Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32332d3233203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          RY20dVeocpE8Q+L50y7LIibZuF/5UvD8Iux6lyjZ3iA=
Subject key identifier:   02:70:07:7C:14:97:A4:A8:CB:0E:84:20:9C:AE:FB:ED:85:AA:85:C8
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       1D173C9EED162FD15CDB23CBD897752566ADEF0A
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:41 +0000
ROA not before:           Tue 02 Jan 2024 21:11:41 +0000
ROA not after:            Tue 31 Dec 2024 21:16:41 +0000
asID:                     262293
IP address blocks:        170.80.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:17:3c:9e:ed:16:2f:d1:5c:db:23:cb:d8:97:75:25:66:ad:ef:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:41 2024 GMT
            Not After : Dec 31 21:16:41 2024 GMT
        Subject: CN=0270077C1497A4A8CB0E84209CAEFBED85AA85C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:32:d8:6b:82:ed:1e:14:49:6a:d6:18:00:
                    a8:da:7e:85:ad:dd:3e:06:9f:59:0c:95:33:8b:9e:
                    0c:0e:53:45:7c:98:83:93:73:aa:05:20:89:ed:87:
                    6f:49:85:a8:8a:06:8a:a7:e8:c4:20:99:20:ca:cc:
                    44:3f:55:be:e2:22:e8:7f:6b:af:29:07:15:ec:8a:
                    0a:e9:e1:1d:4f:e2:08:a8:32:cb:8e:99:33:bd:41:
                    1a:da:10:4e:be:cb:5b:07:30:c4:75:ab:d2:d3:19:
                    60:9e:c4:a8:d2:f7:f1:04:ad:c1:d0:44:8e:de:fd:
                    eb:0d:4a:0b:a7:c9:1b:7e:e6:3e:cb:58:3b:6b:0e:
                    9c:aa:10:62:8b:99:0f:2c:5e:42:12:0e:34:80:58:
                    c8:a5:8e:19:03:7c:6f:ed:9c:7f:97:13:85:35:0f:
                    a5:47:e9:aa:c1:ef:38:cb:fd:ba:f3:1b:26:f8:6a:
                    6c:a5:2b:5f:09:c5:fd:09:28:03:ba:38:4e:0a:b5:
                    39:37:00:7e:d0:e9:8c:dd:e1:2b:8e:bc:41:3d:02:
                    25:ed:78:ca:1b:5b:38:5c:a4:9d:1f:29:97:54:fc:
                    f2:97:9e:80:e4:f8:74:a6:0b:dd:92:d3:c0:a8:6f:
                    bb:1d:de:f7:13:57:37:c5:8a:15:22:66:96:38:1f:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:07:7C:14:97:A4:A8:CB:0E:84:20:9C:AE:FB:ED:85:AA:85:C8
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:74:88:a3:e6:bb:aa:36:fc:c1:7b:99:f1:de:63:3b:ae:44:
         6e:98:af:9e:16:d2:a3:80:56:1d:fe:b9:f7:12:9b:55:85:75:
         b8:b5:52:74:e2:57:85:37:56:90:6a:dc:81:e0:ab:2b:5b:d2:
         62:1e:fc:b3:a2:54:db:d1:ac:f9:42:17:09:41:78:6c:1c:7f:
         8e:29:2c:38:84:4d:04:6d:66:4f:93:d4:b7:ce:81:18:a9:5f:
         cc:80:16:c6:fd:be:b5:dd:94:94:b4:65:60:1f:10:88:08:af:
         c8:0d:ab:6b:cd:8b:af:36:f9:cc:6c:bd:c0:8b:bd:47:34:29:
         83:88:42:fe:0a:91:ae:ed:59:6f:dc:ce:0a:07:c7:f2:0b:1e:
         5c:91:33:25:29:59:a7:7b:b2:06:b3:4c:aa:35:57:d4:51:28:
         05:f8:56:96:3f:71:5a:51:c2:6e:e6:58:e8:b8:85:9c:35:54:
         ac:e1:17:ed:df:de:22:33:ff:56:7b:3f:7a:f8:5e:88:e0:77:
         3e:2a:7f:f4:1b:4d:fa:5a:fc:cb:6a:33:8c:5e:91:44:cf:bb:
         10:8b:cd:88:44:bc:9c:bd:95:84:23:02:03:92:67:18:c4:9c:
         84:62:d8:d6:53:ed:f4:02:eb:6a:be:27:b5:e8:fc:a3:42:5b:
         b1:4a:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org