Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa
File:                     3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa (raw, json)
Hash identifier:          dnqJfZ9ifWXXBFRrwQS8D+tL31Aafj21q1Iq7aJtwoc=
Subject key identifier:   00:7E:B0:D6:23:0F:9E:4C:8D:48:41:8E:22:AA:BF:04:DE:68:8F:51
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       79092D6497A31E0C0B6A110C190761D2613D706C
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:11 +0000
ROA not before:           Tue 02 May 2023 16:56:11 +0000
ROA not after:            Tue 30 Apr 2024 17:01:11 +0000
asID:                     266492
IP address blocks:        170.244.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:2d:64:97:a3:1e:0c:0b:6a:11:0c:19:07:61:d2:61:3d:70:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:11 2023 GMT
            Not After : Apr 30 17:01:11 2024 GMT
        Subject: CN=007EB0D6230F9E4C8D48418E22AABF04DE688F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:2b:fb:2e:fe:27:db:49:d8:0c:8f:d7:ff:
                    a2:af:6d:94:76:07:76:3f:0b:60:39:b5:f5:3b:ff:
                    f9:33:9e:32:89:d5:b2:9f:8d:31:68:2c:c4:d2:0c:
                    f9:b2:fb:32:a5:34:19:d2:76:f4:d0:e8:0d:8c:00:
                    fe:b7:a6:4b:19:04:23:fa:ce:92:1c:5f:db:2f:66:
                    9a:a8:19:88:55:d9:7d:9d:53:4a:26:9e:3b:3d:88:
                    93:ad:d2:d1:86:c3:ed:63:2b:f0:a9:58:0c:b2:63:
                    1d:6a:fb:ab:9a:72:59:68:bd:c3:e9:d4:58:29:b3:
                    b0:fa:2f:bb:2a:08:5e:66:e0:64:87:49:e6:a4:47:
                    0a:65:ca:d7:30:25:7a:fe:1a:9e:08:8e:06:2e:90:
                    79:95:57:61:6f:f3:91:30:8c:58:92:92:b7:65:da:
                    ff:61:25:e2:d1:76:b4:10:9c:c6:a8:29:a6:07:ef:
                    77:e6:de:33:33:be:38:0a:5d:47:de:3d:bb:4f:f5:
                    b3:25:22:3e:7e:5f:f5:5f:be:d9:48:96:1f:7a:84:
                    4a:07:fb:73:c2:44:52:62:4a:07:0a:91:c5:19:cb:
                    47:95:b0:d7:d2:d5:be:47:b3:f1:62:50:87:4d:08:
                    f5:91:77:95:f5:79:82:29:49:71:8e:f5:4b:1a:8f:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:B0:D6:23:0F:9E:4C:8D:48:41:8E:22:AA:BF:04:DE:68:8F:51
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/3137302e3234342e36362e302f32332d3233203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:f8:2f:18:14:f0:76:70:87:48:c0:b2:ac:c8:8c:dc:bb:89:
         d0:1a:e5:55:a0:ea:eb:ec:bd:5b:6e:81:36:be:4a:92:9e:ed:
         7e:b9:e3:fd:64:17:e5:24:72:61:b1:75:a4:18:cb:3f:7d:24:
         c5:26:71:06:32:74:98:50:76:55:eb:c7:41:17:8b:98:7a:e0:
         44:1e:74:72:3d:51:f5:b8:31:6e:2c:a2:4d:eb:53:7f:81:e2:
         89:19:b2:4c:54:1e:32:44:c9:43:01:d5:8c:e8:0b:ef:07:ac:
         66:51:75:d1:67:57:d9:c7:df:5e:c7:91:b1:fa:41:23:d4:86:
         5c:61:e4:47:5e:f3:ca:24:85:df:11:22:57:5f:1f:ad:67:4b:
         40:0c:52:3e:32:9d:46:c7:31:8d:7d:3f:96:2f:2e:b3:96:71:
         c4:e9:c4:a1:47:a7:02:76:ba:0f:6d:94:e1:8c:63:cc:e8:3c:
         38:22:19:8c:13:79:96:37:94:ea:36:76:51:27:8e:bf:b0:db:
         7a:e2:24:e2:63:03:55:c7:52:3f:8f:ef:b0:34:d8:c3:51:c8:
         cf:63:7c:61:a9:01:c9:f7:48:75:81:92:ef:9a:8a:3c:aa:f3:
         2d:9f:65:05:47:2d:8a:b2:f2:67:74:23:d1:f8:42:22:c4:5b:
         72:3a:31:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org