Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3232203d3e20323635303232.roa
File:                     3137302e38342e34382e302f32322d3232203d3e20323635303232.roa (raw, json)
Hash identifier:          qUAIjOVMIENYCMjO1qXBE7Ycgui2AHIT+k23hsxoX9w=
Subject key identifier:   B4:75:8D:C9:52:3F:07:E8:C8:9C:91:57:C3:AB:33:E2:0C:92:42:FF
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       3F08B91FF47C6B0E6D69020F3D79F09D2957A4DA
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3232203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:31 +0000
ROA not before:           Thu 29 Jun 2023 14:55:31 +0000
ROA not after:            Thu 27 Jun 2024 15:00:31 +0000
asID:                     265022
IP address blocks:        170.84.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:08:b9:1f:f4:7c:6b:0e:6d:69:02:0f:3d:79:f0:9d:29:57:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:31 2023 GMT
            Not After : Jun 27 15:00:31 2024 GMT
        Subject: CN=B4758DC9523F07E8C89C9157C3AB33E20C9242FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:99:ce:83:45:77:48:fc:1e:ee:8e:04:9a:
                    5e:09:27:2f:90:22:53:83:41:a3:69:a8:d4:98:cb:
                    1f:dc:12:d9:76:f8:2f:1e:6a:aa:dd:73:df:e7:c7:
                    77:77:53:43:7c:a2:be:4d:c3:ec:51:52:1d:46:19:
                    f2:4f:8c:a4:f9:cd:ec:a8:95:ed:dc:23:e8:b2:e1:
                    de:26:9f:eb:d9:7a:74:a0:35:d2:24:ca:49:c5:cc:
                    2c:d1:86:8f:c4:62:97:96:3e:ff:0e:0e:c3:5a:9f:
                    f6:a3:20:59:c2:6c:a3:28:0b:50:ff:37:7b:d2:24:
                    7b:8a:5a:33:ae:ef:46:61:a2:d7:f4:90:3c:14:15:
                    35:0d:8a:6a:75:cc:4c:60:74:0a:68:7a:41:95:d1:
                    5d:35:16:10:71:e4:6c:ee:6c:38:12:f4:84:5f:cb:
                    b9:30:b2:5e:07:84:b8:be:f6:39:ff:bb:2f:76:e5:
                    d4:91:6a:5a:65:e4:b1:17:c5:d7:ae:76:2c:60:9a:
                    1d:2b:cf:28:db:c6:a7:ea:c4:10:71:c0:89:0d:17:
                    0a:20:83:ce:e4:1d:19:ab:85:0d:66:c8:56:67:e4:
                    71:bb:81:89:a7:e7:f0:11:e3:7a:15:93:5b:60:25:
                    66:72:02:f6:1d:a1:f5:9c:28:bc:cd:63:d1:bd:c3:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:8D:C9:52:3F:07:E8:C8:9C:91:57:C3:AB:33:E2:0C:92:42:FF
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3232203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:04:a6:0b:cf:d0:9c:27:e6:11:44:c1:1a:5f:d0:62:b7:ea:
         51:bb:fe:3a:90:7c:3d:f5:2b:66:e0:8d:ee:b6:4a:ae:0c:1c:
         9e:8f:d8:10:16:24:03:ae:5f:f6:0a:31:a6:b2:d7:30:24:1f:
         7e:f5:e3:09:12:17:a9:90:38:92:96:28:a7:d3:05:c8:4f:15:
         a8:70:20:67:50:44:12:f3:2f:cd:56:3e:f8:6d:de:98:52:d3:
         b7:12:6b:9a:3f:c2:de:96:a2:96:97:27:0e:e8:8d:8c:4b:01:
         e7:54:2d:7e:bf:fc:92:c3:a0:12:c4:f0:e5:7f:e0:36:90:48:
         22:e9:6e:51:eb:e7:0a:4f:ba:94:61:7d:18:b9:15:3d:8c:cd:
         4a:b4:36:2a:ce:c8:90:fe:6b:99:50:56:dc:99:06:e0:0f:da:
         e5:c2:87:a0:7a:32:19:bf:94:b7:73:da:d3:52:94:3b:42:a4:
         4b:e9:f5:53:8f:77:00:78:bf:da:9f:37:0e:35:a5:de:e2:58:
         55:90:a3:dc:e9:ed:c1:0d:54:e7:f4:35:48:58:37:98:d9:20:
         1e:fa:ec:9a:41:7e:2d:62:67:65:a7:6d:9c:8b:ee:de:99:d7:
         62:cc:0a:36:2b:5d:50:c8:29:fd:44:53:b6:09:59:c8:33:5f:
         80:a6:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org