Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32322d3234203d3e20323636333636.roa
File:                     3137302e38302e33322e302f32322d3234203d3e20323636333636.roa (raw, json)
Hash identifier:          lnX5ozD9A8bX/mhZoneTNHj8b5NpMhxFZrM7dHX4JCs=
Subject key identifier:   C7:79:59:C7:A0:8C:2E:93:AF:40:E1:73:C6:81:01:5C:5A:28:5E:2C
Certificate issuer:       /CN=CF560E1459890F7AC7A43FB781B3930081993195
Certificate serial:       512E514B7A9E5E7AF6F32DEAA16F9545C54D5F98
Authority key identifier: CF:56:0E:14:59:89:0F:7A:C7:A4:3F:B7:81:B3:93:00:81:99:31:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF560E1459890F7AC7A43FB781B3930081993195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32322d3234203d3e20323636333636.roa
Signing time:             Fri 03 May 2024 13:48:15 +0000
ROA not before:           Fri 03 May 2024 13:43:15 +0000
ROA not after:            Fri 02 May 2025 13:48:15 +0000
asID:                     266366
IP address blocks:        170.80.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2e:51:4b:7a:9e:5e:7a:f6:f3:2d:ea:a1:6f:95:45:c5:4d:5f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF560E1459890F7AC7A43FB781B3930081993195
        Validity
            Not Before: May  3 13:43:15 2024 GMT
            Not After : May  2 13:48:15 2025 GMT
        Subject: CN=C77959C7A08C2E93AF40E173C681015C5A285E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:b6:64:0d:03:7a:56:e7:a6:35:a5:50:f7:
                    03:6b:d1:14:00:35:d0:26:12:0f:e7:7c:11:82:e5:
                    92:b8:24:00:ff:09:b9:d4:cd:17:01:08:90:c6:d2:
                    b7:5d:41:71:3a:ad:f5:bd:1a:89:9b:b6:5e:1f:53:
                    05:82:e5:59:1a:63:8b:3f:20:9e:7c:dd:18:ae:a2:
                    9a:de:65:f3:1c:6c:2f:8d:62:41:46:5a:f1:5f:b2:
                    f6:fa:fc:9d:d5:1b:31:30:d7:07:58:a7:a3:37:4c:
                    8f:5b:92:5d:a1:ee:64:7e:d7:cb:01:3a:68:d9:e4:
                    65:9c:84:99:5f:bb:95:31:e7:58:30:15:5f:63:ac:
                    8c:75:ca:18:2e:61:3b:5b:bd:cf:62:a1:11:5f:d2:
                    c0:b0:41:ad:35:93:85:d9:bf:0d:84:df:48:ff:a5:
                    a0:54:9a:b6:5b:cd:13:97:5d:df:ad:29:41:1e:70:
                    1e:29:90:69:87:e9:99:90:15:9c:0a:49:d1:be:af:
                    37:5a:9e:e7:1f:04:a1:40:12:79:a3:6a:e1:e6:ae:
                    84:1e:7c:59:84:0e:69:49:1e:bf:7d:a0:00:9c:a6:
                    4e:fe:4c:1b:92:48:2f:cb:f9:7b:97:1a:8d:14:02:
                    18:b3:62:5a:a1:ae:f8:99:39:04:97:56:26:26:de:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:59:C7:A0:8C:2E:93:AF:40:E1:73:C6:81:01:5C:5A:28:5E:2C
            X509v3 Authority Key Identifier:
                keyid:CF:56:0E:14:59:89:0F:7A:C7:A4:3F:B7:81:B3:93:00:81:99:31:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/CF560E1459890F7AC7A43FB781B3930081993195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF560E1459890F7AC7A43FB781B3930081993195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32322d3234203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:97:fd:f4:ef:f4:09:17:99:c2:22:df:3b:ab:4e:d0:dc:47:
         83:c5:f6:b7:08:c8:57:b9:3d:5c:74:46:3f:09:27:32:d2:0b:
         a1:90:bc:72:84:70:fe:9a:89:75:0d:1a:3b:a1:e6:d2:14:26:
         e0:4d:ac:56:25:d0:3d:82:e3:e9:99:b6:12:3b:ab:2a:3e:ef:
         91:14:ac:6b:e0:dc:ab:57:27:4a:38:0f:2c:d6:31:d2:cd:37:
         33:c9:2d:c8:59:6f:48:03:f9:64:16:63:eb:88:79:60:ad:dc:
         83:fd:2e:8a:f5:2e:97:ee:89:ac:78:51:e3:11:e8:79:61:64:
         cb:d0:9d:85:03:ed:86:e9:95:95:5d:a5:66:2f:a0:ae:1e:bf:
         98:08:68:bf:21:4a:b7:d4:5e:ce:4b:e7:f3:af:98:24:36:dc:
         67:8a:94:b3:cd:cb:ac:69:95:87:89:b0:d6:0a:dd:2d:2a:74:
         0b:9e:de:8b:c8:b9:81:00:4e:71:af:b3:84:73:57:26:6f:b6:
         34:22:38:d3:cc:e6:ce:aa:f7:34:20:a2:fe:15:70:ef:6f:15:
         5f:47:e7:88:15:c5:f0:1b:a6:99:54:3b:98:a3:14:b1:a1:a8:
         5a:5a:a6:88:b7:8b:16:54:75:13:d7:12:43:7f:c6:7b:92:65:
         9d:94:43:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org