Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32342d3234203d3e20323636333636.roa
File:                     3137302e38302e33342e302f32342d3234203d3e20323636333636.roa (raw, json)
Hash identifier:          IL5mVWcZauYXBsQRDhuS+bPIN5IVLIFabkCgPXYV6WQ=
Subject key identifier:   A6:20:D8:90:44:32:71:F3:3C:4E:1C:2C:04:55:46:AF:5B:05:CE:D0
Certificate issuer:       /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial:       2EB37C7926A1E3E9A207EE214A06F02061C36B8E
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32342d3234203d3e20323636333636.roa
Signing time:             Tue 11 Apr 2023 15:00:50 +0000
ROA not before:           Tue 11 Apr 2023 14:55:50 +0000
ROA not after:            Tue 09 Apr 2024 15:00:50 +0000
asID:                     266366
IP address blocks:        170.80.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b3:7c:79:26:a1:e3:e9:a2:07:ee:21:4a:06:f0:20:61:c3:6b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
        Validity
            Not Before: Apr 11 14:55:50 2023 GMT
            Not After : Apr  9 15:00:50 2024 GMT
        Subject: CN=A620D890443271F33C4E1C2C045546AF5B05CED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:0a:ae:3c:31:30:f8:de:fe:e9:17:28:2e:
                    f6:ea:f1:6f:74:41:cc:d4:08:71:f6:81:3b:bc:f9:
                    5b:f1:d1:a6:cd:aa:83:13:8e:6e:69:96:46:de:5b:
                    78:a0:3b:1c:70:2c:5c:b8:d1:a2:e3:f2:ce:d3:ad:
                    a9:5b:9c:80:d9:16:43:65:fb:3f:e6:fe:03:8b:0a:
                    20:27:34:86:a3:94:9d:41:10:23:74:33:7e:4c:0c:
                    ca:7e:f2:3d:6d:da:17:fd:70:3c:45:76:13:0f:34:
                    55:c8:44:69:c7:a1:73:40:06:8f:88:e9:65:11:00:
                    d3:20:c8:77:74:38:75:c5:19:fe:97:7b:a2:44:2c:
                    cf:50:05:b5:1f:2d:2d:e1:b7:8f:69:00:ce:90:b4:
                    3f:66:16:33:ed:2a:59:00:73:d1:9d:49:d0:f9:1d:
                    3f:5d:c1:1d:03:1a:d0:00:34:1e:b4:ad:4e:01:b7:
                    38:17:b2:cb:3b:63:24:69:bd:c0:73:a2:9d:8e:cf:
                    c7:22:73:61:83:26:f4:45:68:4b:7c:10:cc:21:02:
                    86:3e:2d:bc:93:76:e6:db:04:62:bb:97:d0:37:1c:
                    f7:dc:b5:48:f5:00:f9:b1:0c:16:57:c6:0e:97:d0:
                    02:5f:94:f4:63:f6:4e:42:4e:fa:73:e4:b4:ea:9f:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:20:D8:90:44:32:71:F3:3C:4E:1C:2C:04:55:46:AF:5B:05:CE:D0
            X509v3 Authority Key Identifier:
                keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33342e302f32342d3234203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:79:ec:b0:78:19:99:77:c0:21:55:30:8b:50:50:7b:0f:89:
         c8:01:43:3e:ea:ca:94:95:43:1d:55:19:55:90:4e:d4:01:f4:
         69:ba:cc:49:17:22:a6:db:d9:f3:fe:e4:d4:53:36:0d:f7:f0:
         64:bd:87:45:ec:07:3d:f1:fb:df:8a:21:94:22:25:a3:76:2d:
         5f:0e:50:be:9f:ac:c7:5f:7f:9c:2e:e1:64:e4:28:7d:18:ef:
         18:f5:6a:63:6f:bd:1e:e8:ca:d6:72:94:18:4c:14:78:5d:a2:
         fd:08:5c:1d:f5:4a:02:8a:a3:fc:c4:c6:5b:39:ac:de:b0:b9:
         8e:69:0b:a3:cc:e4:41:af:e5:91:a4:56:28:08:01:48:00:66:
         fa:8a:e0:ab:aa:b9:3e:85:61:ea:bf:8f:7c:c9:a7:95:a0:52:
         9c:21:2a:c2:6f:13:ad:87:b4:a1:dc:11:28:13:e9:bb:9b:9b:
         a3:e9:61:e2:0b:b4:1f:d0:55:6e:b0:94:09:44:7f:bd:73:4c:
         89:c1:15:1e:50:a7:88:80:87:ad:f5:77:32:7b:d6:23:90:33:
         93:54:53:6e:9a:b8:98:eb:4c:e3:8a:18:e6:83:4d:83:b9:be:
         c7:9f:1e:5c:44:ed:72:94:6f:23:e8:a0:8e:fe:00:7d:79:fa:
         3d:be:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org