Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          AL6WH5qJN3swnJewG9DEhJVI0Ok/cH5YtfjsvbGXXD4=
Subject key identifier:   62:D8:22:04:FA:CB:CD:08:0F:AA:23:60:D8:0D:51:BF:33:0E:D3:21
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       7C90B08E6BFC6F1830030D433B53D1DE8B409C05
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        170.80.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:90:b0:8e:6b:fc:6f:18:30:03:0d:43:3b:53:d1:de:8b:40:9c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=62D82204FACBCD080FAA2360D80D51BF330ED321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:df:fd:f4:71:dc:53:72:8e:9b:16:df:eb:
                    9f:ed:28:58:30:29:d9:d9:94:7d:d6:af:0c:5d:23:
                    44:1d:cd:bd:00:5e:1c:79:89:d7:40:6e:97:12:f6:
                    e7:b2:a6:3a:99:05:fd:fa:8a:58:07:eb:73:ac:7c:
                    47:72:b7:6e:52:2b:12:0b:26:ab:04:50:47:97:e5:
                    5f:f5:a9:f7:17:a5:8d:96:e3:f4:29:09:a5:2d:1f:
                    c6:66:3a:5e:30:4d:ea:de:56:2d:02:12:ea:92:69:
                    3c:89:c1:12:97:c9:98:b6:9f:73:2f:0a:8f:7e:37:
                    e9:e0:d0:51:20:0a:73:e9:3e:17:f1:e2:92:5e:d7:
                    8d:24:0d:27:98:6d:87:b8:25:db:1d:a1:cd:7a:12:
                    69:55:07:7a:b5:31:69:91:ea:74:65:74:43:aa:88:
                    50:28:a9:4a:fd:98:77:51:17:f2:53:f3:82:61:73:
                    87:b3:86:fd:0e:31:31:6c:50:26:f5:d2:10:e8:e9:
                    28:4c:0a:c5:aa:2c:8f:c9:01:e4:67:09:5f:9c:46:
                    02:ae:88:d1:db:76:33:90:5e:80:32:e2:ae:dd:7e:
                    80:00:29:93:30:58:5b:e1:8b:34:3e:7b:0d:14:af:
                    c3:73:cb:40:b7:b8:20:bc:b0:e1:a2:8c:a9:62:79:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:22:04:FA:CB:CD:08:0F:AA:23:60:D8:0D:51:BF:33:0E:D3:21
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:2b:6c:38:2c:c2:66:57:11:0f:fd:19:ce:01:37:7a:77:
         9e:4a:f6:36:f3:8c:cc:39:35:d3:23:b1:84:ac:ac:3d:f7:2f:
         a4:5d:10:17:ba:73:16:65:d7:5b:37:bf:b3:eb:43:ea:b4:e3:
         2d:bf:4d:7c:28:8c:75:51:83:b5:86:24:2e:c3:96:0e:8d:43:
         5c:74:7b:a2:ce:b2:ab:e3:63:68:73:1b:54:45:e4:96:0f:02:
         7b:f3:15:ed:ab:1c:2e:00:8b:36:1a:bb:fe:a2:9a:a1:5b:15:
         0f:f5:f6:87:a8:5b:e4:71:20:0d:cc:2f:f5:b6:6b:80:d5:e2:
         c5:05:17:7d:94:28:27:76:2c:a4:02:87:cf:d3:82:80:37:19:
         c0:d2:ff:b6:31:01:3c:c7:bb:04:38:a7:b6:4e:6d:0e:7f:cf:
         34:62:28:a7:5a:fd:9d:fa:4f:2d:79:d2:93:0d:c2:9b:79:a9:
         50:b6:28:0f:8d:34:a4:9d:57:bd:2e:be:47:e5:ec:80:47:8d:
         b1:ff:cb:26:e2:7c:72:ab:f9:25:f4:4d:3a:7c:e1:11:fc:11:
         c3:60:27:6d:dd:a2:e1:06:fd:d7:82:f3:a9:16:90:df:5f:92:
         f0:6b:36:89:d9:ee:b2:76:9b:4c:33:4d:c8:17:e0:0d:42:cf:
         54:54:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org