Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa
File:                     3137302e38332e3231312e302f32342d3234203d3e203532353933.roa (raw, json)
Hash identifier:          W5gVMGh4hZ6bDJr+HEpzY107nfy7ldsVHKf/5ocTICk=
Subject key identifier:   E2:40:19:C7:B7:81:5E:A8:8D:16:0B:BE:5D:31:D6:C2:D4:6A:D5:BF
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       7A7EE62C8B139CA641A956871586EB4F92D6379E
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:20 +0000
ROA not before:           Tue 19 Sep 2023 12:47:20 +0000
ROA not after:            Tue 17 Sep 2024 12:52:20 +0000
asID:                     52593
IP address blocks:        170.83.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:e6:2c:8b:13:9c:a6:41:a9:56:87:15:86:eb:4f:92:d6:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:20 2023 GMT
            Not After : Sep 17 12:52:20 2024 GMT
        Subject: CN=E24019C7B7815EA88D160BBE5D31D6C2D46AD5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:2e:ff:e7:3c:11:83:05:18:72:de:e8:49:
                    ee:92:db:b3:f9:86:e6:4f:d6:62:aa:f1:4a:07:56:
                    ab:67:ad:ae:de:2e:e1:a4:fc:c2:6c:3a:89:47:e7:
                    1e:a4:cc:35:9b:d1:81:60:4e:7f:2b:5c:d6:d0:d9:
                    97:ab:27:01:06:f2:c5:5a:93:d2:b4:77:3c:b0:e2:
                    8d:3d:32:09:4b:58:cd:92:fe:50:6a:c3:d7:40:fc:
                    62:d9:06:46:7b:2e:a7:69:3f:45:1c:cb:ad:56:66:
                    ac:5d:c0:a9:96:35:67:81:52:e4:20:7f:f5:6a:45:
                    ae:c5:0e:b7:48:f0:89:4f:e2:70:c5:6a:d4:4b:e1:
                    b5:16:ff:fb:99:27:62:ef:72:67:f4:cb:b8:85:1b:
                    dc:c9:ab:25:3a:0b:65:51:5d:79:35:1c:93:11:35:
                    09:2d:17:a2:94:6b:a3:b6:91:8a:17:d9:c2:cc:0b:
                    24:1d:48:7c:3f:a9:bd:0b:ce:1f:4c:4d:8c:ab:3b:
                    49:71:c1:8d:5c:73:12:30:63:68:79:b8:55:44:34:
                    2f:d8:e9:0e:d5:e5:65:63:61:ef:f6:49:41:38:03:
                    94:25:47:42:cd:d3:aa:4b:b9:58:ea:04:d4:60:ec:
                    24:af:5e:08:5b:77:02:51:44:d0:fe:eb:a4:ef:fb:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:19:C7:B7:81:5E:A8:8D:16:0B:BE:5D:31:D6:C2:D4:6A:D5:BF
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:84:6c:b6:06:65:68:95:1b:c6:5a:d1:17:21:b9:26:77:f6:
         7f:ad:c8:73:be:4d:b7:75:5a:8f:91:f1:8a:9b:c8:68:a2:c5:
         ae:89:ed:fc:9c:b1:d8:0a:a9:90:c4:76:65:6b:b3:e3:e4:cc:
         60:ef:d1:d6:83:16:5d:32:54:5d:4c:d0:69:ef:70:1f:51:fc:
         e3:cd:7f:bb:83:4b:da:60:a7:9b:52:8f:67:23:7c:53:f3:7a:
         96:de:02:47:5a:7a:4d:8e:9f:0c:a3:4e:8e:ae:6e:ac:2e:c0:
         72:08:ae:84:9f:d8:b4:b5:24:13:a4:5c:1d:86:0f:6b:a2:54:
         db:8e:c1:54:1d:0b:9f:4c:84:4f:20:c5:bf:a2:2d:7c:0b:a5:
         68:31:ab:f0:8d:64:61:e2:09:4c:28:3b:21:ef:51:8c:7c:f6:
         c7:67:9a:b7:52:0b:fb:fe:e8:9e:47:ce:91:44:bf:ef:c2:b3:
         37:96:92:1a:08:6e:58:80:f3:0f:df:69:32:e8:23:a0:5e:44:
         36:37:68:e6:c8:1c:1d:9b:aa:58:ad:70:84:20:9d:4a:97:e0:
         b5:69:fa:8d:e5:1c:85:3a:5b:c1:3d:0b:85:93:43:38:f2:9c:
         e2:c6:61:d8:e1:d8:95:21:f2:0c:73:0a:bd:33:e8:41:5d:df:
         74:5f:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org