Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa
File:                     3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          4mbV9RNKkZl/OYsO5FFiVQGoD3UpOhv8DQIxjxlOAfk=
Subject key identifier:   32:B1:7F:8B:E6:5D:29:CC:6B:E3:EB:23:71:06:50:F4:AE:6D:26:04
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       1C8848FCC0D1710AC7083D7F273AD6740B4DD1A4
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:34 +0000
ROA not before:           Fri 03 May 2024 19:39:34 +0000
ROA not after:            Fri 02 May 2025 19:44:34 +0000
asID:                     28669
IP address blocks:        170.238.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:88:48:fc:c0:d1:71:0a:c7:08:3d:7f:27:3a:d6:74:0b:4d:d1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:34 2024 GMT
            Not After : May  2 19:44:34 2025 GMT
        Subject: CN=32B17F8BE65D29CC6BE3EB23710650F4AE6D2604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:e9:f8:bc:ca:32:9f:9c:dc:76:c6:0a:cd:
                    de:ed:de:f4:ef:39:fa:ef:77:d4:91:dc:97:91:eb:
                    ff:53:94:2b:1c:ef:fc:a1:00:2d:a3:ac:64:ee:3a:
                    1a:4f:f3:2a:12:ec:c1:04:2d:81:05:f8:9f:c2:b7:
                    4a:85:46:cc:f2:66:47:61:03:14:23:ec:22:a7:06:
                    5f:ed:d6:86:4f:ee:d2:32:ae:db:53:40:bc:58:49:
                    e9:cb:71:b0:8e:5d:ab:3f:fa:e2:7a:07:27:7e:bc:
                    7b:37:e8:bc:ee:d2:ac:90:a9:4a:2f:12:c7:26:77:
                    99:6b:54:f0:06:b4:2a:87:e6:66:d5:85:3b:8d:93:
                    0a:45:e9:1b:db:fe:84:c7:82:e9:a0:59:69:84:fb:
                    e6:42:25:78:8e:d4:f6:29:0a:d3:8d:bb:48:75:19:
                    e2:60:66:ca:55:b4:85:70:60:de:a3:c5:d5:a6:45:
                    b6:43:d8:42:9b:67:96:57:f3:6e:a6:73:6d:09:49:
                    1b:f5:67:93:bd:c5:56:f1:67:ea:19:ad:e4:01:64:
                    e5:ab:5a:fc:45:a7:47:71:0f:89:f8:ca:65:bd:15:
                    71:ec:d9:29:40:d4:33:eb:a0:6c:ac:5d:1c:eb:e0:
                    24:34:10:9c:aa:b0:09:31:1a:fc:ba:23:48:a1:3b:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:7F:8B:E6:5D:29:CC:6B:E3:EB:23:71:06:50:F4:AE:6D:26:04
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:51:30:d5:aa:d4:03:5d:6e:fb:b1:a3:51:48:30:44:63:c0:
         7f:46:fe:83:2d:61:38:06:20:69:25:53:a1:04:91:32:35:18:
         87:84:4a:f1:db:33:06:9e:41:6f:03:e3:dc:0f:42:5c:bc:d6:
         c7:cd:4d:23:79:77:04:5b:08:0a:40:a7:bf:f0:f2:d2:47:be:
         60:c5:71:19:07:b1:57:d8:87:af:3b:4f:3b:57:d2:f1:33:e2:
         da:aa:b3:c9:33:e3:fe:72:7a:b1:e0:06:9c:01:fa:c5:2d:19:
         bb:08:67:ac:77:f7:a0:54:e3:7e:1c:d2:02:ff:8c:ab:ad:54:
         1c:bf:92:cd:c9:80:c0:09:f2:07:bb:3a:bc:e5:93:19:7a:18:
         0b:f1:72:26:4d:31:21:ce:0d:a4:eb:c2:5f:f2:61:cb:39:cb:
         b2:4d:e7:1f:1c:93:62:07:e9:a9:45:21:11:f7:6e:a3:a3:17:
         52:0e:28:8d:4c:fa:1d:d2:9e:38:bf:f5:0b:43:57:ae:51:45:
         2a:26:d9:65:68:6d:70:8d:40:e5:cc:1b:4d:08:85:48:73:37:
         50:2b:f4:0e:52:c7:0e:f1:18:86:bf:82:f4:fe:ae:17:b7:63:
         0c:ca:c8:8b:bc:1c:e0:cf:77:08:64:0f:36:34:ea:f8:2f:c7:
         77:cc:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org