Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33352e302f32342d3234203d3e20323636333636.roa
File:                     3137302e38302e33352e302f32342d3234203d3e20323636333636.roa (raw, json)
Hash identifier:          RY7EBMR25HeidZa5I/Ow/SxFr9EEJWpL9ltCDeu+oIM=
Subject key identifier:   B5:95:A8:88:C4:4C:FF:04:02:07:7F:82:07:A7:7F:D3:09:E3:C1:C2
Certificate issuer:       /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial:       3AB2AF794DE6D3EC55C8B3C74739137B7213400C
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33352e302f32342d3234203d3e20323636333636.roa
Signing time:             Tue 11 Apr 2023 15:00:52 +0000
ROA not before:           Tue 11 Apr 2023 14:55:52 +0000
ROA not after:            Tue 09 Apr 2024 15:00:52 +0000
asID:                     266366
IP address blocks:        170.80.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b2:af:79:4d:e6:d3:ec:55:c8:b3:c7:47:39:13:7b:72:13:40:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
        Validity
            Not Before: Apr 11 14:55:52 2023 GMT
            Not After : Apr  9 15:00:52 2024 GMT
        Subject: CN=B595A888C44CFF0402077F8207A77FD309E3C1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:e4:6f:34:71:60:28:07:7a:63:a7:de:88:
                    87:a8:96:81:9f:61:06:06:23:ec:51:87:0a:d8:17:
                    90:2a:d1:8b:43:8b:47:68:8f:99:3a:e3:e1:9c:49:
                    0c:e9:37:94:c2:76:76:ae:cc:c7:b6:12:24:df:f2:
                    15:16:c4:95:80:c6:55:60:fe:fd:d1:6d:3a:d9:13:
                    2e:19:31:d0:e8:8f:d4:65:a9:ba:73:91:e4:69:e2:
                    af:94:cb:af:c0:0e:ae:4b:22:81:aa:cc:a7:5b:13:
                    c5:b4:d5:98:d4:c5:ac:30:fe:db:7d:58:7b:d2:41:
                    19:e7:e9:76:11:68:00:cc:91:e1:b9:c7:8d:c6:f3:
                    7d:47:43:f2:09:0f:5c:20:76:4d:01:b9:42:c1:66:
                    b7:6c:c6:48:7b:f9:5c:38:2c:06:9d:08:ce:dd:c7:
                    8c:f7:a7:06:f4:c6:af:46:34:ce:6d:03:e6:09:20:
                    fa:0e:99:09:0a:6b:18:fc:3c:bf:f6:d3:62:4e:55:
                    09:92:d9:69:26:37:af:02:55:4c:be:15:86:6c:17:
                    c1:7f:10:68:fd:2a:f2:33:7c:c5:aa:c3:41:1a:c9:
                    d8:58:c1:71:a8:8a:2a:9a:b3:5c:b6:cf:22:76:55:
                    39:c8:13:43:bc:d8:ff:32:2a:18:d3:bf:35:b6:ac:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:A8:88:C4:4C:FF:04:02:07:7F:82:07:A7:7F:D3:09:E3:C1:C2
            X509v3 Authority Key Identifier:
                keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33352e302f32342d3234203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:1b:f1:b5:bf:6d:60:ba:88:ad:c5:c4:ea:d4:ff:1d:ca:
         cb:84:c4:4c:59:f8:24:43:2d:de:52:94:e4:81:91:51:e7:7b:
         36:7f:15:2a:3e:5f:4b:da:b7:25:e8:59:03:6e:3a:ae:40:78:
         1d:0f:c6:08:59:20:33:2d:9a:b4:4e:a6:b4:3a:b2:5f:6b:a3:
         f8:41:f6:3f:e2:ba:a3:fb:67:a2:78:e2:4d:cf:69:7d:c9:c6:
         c4:7d:ef:67:1f:c4:e5:0c:39:3f:bf:d9:d6:d5:a8:df:78:cf:
         42:4e:22:8b:cb:57:7c:cd:5f:6a:06:24:e0:6a:5a:0d:7e:ed:
         0a:33:fc:21:d1:89:4c:c3:19:c2:ca:42:21:6c:cc:8a:94:81:
         de:95:7c:5f:74:87:49:68:1b:b8:42:ff:06:3a:50:80:08:03:
         30:33:09:8d:2d:b5:e7:52:a1:cc:bd:5f:cf:f5:9c:a0:7e:e7:
         06:67:88:c6:2a:54:e0:3e:3d:7f:a1:ff:97:29:ff:6e:cc:12:
         7b:2b:1a:db:5e:46:6d:31:4e:b7:fa:bf:fe:22:0f:15:92:b4:
         35:fa:6a:84:6b:86:f3:20:9e:c9:d6:a4:c5:6c:5a:db:03:4d:
         1c:da:fe:30:d7:00:04:59:50:1e:b5:ae:73:6e:0e:8b:2e:0e:
         76:28:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org