Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32322d3234203d3e20323635303238.roa
File:                     3137302e38342e3234382e302f32322d3234203d3e20323635303238.roa (raw, json)
Hash identifier:          l/crDBTQKOCL0KGzUzBAScd75C8XBTNpMJs+gD1ncBc=
Subject key identifier:   CA:79:87:D3:8A:69:A5:89:02:84:43:A0:27:D0:43:A6:5C:BA:EA:12
Certificate issuer:       /CN=C4166A65EE236AE1374D5247D277915D8AFD9220
Certificate serial:       45297F4CFF34AA869459B3B3946429E42F28F173
Authority key identifier: C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4166A65EE236AE1374D5247D277915D8AFD9220.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32322d3234203d3e20323635303238.roa
Signing time:             Wed 19 Apr 2023 18:13:14 +0000
ROA not before:           Wed 19 Apr 2023 18:08:14 +0000
ROA not after:            Wed 17 Apr 2024 18:13:14 +0000
asID:                     265028
IP address blocks:        170.84.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:7f:4c:ff:34:aa:86:94:59:b3:b3:94:64:29:e4:2f:28:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4166A65EE236AE1374D5247D277915D8AFD9220
        Validity
            Not Before: Apr 19 18:08:14 2023 GMT
            Not After : Apr 17 18:13:14 2024 GMT
        Subject: CN=CA7987D38A69A589028443A027D043A65CBAEA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e0:5c:54:c0:68:c6:e8:c2:57:20:da:49:24:
                    f4:8d:3d:d9:46:6d:d3:57:f2:a0:53:47:23:ed:02:
                    fc:f8:0d:a1:7e:58:e2:7a:d2:cb:cc:11:27:97:92:
                    47:d9:cd:4d:0f:fd:08:e6:f5:81:99:ce:c3:d5:49:
                    88:93:4c:6e:64:c6:5e:df:5d:15:f6:da:ff:a6:9e:
                    33:c0:a5:a7:ac:ea:78:62:b6:65:28:73:1f:d2:65:
                    72:0f:9a:64:76:61:13:43:78:64:8c:21:1c:ec:72:
                    2c:f8:a8:82:07:53:f8:08:b7:19:68:d6:3c:52:c6:
                    bd:dc:72:6e:e5:24:fb:ec:c9:3e:4c:b4:5b:cd:a0:
                    be:fc:d8:9e:79:96:67:2f:33:04:ed:6d:c1:3d:55:
                    05:d3:c4:5d:df:ed:4f:f0:df:9d:e0:97:85:8f:97:
                    d8:2b:48:3f:42:f8:0e:76:16:3b:bc:28:e8:0b:a1:
                    fd:fe:d3:3d:58:3b:55:04:49:b7:43:ec:00:46:32:
                    9f:95:9a:44:1c:0b:1a:82:b1:3d:15:dd:e3:4f:d4:
                    34:07:ef:15:2c:e5:4b:0b:36:df:29:52:7c:de:c3:
                    cc:7b:f5:b2:ae:de:fd:a7:2c:d5:9f:2b:58:07:df:
                    4c:2e:cb:9d:3b:e7:d5:d6:b7:cc:82:07:08:08:22:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:87:D3:8A:69:A5:89:02:84:43:A0:27:D0:43:A6:5C:BA:EA:12
            X509v3 Authority Key Identifier:
                keyid:C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/C4166A65EE236AE1374D5247D277915D8AFD9220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4166A65EE236AE1374D5247D277915D8AFD9220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32322d3234203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:ee:8f:7f:af:f5:34:86:56:c5:e2:1a:51:1f:55:98:d8:64:
         03:3b:ef:1c:4f:c4:fe:ba:fd:ae:5d:4c:1c:89:9b:da:11:9a:
         06:ba:d6:2b:07:c6:22:4b:c3:f1:23:18:56:c5:71:3d:28:0e:
         93:d1:b3:c8:53:c0:f1:a0:2f:09:49:b1:9d:5f:f2:a5:0a:4b:
         99:67:c8:18:97:65:79:64:a1:86:03:59:42:60:89:34:9b:a6:
         75:24:b5:c2:6f:d2:4f:c6:a2:65:d5:9f:75:cc:63:ca:40:bd:
         88:1f:13:e9:d4:4d:be:b8:12:73:37:a6:d8:4c:ea:a5:7d:57:
         66:e8:68:45:b9:36:37:75:98:5f:80:0b:d3:6b:bd:00:a6:d7:
         5c:38:9e:fe:d8:5a:58:ab:53:06:61:b1:e0:b2:93:71:60:5e:
         88:a9:69:e7:8d:bc:3e:0e:af:82:05:8e:be:79:7d:f9:0a:7f:
         6e:2c:24:37:ab:a1:d3:9a:42:a7:fb:ed:78:ab:de:d3:17:f3:
         f1:a1:92:e7:8c:6e:8c:13:4f:f3:e3:da:09:43:a9:28:e3:01:
         d6:63:54:a1:fc:ae:70:82:ee:a3:52:2d:81:b1:37:8a:3e:8a:
         2c:66:ba:93:a5:1e:0a:4e:a5:f4:f6:d4:36:e2:76:88:5c:52:
         b6:82:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org