Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32342d3234203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          /YHDwi46/MkJawLD5rorfaLHSFIKB7C5qVLjyGqLHAE=
Subject key identifier:   33:42:55:83:44:1F:D8:C1:D8:49:B6:A8:E7:90:77:4E:20:A5:C0:05
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       2FB16E8CDEE01B82783A0436A01D17D57306387A
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        170.80.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b1:6e:8c:de:e0:1b:82:78:3a:04:36:a0:1d:17:d5:73:06:38:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=33425583441FD8C1D849B6A8E790774E20A5C005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:3e:5e:ea:d4:df:39:0f:d4:99:89:2b:29:
                    85:d0:09:da:ab:a9:d0:bb:86:f6:a0:86:62:3a:46:
                    9f:48:32:89:e1:ad:a7:f5:9d:9a:c8:ca:d0:16:c0:
                    b8:4a:4f:bf:8b:9e:6b:3e:c4:5e:85:b0:c7:cf:6c:
                    83:fe:65:05:96:fc:a4:f8:76:a5:5e:36:d8:75:a7:
                    42:22:6c:cc:47:50:2f:53:77:2e:a5:d9:c0:fb:29:
                    01:ba:d7:33:76:df:5c:6a:e5:3f:84:2a:8d:56:2d:
                    fc:24:de:d8:1c:52:97:40:e4:7d:23:3d:42:8a:ab:
                    06:35:a3:46:5e:d2:3a:e0:d0:6d:53:d9:6c:16:8e:
                    7f:e3:ba:21:f6:a8:d7:7f:72:bc:ed:c0:d4:a0:e7:
                    ea:35:ac:ee:35:66:ab:62:a7:6b:83:d6:3c:2b:0b:
                    38:4c:27:f4:74:d6:62:89:f2:f1:0a:78:2d:3e:46:
                    3e:c5:dc:ed:a1:23:1f:ce:78:f9:3e:1f:72:b1:f3:
                    5c:f3:d8:d0:f0:2c:aa:8b:6a:f7:26:e1:62:13:ca:
                    47:a2:b3:58:28:be:2a:f9:fc:bd:3a:17:c0:28:c6:
                    6a:3a:42:4a:ea:ab:55:34:3d:8d:86:26:a2:35:dc:
                    9e:a2:7f:52:85:81:6d:63:a5:da:b9:0d:ba:32:b7:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:55:83:44:1F:D8:C1:D8:49:B6:A8:E7:90:77:4E:20:A5:C0:05
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:4d:6f:87:fe:86:a1:fb:1d:0b:32:c4:4b:b7:b5:a2:f6:
         ab:a6:8b:67:e4:ec:9d:37:28:a5:79:ed:72:f3:97:7e:a3:56:
         b9:59:d2:d6:cd:14:2e:05:53:c9:69:3e:fe:54:dc:c1:a4:76:
         dd:f8:35:2a:e4:ce:1a:34:25:cd:52:05:9c:b3:db:6b:f9:b8:
         81:40:63:b1:86:ea:49:d1:ce:a1:37:4d:13:0d:99:af:37:a5:
         9f:de:07:02:44:e4:de:8f:ba:a2:7a:04:0d:01:6f:a9:e6:ff:
         aa:8b:c9:1a:74:99:29:2f:9e:23:b9:16:63:85:1e:dc:ac:84:
         e9:87:bd:4e:ce:f8:b7:23:cd:f1:98:53:45:26:9e:ce:c1:8f:
         8b:c0:b8:02:72:32:50:7c:b2:4d:c5:6a:01:f4:07:a3:73:13:
         7a:c1:94:c7:8f:fb:ff:24:c0:b1:81:b9:6b:af:42:7c:95:7f:
         c9:d0:6f:d9:e0:72:b4:34:bc:81:97:35:41:2c:1f:7d:3b:a3:
         77:af:97:78:57:8d:93:92:ea:ee:dd:9c:83:7d:e7:fd:5d:23:
         a4:66:06:e7:1f:5f:6c:d9:14:d1:a4:08:88:8b:f7:c8:a0:e3:
         a1:c6:54:72:7e:fe:19:e1:69:71:54:b1:58:eb:8b:60:c0:49:
         de:01:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org