Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
File:                     3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa (raw, json)
Hash identifier:          Y3jqdRdh9vIvBcMB8EGalUyb9FxGuUbaZv2ZOPi/S/k=
Subject key identifier:   CE:C9:37:AC:03:DD:73:02:DC:45:40:B3:FF:9B:E2:AE:63:28:90:6A
Certificate issuer:       /CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
Certificate serial:       5CB746D7ABB8F3501129D7B726E2E61F54799A73
Authority key identifier: A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
Signing time:             Sun 30 Jul 2023 13:00:00 +0000
ROA not before:           Sun 30 Jul 2023 12:55:00 +0000
ROA not after:            Tue 30 Jul 2024 13:00:00 +0000
asID:                     270628
IP address blocks:        177.70.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b7:46:d7:ab:b8:f3:50:11:29:d7:b7:26:e2:e6:1f:54:79:9a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
        Validity
            Not Before: Jul 30 12:55:00 2023 GMT
            Not After : Jul 30 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:4e:c1:aa:f8:6e:74:b2:3b:22:7c:5a:08:
                    e8:02:74:d5:12:9e:03:e2:cf:81:ed:56:2f:1c:b7:
                    85:1e:aa:76:fb:c2:2c:e3:b4:0b:13:de:73:e9:3c:
                    b3:49:77:84:3f:b1:f5:67:cc:7c:6a:7a:f7:f6:90:
                    3d:00:c0:f2:0b:df:d6:d6:01:d4:e8:41:7d:bb:45:
                    8b:42:22:a1:14:62:3a:4b:f8:ec:f3:00:12:a4:3e:
                    01:a5:69:bf:b1:58:0c:54:b9:eb:14:7e:79:54:76:
                    c5:e9:c9:57:d9:3b:12:bd:e8:36:32:32:76:ae:d8:
                    2a:80:ab:f6:5a:47:44:20:9d:f3:d1:78:4b:c9:8b:
                    66:6f:5d:a3:ed:af:2b:79:58:dc:e9:8a:47:3f:42:
                    ca:62:7a:f3:1b:eb:0c:6d:c9:a8:03:0c:d3:ff:8e:
                    2d:f3:ff:01:4e:07:eb:8c:b0:eb:50:81:4d:84:c6:
                    df:a9:87:2f:73:41:26:e0:66:53:16:bc:b2:66:55:
                    c3:50:44:20:c4:cd:4a:c3:a4:4a:17:2c:47:9f:6f:
                    ab:a1:8a:63:7d:68:db:a6:ae:31:ac:c2:06:62:43:
                    c7:7c:06:e3:53:41:01:28:0b:1f:22:86:b7:d6:6e:
                    ba:5b:55:b9:1d:44:89:1b:03:b7:f3:c7:60:75:e2:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C9:37:AC:03:DD:73:02:DC:45:40:B3:FF:9B:E2:AE:63:28:90:6A
            X509v3 Authority Key Identifier:
                keyid:A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:14:2e:98:08:ba:ed:5b:b7:d9:25:71:33:78:53:39:fa:a3:
         b7:10:07:c8:81:58:9b:35:15:29:95:a7:62:91:61:a3:24:a2:
         a6:b6:cd:d8:8b:27:ce:a9:34:f5:9b:6b:a6:2c:d4:a1:bd:b8:
         e2:75:cb:4c:5b:07:1c:ef:d3:10:1b:a8:7a:0a:0d:40:8b:54:
         89:22:c7:45:35:6d:95:c6:13:06:f8:8d:d3:17:4b:a9:85:ab:
         b3:b9:45:d0:03:59:2f:92:56:14:d2:83:a0:fd:ec:ce:92:07:
         19:c5:3c:dd:47:ae:3c:cf:31:89:3a:18:fb:b8:90:97:f9:87:
         13:bc:5d:ff:a7:49:25:1c:14:2c:68:e6:28:31:0a:9d:53:e0:
         ef:f3:b0:d5:60:e4:71:37:ba:61:71:70:10:87:fd:40:92:74:
         0b:c4:57:15:3c:48:e2:b7:1e:17:47:cc:b6:b0:0d:c6:66:39:
         31:81:e6:9c:c8:67:eb:2d:43:71:d7:7f:1c:8d:9d:c9:47:a2:
         f5:9f:67:18:78:a5:ef:c9:2c:2b:8c:30:98:b3:b5:66:4b:5c:
         b3:ed:db:61:9b:cf:65:ab:62:73:e4:18:ed:4e:59:26:71:12:
         88:30:8a:a7:78:15:6b:5e:98:4c:fa:f5:66:fd:a7:b6:6b:2f:
         c3:a4:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org