Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132392e302f32342d3234203d3e20323636333139.roa
File:                     3137302e3233382e3132392e302f32342d3234203d3e20323636333139.roa (raw, json)
Hash identifier:          xt6c0+X2BsrxMMlESUXuXYJ+buoljkt+ZvlmB2OiOHg=
Subject key identifier:   70:9A:D6:22:DF:9A:DC:52:BE:EE:C0:0B:17:A6:A9:79:30:E2:B0:F3
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       1339A4A3A99E7F91CAEB48239E9F6AFA4BFCBB76
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132392e302f32342d3234203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 19:00:00 +0000
ROA not before:           Fri 26 May 2023 18:55:00 +0000
ROA not after:            Fri 24 May 2024 19:00:00 +0000
asID:                     266319
IP address blocks:        170.238.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:a4:a3:a9:9e:7f:91:ca:eb:48:23:9e:9f:6a:fa:4b:fc:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 18:55:00 2023 GMT
            Not After : May 24 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:be:e8:65:8e:d0:d2:bc:53:13:e8:2c:6d:
                    81:a7:54:fa:93:d8:13:82:08:7a:86:2a:4e:91:ec:
                    73:9b:a9:f4:36:aa:49:a3:9a:dd:e1:f8:88:a2:d9:
                    a4:68:e4:4d:8a:74:b3:4a:b6:4f:d2:2b:46:a7:1d:
                    0b:97:44:2b:12:c9:54:e1:49:a8:b6:a2:77:5f:11:
                    8e:54:e7:81:44:90:aa:78:69:a1:6d:c5:65:db:89:
                    62:cb:9a:d7:ce:ef:76:f6:49:3c:c4:cc:2f:ad:e1:
                    e3:33:4d:4c:2b:24:70:1f:23:ca:b8:be:09:bd:18:
                    91:37:48:9b:78:c4:a7:1f:40:4c:77:78:61:cc:fa:
                    6c:e1:6e:fb:e6:20:e1:76:44:2a:5d:c3:ca:2f:48:
                    54:48:07:6c:7d:02:87:6f:0e:57:46:0c:6e:6b:57:
                    a7:31:31:da:18:49:cf:82:7d:1b:3c:e0:ba:07:cd:
                    10:29:d1:94:a8:29:fb:e4:e1:c9:13:bb:0b:9a:91:
                    b0:55:88:66:5c:b2:ae:86:ed:39:e7:5c:86:82:df:
                    72:d9:9c:68:d1:69:2c:f3:66:60:26:06:7c:21:7e:
                    b7:a8:6f:06:a7:b1:70:29:d5:2e:e6:43:2d:2f:b7:
                    41:ce:ec:7f:e8:b6:2c:a9:b9:89:88:c0:17:14:1e:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:D6:22:DF:9A:DC:52:BE:EE:C0:0B:17:A6:A9:79:30:E2:B0:F3
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132392e302f32342d3234203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:79:20:4f:a9:49:be:c6:d7:ab:36:29:44:66:c3:72:2c:
         0c:51:30:12:44:29:c6:9d:15:0b:a2:1b:3d:4b:36:c8:37:e5:
         67:cd:b9:66:17:91:ee:80:74:15:b3:24:9f:1c:e8:c0:a6:a3:
         55:da:10:71:a5:f1:7b:ca:a4:f2:2e:ea:2d:d8:c3:dd:b0:1d:
         50:65:e1:e2:84:d1:f1:ba:fc:06:22:97:64:d0:82:a6:a8:b5:
         a5:9d:45:27:7f:4a:c6:98:ce:da:36:71:17:5d:6d:fb:8f:9c:
         0d:67:2d:90:f3:06:9d:a5:ed:bb:18:78:4c:40:b1:3b:82:46:
         cd:55:a2:46:6f:46:d1:28:58:9f:76:5c:c1:bc:ce:3d:f7:07:
         67:52:f6:81:47:69:39:1f:fc:56:71:ff:e8:40:17:80:7c:3b:
         e1:4c:6d:d2:5c:13:68:31:cf:33:26:75:ce:4e:f2:61:f3:f4:
         84:97:46:78:01:0c:a9:62:71:cb:35:7a:be:d6:79:2a:30:fe:
         e3:5b:4b:ef:be:90:cb:db:b8:bb:4c:7f:93:e0:5b:50:ae:3d:
         dd:4e:ac:59:9f:24:00:1b:48:27:75:45:e7:98:ce:a1:eb:98:
         0c:48:a7:fa:79:23:07:55:ce:c4:14:d5:05:2c:4f:dd:ed:a1:
         bd:e9:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org