Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138372e302f32342d3234203d3e20323636343837.roa
File:                     3137302e38332e3138372e302f32342d3234203d3e20323636343837.roa (raw, json)
Hash identifier:          n2dWTzZIAigMTMxS8MvMsk+nFZJqyZrvd2OC5Qau2YA=
Subject key identifier:   56:C3:1E:76:AE:23:32:FA:DC:93:E0:33:4E:DD:45:C2:67:CD:E2:42
Certificate issuer:       /CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
Certificate serial:       5B5378856718F49218B97690D76E785294F2CA4B
Authority key identifier: 9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138372e302f32342d3234203d3e20323636343837.roa
Signing time:             Fri 14 Jul 2023 12:17:52 +0000
ROA not before:           Fri 14 Jul 2023 12:12:52 +0000
ROA not after:            Fri 12 Jul 2024 12:17:52 +0000
asID:                     266487
IP address blocks:        170.83.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:78:85:67:18:f4:92:18:b9:76:90:d7:6e:78:52:94:f2:ca:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
        Validity
            Not Before: Jul 14 12:12:52 2023 GMT
            Not After : Jul 12 12:17:52 2024 GMT
        Subject: CN=56C31E76AE2332FADC93E0334EDD45C267CDE242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:e8:1c:3d:29:a6:c1:86:58:58:f4:aa:d0:
                    60:cf:85:92:5e:9f:bb:31:cd:ae:76:1c:48:d3:d4:
                    f2:dd:46:73:3f:67:1b:db:e7:be:6b:ff:69:e8:eb:
                    e3:23:fb:07:b6:e7:88:18:7f:c0:37:65:e7:00:34:
                    ae:a5:6d:d9:83:44:27:fd:34:e0:be:23:19:6a:e8:
                    a7:f4:5d:00:1f:b1:b9:d9:63:5a:71:c7:57:f9:b5:
                    f2:20:25:cc:4f:74:7c:3f:f4:64:bf:91:7a:99:10:
                    4c:ea:b3:9f:a6:30:e0:18:3f:0a:0d:26:8e:9e:f0:
                    5f:d8:fe:72:66:eb:22:2b:e0:7e:02:95:71:d0:79:
                    55:ab:4b:6a:36:8d:f9:4f:dc:df:ad:a4:5b:1c:69:
                    ff:a9:1f:7f:62:7a:5c:65:8f:24:3c:28:31:33:7b:
                    db:73:d8:54:32:31:1d:20:ad:de:65:3b:eb:69:ba:
                    32:3c:9d:76:10:de:3b:a7:f7:e4:d0:c9:64:86:7e:
                    b8:8e:80:ed:97:72:47:27:48:4a:83:42:49:be:ee:
                    0f:aa:47:b3:49:ec:fa:98:e6:80:af:b9:f9:b5:13:
                    54:7e:9e:73:d4:ec:8d:49:1b:62:04:36:37:25:90:
                    c4:a2:3a:7e:34:70:52:27:4b:27:33:e0:ca:3e:6a:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:1E:76:AE:23:32:FA:DC:93:E0:33:4E:DD:45:C2:67:CD:E2:42
            X509v3 Authority Key Identifier:
                keyid:9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/3137302e38332e3138372e302f32342d3234203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:9b:62:6b:4d:5c:5c:e9:67:f0:e3:48:a9:d9:81:cc:48:
         2c:34:45:a9:da:9b:b7:0c:06:b2:35:e4:df:79:37:91:fa:0f:
         ae:c5:0d:b2:fd:28:7b:9c:47:1e:58:eb:fb:d2:e3:a3:9f:fd:
         87:4e:58:bb:18:fc:26:36:6d:f7:ff:78:c2:fb:18:da:a5:73:
         90:82:be:e2:fb:07:c3:ea:7c:61:d1:44:da:91:11:cc:21:09:
         e8:44:cb:f7:16:16:24:38:56:33:27:89:5b:ca:94:07:dc:bc:
         fe:81:5d:14:ae:1a:eb:7f:4b:a5:36:3d:86:5b:71:f8:8e:85:
         62:24:0f:82:31:40:9e:69:c4:11:4f:57:cf:36:87:d6:00:02:
         99:46:2d:99:db:9c:e6:d2:40:c6:18:61:76:f1:81:88:80:fe:
         c6:77:eb:23:70:b2:bd:e3:1f:50:9d:3a:ff:7a:b2:96:1c:92:
         6b:b4:f9:16:a9:e9:85:c0:1e:b7:ad:6f:33:5e:aa:59:03:f2:
         72:a5:af:63:7a:b4:49:f2:3c:ab:50:e7:a0:b3:0e:06:3f:e7:
         d2:bd:5e:65:2e:fb:a9:7f:0a:d3:e7:d7:ab:e1:71:b1:ad:e0:
         fc:6b:31:eb:b6:58:dc:bb:d8:73:ff:f6:f1:77:26:0f:c3:15:
         85:e6:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org