Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32332d3233203d3e20323636343932.roa
File:                     3137302e3234342e36342e302f32332d3233203d3e20323636343932.roa (raw, json)
Hash identifier:          phtHhB1+PjN6zgNKSf6XYlOizpX7ua4K7uFK3kawn1E=
Subject key identifier:   6D:07:43:8F:10:A2:70:77:04:F7:8E:1B:AE:1E:50:C2:A7:99:28:E8
Certificate issuer:       /CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
Certificate serial:       74CCE2BFDBDCF8CD388F6D9C3BA1CAC48514C294
Authority key identifier: 30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32332d3233203d3e20323636343932.roa
Signing time:             Wed 22 Mar 2023 19:08:30 +0000
ROA not before:           Wed 22 Mar 2023 19:03:30 +0000
ROA not after:            Wed 20 Mar 2024 19:08:30 +0000
asID:                     266492
IP address blocks:        170.244.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cc:e2:bf:db:dc:f8:cd:38:8f:6d:9c:3b:a1:ca:c4:85:14:c2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
        Validity
            Not Before: Mar 22 19:03:30 2023 GMT
            Not After : Mar 20 19:08:30 2024 GMT
        Subject: CN=6D07438F10A2707704F78E1BAE1E50C2A79928E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:8d:5c:1f:58:ef:41:05:a8:f5:e2:c8:9d:
                    41:6f:f9:ef:65:dc:52:70:52:1b:46:57:15:e8:44:
                    2c:39:67:79:40:a8:46:67:73:04:3c:07:bb:11:e8:
                    3d:51:a0:7c:56:e1:9b:ed:e2:91:0a:c1:dc:7c:28:
                    1c:16:8d:5b:d4:46:5a:57:58:99:d5:53:43:eb:47:
                    2f:c8:f4:9d:57:40:45:35:c5:8c:f7:64:b0:b0:4d:
                    e9:e6:85:e3:08:71:c5:24:f6:c2:3e:9a:70:0c:5e:
                    24:8c:cc:35:02:f3:02:32:fe:e1:65:69:8d:32:db:
                    5a:f0:15:fe:fd:9b:87:71:4e:66:04:19:15:37:85:
                    a0:74:7a:f0:cb:57:a3:9d:21:11:53:7d:bf:ba:0b:
                    75:0b:3c:ac:f7:cd:f1:da:c1:68:b3:33:54:19:28:
                    cb:da:50:f5:ee:5b:1a:40:da:6c:93:7c:74:74:f9:
                    5b:b0:77:4b:40:59:93:f5:8f:3b:a5:c6:30:95:42:
                    a3:17:96:f2:fd:2f:95:d5:eb:1b:66:d7:f3:5b:81:
                    1c:ef:e5:1c:6c:8f:11:8c:c8:c9:38:66:63:54:6b:
                    8d:c5:00:2e:46:2b:5a:09:a4:c3:02:4a:d5:0f:46:
                    26:9b:05:9d:b9:b5:14:3b:81:da:15:39:30:95:54:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:43:8F:10:A2:70:77:04:F7:8E:1B:AE:1E:50:C2:A7:99:28:E8
            X509v3 Authority Key Identifier:
                keyid:30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32332d3233203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:6b:f1:28:1e:1e:d5:b6:b9:77:d4:2f:ee:93:62:77:79:d8:
         5b:2f:0b:44:98:f9:af:0a:92:e1:18:97:bc:c5:4a:3a:d7:59:
         4e:97:54:33:08:03:5b:59:3b:ec:f7:92:78:43:ee:dd:68:9a:
         ba:fd:ad:e4:63:96:06:3e:e7:cf:b9:be:54:65:b7:9f:dd:ae:
         29:3f:14:06:fa:07:d8:11:fa:52:f2:5e:2a:c9:55:1e:7a:0b:
         ca:9a:74:98:b9:21:fc:f5:80:69:26:f4:43:1f:90:26:cd:a4:
         a0:82:22:67:49:54:c1:87:54:e4:ac:82:c4:3d:ae:55:d0:f8:
         c9:27:16:eb:65:9c:7c:a1:cf:8f:75:a9:9e:0f:77:64:0e:21:
         91:81:9b:f9:c0:b2:26:31:fd:80:41:76:f9:ed:78:8a:8b:8b:
         71:0f:a9:82:29:61:86:8a:92:5d:bb:c2:f8:0e:87:5b:ac:75:
         c1:0a:f3:78:9c:01:46:e6:25:a9:3c:25:f4:25:1d:bc:4a:36:
         8b:54:5c:16:14:62:c6:2a:3c:61:fc:ec:b1:63:98:fc:d4:b2:
         b7:53:f3:6c:2c:60:db:27:af:5c:61:76:42:51:ca:69:1d:bf:
         e5:2f:e2:49:fb:d5:be:18:42:69:a5:2a:9d:70:71:15:a6:56:
         06:45:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org