Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          w0FLQjRW+S7o0GY+9LWqK6O8cUeAVRzUc4dU/S6rh5Y=
Subject key identifier:   8C:FB:90:25:C6:DB:8D:B8:6F:3A:EB:45:63:CD:B9:3F:89:B9:79:37
Certificate issuer:       /CN=0796979B1EB6929CCF726A0BD121B88402FC0C15
Certificate serial:       2F896A7424F0A0FE7652602148A6A5BAD8108EAC
Authority key identifier: 07:96:97:9B:1E:B6:92:9C:CF:72:6A:0B:D1:21:B8:84:02:FC:0C:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
Signing time:             Wed 07 Jun 2023 20:24:46 +0000
ROA not before:           Wed 07 Jun 2023 20:19:46 +0000
ROA not after:            Wed 05 Jun 2024 20:24:46 +0000
asID:                     265093
IP address blocks:        170.233.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:89:6a:74:24:f0:a0:fe:76:52:60:21:48:a6:a5:ba:d8:10:8e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0796979B1EB6929CCF726A0BD121B88402FC0C15
        Validity
            Not Before: Jun  7 20:19:46 2023 GMT
            Not After : Jun  5 20:24:46 2024 GMT
        Subject: CN=8CFB9025C6DB8DB86F3AEB4563CDB93F89B97937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:9a:63:e1:26:c4:45:f8:83:46:c9:a2:42:
                    7d:8f:4a:28:a9:17:b3:8c:6c:29:9a:f1:3f:7b:07:
                    15:35:71:b9:52:b1:12:bc:78:89:56:a3:65:04:2d:
                    d0:94:c5:b3:e3:85:4e:24:ed:38:1d:fb:dc:cf:f4:
                    1c:b5:eb:0e:5d:e0:d0:bc:8f:6a:89:46:4e:73:dd:
                    8a:70:cc:b1:c9:44:5c:69:d2:80:b3:54:3c:03:11:
                    a1:52:eb:ae:00:56:33:c2:01:60:22:68:f6:2e:ba:
                    15:9c:15:d8:74:a2:82:4f:ac:ae:2f:b3:94:6b:85:
                    02:69:34:12:05:aa:f8:13:31:c3:c9:95:67:37:c2:
                    e1:ac:2e:0e:0d:90:77:c1:5c:31:47:ce:07:4a:05:
                    1c:f3:16:0d:aa:60:29:b0:9d:a5:40:ab:06:14:76:
                    c3:7b:f0:2a:7f:f9:93:52:97:88:53:d0:36:cd:d1:
                    dc:da:f5:3b:2d:f8:53:5d:51:af:f4:27:8e:0f:39:
                    91:28:92:af:d3:d2:2d:22:4c:5c:1b:22:df:55:86:
                    fa:97:ff:ce:d2:fe:f3:e0:76:38:ed:cf:a2:86:9f:
                    eb:81:3d:0d:e3:1f:35:3d:da:ce:8e:f7:5e:64:e6:
                    d3:b4:e0:32:cc:61:3a:00:1d:7d:09:b5:a4:b9:2e:
                    45:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FB:90:25:C6:DB:8D:B8:6F:3A:EB:45:63:CD:B9:3F:89:B9:79:37
            X509v3 Authority Key Identifier:
                keyid:07:96:97:9B:1E:B6:92:9C:CF:72:6A:0B:D1:21:B8:84:02:FC:0C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:c5:8d:14:7b:43:54:d4:eb:af:15:3c:4c:64:23:38:6b:
         e3:ce:8f:24:7c:8b:32:bf:4b:9d:39:0b:93:54:e1:1a:38:00:
         3c:58:a1:b6:dc:88:ee:16:b8:ef:7c:db:de:b0:13:39:31:50:
         09:64:1b:22:d9:8a:64:f0:a0:58:74:6c:a5:fb:68:bc:cd:c7:
         2c:a4:b4:8b:d2:8e:a6:b9:18:8b:93:a4:4b:2f:40:3c:bf:14:
         92:37:33:f1:0b:36:5e:ea:54:c6:1a:01:b7:b2:d2:bb:33:88:
         7a:19:ec:b3:b8:e0:b7:47:88:26:d8:8b:77:fa:19:15:04:ff:
         75:fa:29:ce:ac:09:03:9f:a2:2c:00:e9:4c:35:8d:5e:c4:bd:
         be:53:9c:bd:f6:b0:f9:5f:e7:45:43:da:90:67:ab:2a:55:dc:
         9d:46:83:d0:bd:7e:0e:a1:b0:0f:9f:aa:1a:82:05:be:90:f4:
         ff:88:44:a0:9a:2c:1c:69:df:f4:4b:0b:f3:05:34:f2:a3:36:
         ee:ac:3d:47:70:74:12:09:2b:b0:d7:7a:3d:c9:32:fd:70:a4:
         ed:e7:c7:a8:29:ec:5a:4f:56:90:81:a5:5c:d8:3e:8f:79:20:
         6d:42:23:b0:49:c2:cd:6c:23:f3:ed:06:7a:fb:ac:63:83:27:
         95:7e:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org