Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (raw, json)
Hash identifier:          jWpL5Ycfi8KSSEt0JDcseZrey4MZHvhcAYcy7O7x6v0=
Subject key identifier:   08:C0:AD:EE:69:F2:7C:C9:AE:42:A5:5D:AB:24:00:AB:B8:6D:1B:87
Certificate issuer:       /CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
Certificate serial:       6F34187FB65C2E23DF1C447E57B53A82DB8B822C
Authority key identifier: B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa
Signing time:             Fri 11 Nov 2022 18:17:57 +0000
ROA not before:           Fri 11 Nov 2022 18:12:57 +0000
ROA not after:            Fri 10 Nov 2023 18:17:57 +0000
asID:                     52593
IP address blocks:        170.83.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:18:7f:b6:5c:2e:23:df:1c:44:7e:57:b5:3a:82:db:8b:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
        Validity
            Not Before: Nov 11 18:12:57 2022 GMT
            Not After : Nov 10 18:17:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:af:61:ca:33:bf:2b:4e:58:14:9e:b9:d2:
                    1d:6e:eb:8e:a5:f1:e7:81:ba:47:57:ba:8f:3a:64:
                    73:c9:05:58:b3:c8:53:e6:39:39:c8:af:ce:5d:3e:
                    53:07:86:d0:86:48:d3:ea:73:70:30:97:47:88:e7:
                    0a:e7:95:cd:a9:b6:39:a8:6d:59:7a:56:60:0c:7a:
                    d6:1c:56:0a:2b:12:7b:92:f5:56:40:79:cf:11:cc:
                    b0:7e:b9:b2:d1:b9:bc:de:22:8f:35:77:9d:b0:03:
                    a8:f3:b7:7c:25:d5:15:d1:0b:5b:79:7f:0a:f8:c3:
                    dc:f2:9c:50:fd:ec:ac:30:db:15:c3:80:f3:13:ab:
                    c3:2d:d4:20:d8:83:20:66:27:7d:37:7e:ee:81:e5:
                    05:e0:55:5e:a1:f0:51:54:2d:57:96:99:43:59:03:
                    5d:0b:16:0b:e5:cc:ba:0d:54:ce:06:39:67:c2:ad:
                    9d:c2:7f:56:8c:58:27:e8:57:f1:71:24:60:f8:9c:
                    b6:14:c9:93:e4:ab:b8:9c:0a:eb:68:7d:f6:80:01:
                    82:99:5b:11:67:86:c0:18:a3:8f:ba:54:fa:04:a1:
                    40:3f:b8:37:9f:fc:88:39:b0:87:c8:89:77:55:f7:
                    7d:4b:21:67:26:42:0e:37:00:b9:be:5c:c7:b5:74:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:AD:EE:69:F2:7C:C9:AE:42:A5:5D:AB:24:00:AB:B8:6D:1B:87
            X509v3 Authority Key Identifier:
                keyid:B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:f2:9e:72:73:93:91:d2:b4:d1:2f:89:4d:9c:43:ef:60:
         15:1c:1d:db:1b:3f:2c:2e:0f:17:8d:61:d2:d9:1a:95:80:80:
         ef:0d:7e:5c:1c:83:52:e1:69:67:74:26:02:70:51:7b:40:ac:
         21:80:74:d1:09:03:78:87:4c:f5:e6:6a:d4:7a:77:92:c2:90:
         2c:4a:4f:58:77:76:c3:81:fd:e4:2f:10:7a:60:72:10:a7:7d:
         78:ad:8c:b3:0c:24:0d:fc:a8:84:09:2e:6c:95:9f:0e:e1:60:
         06:ef:77:4e:cf:75:aa:06:49:f6:99:2a:10:8d:96:67:d9:59:
         8f:4d:b7:4f:d8:5c:fe:60:39:04:ca:b9:8d:a9:38:ed:f5:58:
         dd:f7:57:a5:b9:83:c5:6b:01:71:a5:1f:65:2d:cf:8d:3d:c2:
         f9:ed:51:17:1a:c3:36:b0:7b:8c:d8:2c:e3:4c:f6:2c:c1:21:
         cb:d9:21:16:ae:9c:16:8c:4c:e4:6c:39:f0:78:2b:aa:b5:28:
         07:ca:f3:c6:33:a7:9c:57:03:9e:50:0f:83:be:16:ca:56:0f:
         60:30:78:d0:3e:63:16:96:af:7a:36:32:0a:59:ca:a7:15:c1:
         e8:4b:4e:82:b1:3f:3b:26:ea:e4:5b:02:df:0b:50:b2:a1:d3:
         15:ba:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org