Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32332d3233203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32332d3233203d3e203532353933.roa (raw, json)
Hash identifier:          dNZ2KHWPJM4Pf567Bqwgy+NvmafXoRJO3j74isfzu+g=
Subject key identifier:   06:79:41:2A:5F:A0:14:1C:57:09:C7:F3:D8:53:39:3B:33:8A:A4:51
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       72E9F29D1B569EE36A4188E515B2354124CA597D
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32332d3233203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:19 +0000
ROA not before:           Tue 19 Sep 2023 12:47:19 +0000
ROA not after:            Tue 17 Sep 2024 12:52:19 +0000
asID:                     52593
IP address blocks:        170.83.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e9:f2:9d:1b:56:9e:e3:6a:41:88:e5:15:b2:35:41:24:ca:59:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:19 2023 GMT
            Not After : Sep 17 12:52:19 2024 GMT
        Subject: CN=0679412A5FA0141C5709C7F3D853393B338AA451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:76:fc:a8:58:d7:c7:c6:87:45:67:a1:89:
                    3e:c0:15:b4:cd:b7:6d:6d:c3:c8:f2:83:de:27:86:
                    ff:4d:37:f2:44:f4:62:77:ed:25:fd:36:0f:1e:a1:
                    4e:f6:e0:91:c0:29:b4:2f:b0:64:98:2a:3c:87:23:
                    d0:f7:86:9d:ff:74:1e:62:88:36:ec:98:34:27:78:
                    2a:5d:d6:11:ae:6e:2d:7f:35:a6:46:f5:07:1b:b6:
                    8e:6a:a0:8f:b1:de:af:d9:bc:41:bd:21:84:a3:73:
                    4d:76:82:e7:1b:2b:2e:3f:f3:b6:8f:5a:43:48:0c:
                    5d:4f:00:8c:f6:d8:85:48:57:8c:ca:d8:93:dd:f1:
                    78:1f:43:90:b6:06:a0:d0:e3:b3:42:6b:3a:cd:ee:
                    ce:8a:f4:9a:b4:6a:d2:20:46:a5:f8:71:61:ff:42:
                    38:95:21:4a:e7:88:7b:29:72:d6:41:2f:12:36:49:
                    72:d7:f8:d2:05:be:b9:13:5a:97:0c:b3:0c:03:02:
                    3a:56:8f:73:22:67:92:4c:2c:9c:0e:b5:fc:93:7c:
                    fb:3e:2f:78:3f:64:b8:93:24:d4:a2:d7:ca:55:54:
                    94:ba:6e:d2:e2:1d:ce:d3:d3:46:db:02:2b:73:cf:
                    0a:a8:0c:aa:78:f2:54:72:e9:e9:a6:05:37:08:f0:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:41:2A:5F:A0:14:1C:57:09:C7:F3:D8:53:39:3B:33:8A:A4:51
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32332d3233203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:24:86:36:92:6f:3d:2f:79:49:5c:59:5f:9a:00:04:de:
         17:c7:0f:ef:d4:96:8c:12:99:93:f8:05:5a:99:e6:42:a6:de:
         0d:fc:f9:07:b5:0c:62:d2:e8:c8:29:ff:6f:b3:e6:98:bf:5a:
         c0:61:1d:fd:9d:88:df:df:15:df:43:6d:38:d7:85:fd:a6:27:
         52:36:d2:03:81:a6:2c:aa:38:81:66:86:0d:44:3e:b9:5c:76:
         4b:5a:04:a1:e5:1e:5c:44:f8:8f:b2:f1:39:bb:e1:3a:93:23:
         4c:c5:70:74:1c:f2:5b:fa:8c:a1:05:17:38:bd:ed:4a:3f:d7:
         5f:ee:26:f5:21:ce:ca:16:3b:e5:fd:7d:a2:0e:ee:a1:70:70:
         86:e1:61:c6:51:e2:80:62:a8:24:f9:d7:4e:f3:6d:3a:cd:c5:
         7f:3a:3b:a3:b5:ca:ed:9a:db:03:09:f0:d0:a9:85:e9:d8:64:
         99:cb:c8:c0:33:bc:a0:5a:82:4f:34:77:90:51:c6:5b:b9:36:
         03:1a:d9:e0:f0:f9:63:fd:c7:e2:1b:9f:9f:3d:69:da:c2:d6:
         4d:de:3f:b5:85:e6:63:34:bd:1b:d0:6b:5b:a8:29:fc:1c:44:
         82:24:45:b5:6a:df:a5:6e:3a:f7:95:d4:6a:64:39:6c:be:c9:
         e2:17:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org