Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32342d3234203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32342d3234203d3e203532353933.roa (raw, json)
Hash identifier:          zdT8h4ZkBdQ78wM/SWdzsEiI30+vAhEMp+qBuUG5zl4=
Subject key identifier:   AF:14:BE:76:95:20:67:25:07:BE:A0:A7:A8:91:50:2D:52:BC:1A:CB
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       32CB2239A2111FFD5EF660A3C91D20BE72C33E84
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32342d3234203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:17 +0000
ROA not before:           Tue 19 Sep 2023 12:47:17 +0000
ROA not after:            Tue 17 Sep 2024 12:52:17 +0000
asID:                     52593
IP address blocks:        170.83.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:22:39:a2:11:1f:fd:5e:f6:60:a3:c9:1d:20:be:72:c3:3e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:17 2023 GMT
            Not After : Sep 17 12:52:17 2024 GMT
        Subject: CN=AF14BE769520672507BEA0A7A891502D52BC1ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:53:fe:ae:a1:45:7a:4d:ab:02:dd:bb:59:
                    98:42:21:7f:c2:36:95:a1:9e:09:df:17:4e:0f:d8:
                    b7:fa:44:63:7e:c2:00:9d:3b:78:44:46:1e:98:79:
                    2a:80:12:f3:c8:f9:40:d4:f5:50:df:69:10:28:ef:
                    35:6e:df:94:7c:f5:22:df:64:e6:cd:e4:9d:3b:f0:
                    0f:56:d2:ed:b7:1e:7c:89:1b:a9:03:74:e0:f1:2d:
                    3e:d3:4b:ae:22:ab:47:36:22:81:c2:fc:f8:b3:e2:
                    6a:d6:fc:c6:3d:ec:19:12:9f:6a:de:fd:bc:c9:47:
                    4b:bf:ce:25:45:1d:f9:19:1d:78:6f:8d:7f:05:27:
                    c0:81:a7:7d:ab:3d:11:4c:90:1e:3f:22:a7:93:5e:
                    db:b5:14:fb:13:8d:3a:ee:3c:0b:80:f1:b9:98:10:
                    f0:f0:86:e7:9d:93:43:29:f1:91:d8:61:92:00:7f:
                    1a:4d:e1:db:e4:5e:80:7e:05:f2:e6:97:df:b6:44:
                    f3:ce:dc:31:0a:c8:24:e4:0a:37:cf:b3:c2:60:ec:
                    e5:f0:5d:60:8e:dd:d4:6d:a2:9e:5f:61:33:41:aa:
                    bc:f3:f1:8a:ea:ab:9f:17:c4:ab:99:a1:d2:2d:1a:
                    69:f8:80:59:30:8d:22:32:ac:27:79:ec:72:35:59:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:14:BE:76:95:20:67:25:07:BE:A0:A7:A8:91:50:2D:52:BC:1A:CB
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32342d3234203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:86:43:0a:b5:51:5e:47:54:fb:7d:ca:f3:2d:d6:36:ce:
         49:77:4d:79:d0:e3:ab:5c:da:28:a1:3b:aa:9d:87:6c:c2:57:
         38:bd:d9:39:da:9a:b9:79:b7:70:1f:f1:c9:54:42:da:2f:03:
         2e:ab:f3:d6:57:b8:49:6b:e2:7f:31:aa:37:11:de:dc:de:06:
         a9:01:f4:73:68:dd:aa:d9:45:c8:09:d6:c2:4c:a3:25:32:53:
         eb:af:3f:26:77:06:98:d9:b3:42:2e:23:54:e0:e4:a4:26:42:
         63:a6:9d:92:e0:a9:cf:75:d7:e4:ab:37:21:ee:06:a4:a5:51:
         7c:4e:f8:10:74:dc:45:5f:a6:95:40:51:07:a4:8b:fe:ae:82:
         42:50:98:11:ac:96:7b:9a:bd:fa:49:71:cf:1f:c2:45:70:93:
         4b:94:35:b7:06:c6:54:5f:ed:54:49:93:06:d9:a5:9b:5f:ca:
         1e:dc:5c:1d:e6:e7:06:02:85:32:78:e9:84:9f:8c:3a:58:97:
         55:aa:09:f4:5e:aa:9d:3e:c2:40:92:59:6b:36:35:59:e7:ef:
         3b:c8:3b:74:22:97:c7:88:79:42:17:e3:d6:4d:62:00:dc:d5:
         d4:f3:89:36:9d:5d:13:b8:fd:13:31:ac:db:6c:f7:ec:ed:1b:
         75:3e:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org