Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa
File:                     3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa (raw, json)
Hash identifier:          HFKz4abotWEqar2mnskAIM73tKZKyoCRjuVt4h6IGCA=
Subject key identifier:   DD:C3:27:1C:F4:19:2F:55:A7:CF:8F:83:A7:37:18:D8:F9:11:A7:83
Certificate issuer:       /CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
Certificate serial:       14ABCD19BE31625DC0FCD6EF1F92062F7757125E
Authority key identifier: 30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa
Signing time:             Wed 22 Mar 2023 19:08:24 +0000
ROA not before:           Wed 22 Mar 2023 19:03:24 +0000
ROA not after:            Wed 20 Mar 2024 19:08:24 +0000
asID:                     266492
IP address blocks:        170.244.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:cd:19:be:31:62:5d:c0:fc:d6:ef:1f:92:06:2f:77:57:12:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
        Validity
            Not Before: Mar 22 19:03:24 2023 GMT
            Not After : Mar 20 19:08:24 2024 GMT
        Subject: CN=DDC3271CF4192F55A7CF8F83A73718D8F911A783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:f2:fb:4c:6e:18:f6:49:4f:de:20:f1:c8:
                    af:90:1f:d9:49:f7:ef:a2:01:97:21:27:0c:5f:5a:
                    58:ed:b9:33:b0:03:43:26:a8:bd:98:b3:0f:06:3d:
                    9d:78:d0:98:59:9e:f3:2a:86:e9:27:f7:47:e8:bf:
                    c0:dc:71:cb:6f:e3:a9:29:39:b4:d8:de:5b:1b:90:
                    2c:36:da:9c:c6:d5:be:d2:d2:76:4f:82:e6:cd:47:
                    03:86:b2:cf:4e:4a:25:e4:37:b3:ca:7e:e5:4d:81:
                    68:b5:54:77:87:12:78:df:5a:b1:9b:87:9a:10:33:
                    42:f2:53:f4:da:b2:ce:55:ed:c8:cb:61:ac:18:95:
                    66:b9:88:9e:69:ad:af:d2:90:6f:64:ca:c6:d7:04:
                    b0:86:b4:94:64:74:02:6f:b6:70:ab:1a:c2:7b:00:
                    95:af:8b:d2:98:b8:35:67:fe:2b:63:97:63:bf:06:
                    9f:69:91:80:55:6e:c7:a6:de:62:16:a6:9f:cd:33:
                    b2:43:88:1e:a8:31:d8:3b:12:ae:f8:0e:d1:46:cb:
                    1f:aa:68:52:2e:80:d6:98:16:39:ad:9a:ff:4d:ef:
                    ef:74:de:fb:81:ab:9c:63:35:d9:b7:68:e5:93:71:
                    66:36:2a:67:9c:ca:4b:9b:66:08:33:56:a5:2b:05:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:27:1C:F4:19:2F:55:A7:CF:8F:83:A7:37:18:D8:F9:11:A7:83
            X509v3 Authority Key Identifier:
                keyid:30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3232203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:85:db:35:6e:6e:2d:6e:ea:a7:aa:9f:48:4f:eb:d1:d0:
         66:e7:80:ee:ed:3d:5d:bb:10:57:9d:82:e8:f4:67:d3:5d:fc:
         83:b0:2d:25:52:c4:2a:26:c7:0c:51:be:be:f4:4f:45:49:29:
         ee:de:0b:d0:0d:64:8f:aa:fa:7a:9f:f5:88:d9:56:b3:15:53:
         1b:11:05:ff:05:2a:c7:81:a1:f0:ea:83:cd:bd:9d:4a:a7:64:
         21:ad:d6:95:cb:2e:63:e8:b3:19:5b:e3:e8:bc:46:a2:b5:14:
         dd:c2:37:98:7c:f5:38:96:e7:e7:9d:dc:cf:47:23:8d:c5:9f:
         d2:4e:9a:a1:9b:7f:75:87:58:80:73:1a:c1:f8:c8:eb:f5:e8:
         ef:4b:ad:93:4a:db:71:5f:a1:02:4a:6e:cf:ca:94:dd:85:18:
         f4:a5:b8:43:f9:12:c6:4c:09:14:ac:1a:87:01:f6:66:84:94:
         e2:7d:a1:3b:89:80:0c:b4:f9:10:0e:a0:d8:74:93:c4:0d:68:
         af:83:a9:95:ab:08:0c:cf:8b:48:52:57:d9:27:c8:33:0c:9a:
         c0:44:a8:fe:ed:fa:d0:e5:e5:09:3b:51:07:94:8e:00:b7:b4:
         7d:53:39:00:e1:ad:1c:10:01:a0:91:bb:0a:dd:97:fd:b7:54:
         dd:f7:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org