Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32322d3232203d3e203532353933.roa (raw, json)
Hash identifier:          XhbEw8nkNF8Pm/pIXosb9/X1TdVDaur16FuRCRDIQ6Y=
Subject key identifier:   27:6C:8B:39:3A:0E:6A:DB:B0:40:65:74:15:D8:E7:75:CE:E9:10:01
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       4FE4F7A428D41CC6D271D70722A41E70B851B0AE
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:20 +0000
ROA not before:           Tue 19 Sep 2023 12:47:20 +0000
ROA not after:            Tue 17 Sep 2024 12:52:20 +0000
asID:                     52593
IP address blocks:        170.83.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e4:f7:a4:28:d4:1c:c6:d2:71:d7:07:22:a4:1e:70:b8:51:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:20 2023 GMT
            Not After : Sep 17 12:52:20 2024 GMT
        Subject: CN=276C8B393A0E6ADBB040657415D8E775CEE91001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:27:1c:f6:e5:0c:94:37:ee:90:d0:2d:6e:
                    9b:68:a3:2d:ff:70:c4:dd:98:d2:af:54:ba:a4:da:
                    00:0a:73:ea:a3:8b:10:08:bc:c0:0e:af:d5:f2:5d:
                    1e:3f:be:9f:6e:1c:d9:71:1e:b5:62:24:8b:86:54:
                    a9:88:6c:f4:ec:7e:94:29:8e:5e:c4:9d:66:5d:81:
                    52:0e:6c:81:26:76:18:11:80:a7:2c:53:9d:83:67:
                    d9:91:1e:43:c6:bd:5d:69:a0:71:03:1a:f4:b3:93:
                    18:e5:30:62:82:41:24:13:f6:9f:13:6b:a3:55:9b:
                    d0:fe:71:df:cc:49:82:06:b9:fc:42:e9:ab:c7:6c:
                    eb:bc:62:6b:aa:71:65:ab:9e:63:6e:11:1b:69:50:
                    44:7d:ae:02:9e:cc:64:d4:38:a2:97:8c:34:01:1d:
                    1a:66:ea:39:d0:56:01:bb:0f:8e:87:91:f6:4b:c2:
                    aa:f4:8f:b5:3e:42:35:13:31:31:94:9e:d1:c3:eb:
                    58:18:f9:30:06:e2:01:58:48:33:5a:02:66:b1:41:
                    e3:37:86:e8:f3:b1:e7:ae:be:8b:e3:d4:2f:17:f9:
                    dd:00:0b:a0:ce:76:eb:35:6c:a4:59:71:36:a9:8f:
                    2b:c6:21:a8:0b:e9:be:b3:49:3f:06:c7:b2:37:d2:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:8B:39:3A:0E:6A:DB:B0:40:65:74:15:D8:E7:75:CE:E9:10:01
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:ca:92:0e:ed:16:a9:4a:98:a8:1b:c6:83:0b:12:c6:76:
         bb:5c:18:b3:e7:07:58:06:aa:b2:0c:47:34:62:e6:65:c7:b2:
         b5:c4:ab:d8:42:d9:7f:f2:83:3a:13:55:ef:43:8b:0a:14:ca:
         44:56:e7:a4:11:d8:2d:3b:45:9e:6b:ac:92:30:40:03:df:5b:
         ac:cf:ae:c2:cd:f4:e6:10:ab:cf:45:0e:51:78:73:a1:4b:9a:
         3d:df:06:f2:72:d8:d5:bf:10:6e:e2:5f:b9:4c:cf:fe:79:f6:
         cc:82:7e:57:14:e6:59:28:51:93:9a:95:fb:4d:ed:e4:23:66:
         7d:a3:62:cd:78:dd:53:ae:b7:14:45:72:dd:ee:4e:6a:8f:18:
         fe:5c:ba:14:94:e0:78:24:51:2b:59:38:ec:16:24:08:79:df:
         f8:ea:fa:9d:bc:4b:8f:b3:1f:c7:52:d4:56:81:cf:66:82:6a:
         81:9c:91:a4:e6:0b:4b:9e:6b:c7:19:86:b3:73:b3:60:b9:64:
         29:0b:4a:cd:ac:b8:ec:b6:e1:58:e3:d4:33:62:0f:ab:5b:70:
         a6:79:91:1b:21:40:cd:87:41:f9:b5:43:17:eb:0d:9c:bc:34:
         46:6b:ef:ac:b2:f7:cb:8b:b1:ad:45:c4:41:dd:da:11:c8:52:
         a8:6d:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org