Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32332d3233203d3e20323632323933.roa
File:                     3137302e38302e3137382e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          XA17DB7xMp/cT0hbFyMX+IMVtJX+z4AWOj1VePTU/Ug=
Subject key identifier:   7D:18:34:A8:AF:3B:F4:D6:F1:D7:DF:B2:00:61:A3:A6:83:7D:5C:FC
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       334C5F3329CE947A5301098990CCF6E07AD02658
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        170.80.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4c:5f:33:29:ce:94:7a:53:01:09:89:90:cc:f6:e0:7a:d0:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=7D1834A8AF3BF4D6F1D7DFB20061A3A6837D5CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:d1:2c:db:87:d8:04:fa:1c:35:a6:f2:79:
                    08:b0:6f:35:5d:16:b3:76:46:47:81:6a:b7:03:f8:
                    24:b1:a0:74:41:50:f4:d1:52:71:09:6d:41:30:df:
                    a3:d4:7c:a9:4d:d5:be:0f:09:cc:cf:4f:b2:53:cd:
                    a3:0d:86:1f:8d:05:6c:3e:1d:14:5b:87:c6:77:61:
                    ea:27:ef:12:77:b4:b6:bb:af:d6:73:06:16:6f:d5:
                    31:02:2f:f5:96:44:6a:a2:35:6e:ac:fd:14:95:b7:
                    0f:dc:c2:e6:6b:99:88:b9:4e:ac:e6:8b:65:43:de:
                    e3:9d:dc:fd:5b:25:b3:8b:6a:86:a7:b8:fa:c8:30:
                    91:55:fb:8e:2e:e9:b9:39:8f:a4:be:0c:07:dd:41:
                    ae:20:65:c1:3e:47:61:bb:c5:4c:c0:b3:d2:cd:e8:
                    4f:1d:5a:1b:ec:6f:e9:da:df:8d:dc:ab:f5:20:a5:
                    aa:a8:a6:f7:dc:d1:31:c9:23:cb:db:37:6b:27:12:
                    a9:bb:7b:10:8d:85:30:f2:fb:20:b4:96:1a:22:1a:
                    41:b7:e4:42:27:41:9b:6a:76:2d:e7:f6:94:ae:bf:
                    4d:55:11:d7:ed:e1:f5:92:85:7a:b0:8b:5b:91:c3:
                    db:ef:e2:fb:a3:16:25:7a:78:b8:38:bd:cd:cc:3a:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:34:A8:AF:3B:F4:D6:F1:D7:DF:B2:00:61:A3:A6:83:7D:5C:FC
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137382e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:81:3b:eb:a7:fb:b4:5d:6f:2f:72:33:c6:91:09:9b:ad:01:
         24:27:1c:9e:f6:1f:82:76:bb:35:39:96:37:f9:74:35:b4:13:
         e0:9d:e0:da:22:24:b9:3c:b2:73:d4:ec:28:60:f2:13:00:e7:
         b3:f4:d0:50:58:fe:e3:cb:c4:a5:b4:6b:6e:99:2a:62:02:87:
         5d:3a:22:b9:df:89:e2:f1:9b:90:01:22:bf:e0:ed:bb:d9:33:
         2c:91:3c:4c:a2:63:35:20:70:a3:d3:3a:c7:1f:82:31:f4:a7:
         00:6e:3e:47:71:ca:07:72:55:01:f3:8e:9d:a4:36:82:ed:18:
         f8:b6:90:4d:dd:e7:b0:5f:c2:04:46:5a:10:57:c4:86:9c:5b:
         f6:e1:ab:24:59:78:dd:5e:bf:f4:ce:c6:9e:58:3a:4b:8e:9a:
         0f:eb:dc:e1:aa:2d:10:31:ce:16:8a:16:bc:60:5a:fd:d3:40:
         3b:05:58:7a:2a:d4:58:70:59:b0:c0:6b:a3:33:01:fa:81:16:
         3a:b2:37:be:f4:b2:f7:3f:fe:8b:06:5a:d0:64:e4:10:49:49:
         f3:73:22:3b:9f:a2:24:dc:c3:15:20:06:49:44:8d:47:1e:e6:
         53:a0:3a:c4:95:2c:3a:bc:38:d8:2d:b5:2b:bf:0f:68:20:9e:
         7b:31:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org