Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3234203d3e20323635303232.roa
File:                     3137302e38342e34382e302f32322d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          mjWQI81VRmOoDxz3vpjeJNoCf4J1It46JVQZLDHC2sU=
Subject key identifier:   70:09:9A:72:33:A5:B4:2F:B4:BB:3D:16:21:72:17:44:FD:3E:14:4F
Certificate issuer:       /CN=95C4CFA6C8BE0845776E681F3793B6CEBBA66A78
Certificate serial:       60B26DC48C5BA18166D85AA75DEBE75277C0D161
Authority key identifier: 95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3234203d3e20323635303232.roa
Signing time:             Wed 13 Jul 2022 21:36:39 +0000
ROA not before:           Wed 13 Jul 2022 21:31:39 +0000
ROA not after:            Wed 12 Jul 2023 21:36:39 +0000
asID:                     265022
IP address blocks:        170.84.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b2:6d:c4:8c:5b:a1:81:66:d8:5a:a7:5d:eb:e7:52:77:c0:d1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C4CFA6C8BE0845776E681F3793B6CEBBA66A78
        Validity
            Not Before: Jul 13 21:31:39 2022 GMT
            Not After : Jul 12 21:36:39 2023 GMT
        Subject: CN=70099A7233A5B42FB4BB3D1621721744FD3E144F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:b8:94:7b:c4:a3:c5:63:28:cc:77:88:fe:
                    76:5b:42:fd:81:9c:62:51:03:b7:65:7b:d2:24:a0:
                    13:d9:a5:ac:22:7f:e8:e4:91:01:79:fc:7a:00:cb:
                    9f:05:15:18:10:be:82:f8:bd:0e:46:e5:25:eb:39:
                    8a:50:66:cf:46:1f:46:b3:45:95:dd:cc:0c:9b:ad:
                    9d:c4:5e:60:f8:e5:92:f0:37:30:6b:ab:27:06:c9:
                    58:61:79:f6:ba:07:b6:84:72:f1:26:06:46:b1:cb:
                    66:87:85:f9:04:a0:39:94:8f:1b:63:20:a6:1b:26:
                    2d:8d:03:c0:fe:3b:17:e1:03:2c:ca:9e:fc:90:1c:
                    71:ab:6e:5c:78:f6:29:44:0b:a5:99:b9:81:fa:c6:
                    4d:b1:21:2c:a8:1c:a9:31:0f:eb:b3:d0:a2:b8:f7:
                    6c:df:10:47:07:44:a1:ee:53:6c:23:bc:51:63:ef:
                    f8:43:ba:d3:7f:b1:d2:43:cc:a4:30:07:98:27:73:
                    b2:2d:2e:d2:7f:e3:e9:3c:77:c4:0f:24:15:ee:1f:
                    7f:36:c2:06:98:06:e2:ea:fa:24:d5:c1:c1:bf:95:
                    8e:82:6f:55:06:cf:9c:45:b5:78:2a:63:0d:d8:3a:
                    fa:17:63:1c:c0:26:91:53:36:ee:d3:d3:b2:ce:fb:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:9A:72:33:A5:B4:2F:B4:BB:3D:16:21:72:17:44:FD:3E:14:4F
            X509v3 Authority Key Identifier:
                keyid:95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32322d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:bf:2a:10:7c:5e:1a:6c:18:6a:12:e5:ba:50:26:f4:69:8b:
         07:59:e2:ea:18:33:dc:84:25:73:e8:15:95:b4:3f:06:ef:b3:
         18:61:7f:c3:93:34:5b:4c:86:cb:56:6a:d3:43:fd:94:d5:12:
         a9:db:75:1d:fc:6f:6d:4a:c0:f7:7b:45:78:60:55:67:77:44:
         89:d8:9e:22:9e:56:3f:fc:48:9b:fd:38:e6:9a:43:89:03:dd:
         4d:2b:95:d3:22:de:4d:a6:80:53:a3:a9:09:b2:b4:83:e8:60:
         74:ea:af:1a:69:db:b9:13:39:b1:87:c3:d0:9c:e0:29:e2:4a:
         cc:44:d0:b7:30:89:37:4c:c0:e5:0b:b1:76:4d:48:39:b8:f9:
         19:45:c7:73:e1:91:70:e3:3a:1e:06:c5:8e:e6:bc:76:be:c4:
         a1:d8:17:cf:e7:62:3a:c0:07:79:36:98:95:6b:7c:d6:6b:37:
         3c:e2:fc:08:e2:2e:3d:12:b7:36:94:2a:fa:05:d9:12:cd:61:
         f6:bb:75:3f:2e:de:5a:ac:9d:7b:a0:5c:26:63:ac:3c:a0:a8:
         2b:ba:e4:5f:4b:43:32:6d:8b:16:2c:4c:37:1a:db:af:ae:37:
         08:c7:9d:f9:68:f9:f3:1d:a2:ac:77:9c:aa:21:7b:9f:d5:95:
         a0:16:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org