3:b7:0d:80:7f:96:e4:d1:9c:97:62:bb:62:
         0c:d4:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org