Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32332d3233203d3e20323636333636.roa
File:                     3137302e38302e33342e302f32332d3233203d3e20323636333636.roa (raw, json)
Hash identifier:          VBYHCoqs0QEFzxBpH2hUHF4rlW1v2imywjRq9oXEcr4=
Subject key identifier:   7C:69:BA:3F:E6:D6:C0:D1:16:A1:2C:A5:6F:C7:CF:10:39:12:09:B2
Certificate issuer:       /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial:       1A78143B8C1AA2E23C1DF459953E5456F24D0BB7
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32332d3233203d3e20323636333636.roa
Signing time:             Tue 11 Apr 2023 15:00:49 +0000
ROA not before:           Tue 11 Apr 2023 14:55:49 +0000
ROA not after:            Tue 09 Apr 2024 15:00:49 +0000
asID:                     266366
IP address blocks:        170.80.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:78:14:3b:8c:1a:a2:e2:3c:1d:f4:59:95:3e:54:56:f2:4d:0b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
        Validity
            Not Before: Apr 11 14:55:49 2023 GMT
            Not After : Apr  9 15:00:49 2024 GMT
        Subject: CN=7C69BA3FE6D6C0D116A12CA56FC7CF10391209B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:9f:62:cb:03:22:8e:08:01:ab:7b:57:ca:
                    87:92:35:48:1d:6c:1c:41:1e:b6:71:b5:1f:d1:8d:
                    c6:28:2e:d9:7a:b9:36:d2:fd:f4:70:23:a2:32:0e:
                    5d:69:9b:6c:61:62:f4:72:a6:d5:55:55:c4:08:1a:
                    04:91:36:8b:52:e8:f8:aa:36:5a:de:f1:b6:60:96:
                    b2:95:5e:31:ea:b6:85:fa:8d:7b:15:b9:75:93:05:
                    6e:8e:2d:21:19:cf:b4:49:7d:c3:ce:8d:7b:ee:9e:
                    d0:fb:29:00:51:8b:14:ea:9e:ab:ff:58:3d:2d:53:
                    c9:b6:fa:bd:5a:93:99:22:ed:99:90:50:0c:83:41:
                    30:e2:c5:5d:2f:ff:58:15:50:85:4e:41:07:11:66:
                    98:18:39:c3:aa:81:4b:fe:7d:74:0b:b5:3c:14:a1:
                    77:00:80:6f:bf:90:01:62:a7:49:69:ee:d8:4b:df:
                    37:a0:cc:3e:fb:90:a0:08:fa:44:ec:53:1a:70:f5:
                    33:cc:ec:80:d5:22:72:bf:4b:97:e5:fa:03:a7:69:
                    33:16:12:97:28:04:6c:3e:14:70:95:3b:1c:07:5b:
                    8d:19:0d:e9:71:6e:8c:35:99:a6:8c:ca:a3:8c:96:
                    4b:22:ec:49:ff:63:ae:f2:48:a6:9f:4a:a1:ea:9b:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:BA:3F:E6:D6:C0:D1:16:A1:2C:A5:6F:C7:CF:10:39:12:09:B2
            X509v3 Authority Key Identifier:
                keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32332d3233203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:04:46:c4:5d:cc:f1:83:f6:c8:d9:fd:80:11:a6:c9:a5:
         61:d0:08:79:f7:85:b8:04:9a:fe:01:e4:00:32:38:a4:3b:6e:
         62:a4:7e:cc:15:a3:22:31:36:6c:25:a2:36:84:31:e2:c1:c8:
         e4:eb:4d:8c:54:d0:16:70:75:41:02:01:3e:8b:c0:5e:68:dc:
         13:76:a2:50:97:e6:a2:39:81:ec:9e:e0:6d:b6:24:a2:2f:52:
         74:e4:a6:c2:91:bc:1d:54:82:ff:34:ba:e5:bb:fa:b9:27:d7:
         5b:f3:c2:8f:71:9b:85:25:c1:94:26:27:88:2b:26:28:83:60:
         b5:a9:cb:3d:61:21:2f:49:98:9f:85:fe:d4:9c:8d:9a:47:69:
         3f:0b:73:2d:59:aa:c6:33:78:41:64:68:50:a1:58:66:ad:fd:
         8b:0c:b6:1d:39:22:3c:ce:67:a5:f4:6e:fe:4e:fa:d7:5a:e2:
         f9:03:7b:07:81:96:45:4d:84:3e:f2:92:4a:25:e3:c8:e1:9c:
         b2:24:49:55:c8:14:fa:91:ca:fe:44:a1:fa:af:db:33:50:5d:
         0a:dc:0f:46:47:0e:0f:8c:e0:93:3c:49:43:24:82:ea:db:11:
         8f:54:d2:19:d3:b7:4d:d0:8c:e5:60:26:6b:86:c8:1c:31:af:
         36:5f:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org