Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3233203d3e20323636333139.roa
File:                     3137302e3233382e3133302e302f32332d3233203d3e20323636333139.roa (raw, json)
Hash identifier:          IAMD4vQkb9ZqXiq7PqSW2kJYdq0OZhIXnaFJZ3OsVVk=
Subject key identifier:   F0:50:CD:30:79:60:E8:B9:EE:F8:8B:9E:DD:25:6F:15:4C:82:9E:C1
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       45C4C4C7AB0903120295B9DAF2264C37050A2CB3
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3233203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 20:00:00 +0000
ROA not before:           Fri 26 May 2023 19:55:00 +0000
ROA not after:            Fri 24 May 2024 20:00:00 +0000
asID:                     266319
IP address blocks:        170.238.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:c4:c7:ab:09:03:12:02:95:b9:da:f2:26:4c:37:05:0a:2c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 19:55:00 2023 GMT
            Not After : May 24 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:2a:99:a2:0f:ce:bf:78:28:b0:96:d3:01:
                    5d:cd:af:29:c9:30:18:f6:8c:27:8c:b7:2f:cc:aa:
                    87:b1:d1:07:83:1e:ec:49:29:b7:d4:39:5f:08:a9:
                    d6:d0:c6:b5:87:27:b1:6b:4b:d1:87:d0:87:59:d9:
                    cb:fd:68:98:87:3c:b2:e0:6f:50:99:4f:0b:d4:18:
                    6b:79:83:9a:d2:59:2c:77:88:40:ca:0a:cb:24:aa:
                    ce:53:2f:22:44:54:fd:18:ab:54:26:60:2a:b7:bd:
                    74:80:86:63:70:8f:7a:e0:99:7b:1e:4b:70:3a:79:
                    83:ef:ec:b4:3d:fa:bd:17:1d:5d:9c:7f:2d:d5:42:
                    dd:96:16:1c:b7:72:f8:9c:33:2a:bb:2f:12:04:de:
                    0e:26:9e:50:a6:f7:d3:e6:8f:97:de:81:83:df:f3:
                    67:82:1b:e1:49:e8:c4:53:75:0e:3c:27:26:42:3e:
                    6c:a7:a4:82:b4:08:4a:0e:6f:92:bf:44:8f:52:32:
                    1b:ab:6a:ee:e1:44:74:8d:06:92:dc:00:ad:24:8a:
                    2d:a1:fc:9f:4e:00:f1:bd:53:f5:38:14:c0:2b:2b:
                    f1:f7:f9:58:62:25:9c:11:04:55:7f:95:f2:8e:fb:
                    0d:6d:81:0f:32:d2:89:2e:2b:72:23:cb:49:a7:fa:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:CD:30:79:60:E8:B9:EE:F8:8B:9E:DD:25:6F:15:4C:82:9E:C1
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3233203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:24:6c:55:7d:f6:11:e8:55:a1:aa:01:4b:51:f0:28:53:6a:
         61:79:6b:86:66:2e:77:46:e3:d4:2b:e8:4f:67:85:7a:72:0d:
         10:e0:f6:4b:3a:fa:02:9d:b0:92:c8:5d:7f:b0:c2:59:25:8f:
         8c:bc:66:3f:a4:df:6e:3f:45:9e:ba:ee:aa:aa:a7:ed:d2:fe:
         f8:ae:9b:25:ef:ee:fb:2e:1e:13:c7:13:c8:8f:f3:90:c0:6a:
         d0:0a:e1:07:ec:2a:9d:db:70:35:2a:33:be:4e:9d:42:74:74:
         d2:6d:aa:62:1b:e4:db:30:b9:d6:0e:38:cc:d3:38:d1:64:ca:
         05:b2:71:00:25:77:8d:28:f7:4e:c5:7d:55:62:5f:49:f6:3e:
         b6:25:a3:ec:2c:97:ee:54:8d:05:28:5d:29:a4:52:1a:f5:89:
         6f:4f:ab:0a:d2:58:58:89:d6:61:42:72:cb:b2:49:ca:49:06:
         87:35:4f:0a:00:1a:96:45:85:e9:90:89:6d:67:bd:03:ce:db:
         fe:a4:89:16:b2:13:f0:7f:02:e9:2a:1f:ce:e3:2c:e2:c4:bc:
         c2:f9:44:50:7c:d4:45:f1:f8:cf:63:05:e9:05:ed:de:b9:83:
         03:dd:4b:1b:73:cd:48:f0:75:b3:37:b0:b6:74:22:f8:8f:8a:
         77:a7:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org