Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3235203d3e20323636343335.roa
File:                     3137302e38322e37362e302f32322d3235203d3e20323636343335.roa (raw, json)
Hash identifier:          tKZpaPpSJJGtt0GtCndAN+b6Ynzjxo4jiqVSI/g44Yc=
Subject key identifier:   AA:65:47:2C:1D:EF:0B:8B:16:D4:5A:45:AD:6E:0D:94:1C:96:02:53
Certificate issuer:       /CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
Certificate serial:       327B72D46B180E6D25D4288E1F4F0B4BD0DD3476
Authority key identifier: 98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3235203d3e20323636343335.roa
Signing time:             Mon 08 Jan 2024 12:21:20 +0000
ROA not before:           Mon 08 Jan 2024 12:16:20 +0000
ROA not after:            Mon 06 Jan 2025 12:21:20 +0000
asID:                     266435
IP address blocks:        170.82.76.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7b:72:d4:6b:18:0e:6d:25:d4:28:8e:1f:4f:0b:4b:d0:dd:34:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
        Validity
            Not Before: Jan  8 12:16:20 2024 GMT
            Not After : Jan  6 12:21:20 2025 GMT
        Subject: CN=AA65472C1DEF0B8B16D45A45AD6E0D941C960253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:a6:e1:20:bc:ef:5c:93:df:5d:a6:0f:06:
                    ee:03:7b:66:39:d5:3a:de:19:4c:fa:03:13:c2:0b:
                    8a:f4:88:0e:60:cb:12:db:0f:06:8b:c1:56:28:b8:
                    11:0e:95:43:66:09:5f:69:67:23:93:e8:25:7c:b4:
                    22:1e:09:b4:a4:c0:e8:f2:1a:19:6c:ed:5a:c8:88:
                    9c:24:58:b2:1c:cf:74:a3:8b:50:b1:c5:7a:8d:3b:
                    81:f0:d7:bb:dc:e9:08:af:d7:4f:48:cf:9c:5f:00:
                    c8:15:e9:e6:2d:9f:e5:82:aa:57:eb:b7:d6:77:de:
                    4f:f4:bf:24:9f:1c:c2:f2:49:74:3c:82:c8:de:cb:
                    31:aa:8a:aa:bd:7a:a4:88:cb:74:a9:2e:57:db:71:
                    fa:1b:27:8d:2a:6b:ca:a9:ee:c7:bf:a1:b5:59:9e:
                    0c:09:2b:48:64:ff:9e:59:3c:97:30:24:54:76:1f:
                    57:e8:bd:9c:27:e6:89:03:40:13:83:de:9b:9f:c5:
                    94:5c:0f:7c:1c:22:e1:50:07:58:7b:ed:57:ee:b4:
                    53:54:72:df:87:e3:bf:07:e9:c2:f4:a0:80:05:39:
                    b6:72:1e:63:09:dd:c2:86:a9:60:68:46:ab:2b:e6:
                    15:1a:e3:25:0d:c5:50:59:a3:fa:e3:8d:02:0d:2b:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:65:47:2C:1D:EF:0B:8B:16:D4:5A:45:AD:6E:0D:94:1C:96:02:53
            X509v3 Authority Key Identifier:
                keyid:98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3235203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:83:30:ae:42:11:32:19:4b:63:3d:74:3a:dc:9c:a5:37:
         c9:56:ef:ef:76:3d:ab:89:72:a6:0e:06:5f:05:5d:ca:54:77:
         59:22:74:c5:3b:56:fb:11:93:4d:2c:11:f0:df:c3:fb:14:c0:
         a7:2d:c3:80:4d:80:cc:8d:3a:2d:bd:a2:ff:7a:59:35:60:e1:
         74:49:b2:f5:6c:f6:99:0a:78:92:5f:75:48:2b:d3:1a:6d:d2:
         63:95:e9:41:56:fe:df:c4:80:69:68:08:d2:9f:5a:14:cf:a4:
         7e:55:fa:c1:04:a0:af:93:bc:b8:19:12:c5:b3:30:8c:da:09:
         6e:f6:c9:d7:51:61:6c:0b:6c:ba:37:24:24:06:c1:02:bb:1c:
         e1:e4:a6:ca:57:93:eb:1e:f1:a2:80:29:50:52:2d:11:09:2c:
         c4:e4:15:ec:1c:13:89:a8:d7:53:a4:bd:d9:ee:c7:d8:f4:68:
         0f:df:df:81:83:71:26:f9:e6:5e:0e:2d:fb:46:ad:fa:cd:73:
         fb:4a:87:2d:e9:81:26:9a:eb:1e:47:3c:b3:61:c9:9b:b8:8c:
         91:8f:45:5d:2c:fd:9b:7a:42:f3:db:41:9d:e7:dc:f6:5f:92:
         4f:db:b5:d4:47:d1:cf:59:d9:50:2c:af:f6:97:22:60:75:c3:
         5b:4c:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org