Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
File:                     3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (raw, json)
Hash identifier:          JuNNGOyyklvatOTdeSaPf+Jv2poHhEp6Yduhuku1JbE=
Subject key identifier:   42:CE:1A:E2:D7:D6:9D:4D:A4:40:D0:D1:A8:FB:F8:6E:10:15:D1:D1
Certificate issuer:       /CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
Certificate serial:       29C1BD08E9FF9A0A7E872D55AD8791D62DDD401D
Authority key identifier: 23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
Signing time:             Wed 01 Nov 2023 22:01:23 +0000
ROA not before:           Wed 01 Nov 2023 21:56:23 +0000
ROA not after:            Wed 30 Oct 2024 22:01:23 +0000
asID:                     264992
IP address blocks:        170.84.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c1:bd:08:e9:ff:9a:0a:7e:87:2d:55:ad:87:91:d6:2d:dd:40:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
        Validity
            Not Before: Nov  1 21:56:23 2023 GMT
            Not After : Oct 30 22:01:23 2024 GMT
        Subject: CN=42CE1AE2D7D69D4DA440D0D1A8FBF86E1015D1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:6d:4c:19:80:df:de:d0:f4:8a:21:76:c8:
                    25:05:99:e0:44:d9:7b:ee:9b:6d:fe:c9:02:9f:15:
                    fe:bb:6b:60:31:68:74:9f:08:66:03:c5:05:8f:ff:
                    1a:65:8e:08:23:b3:d2:03:2f:06:f4:2b:79:0f:d9:
                    33:43:2b:18:1f:20:fc:44:e2:6f:bc:ef:bc:85:dc:
                    d6:13:f4:04:9b:d3:19:4b:13:e6:b4:1d:0f:64:85:
                    d4:b4:56:a7:2f:35:8e:e5:d9:67:74:22:e7:54:27:
                    45:26:18:e4:c7:1a:d3:22:42:31:09:c3:15:08:69:
                    49:ae:e5:0b:aa:da:b6:17:7c:10:d1:07:dc:6f:97:
                    e4:f6:da:88:34:ee:27:d9:e4:fd:6b:03:5f:e4:f8:
                    33:7f:f0:1e:c3:8f:e0:79:1d:8e:de:6c:58:bf:b1:
                    47:cb:14:de:a9:5b:90:36:d0:0c:ef:48:2b:7b:23:
                    4c:ca:84:cb:c2:fd:77:3f:d6:80:87:8c:4a:25:a7:
                    1a:81:72:2a:f5:54:1d:e2:09:c0:72:33:8d:b0:4d:
                    ba:ee:4f:4d:91:84:03:5d:d8:8b:c6:1a:2c:c6:05:
                    fe:59:90:29:91:c9:4f:e2:a7:13:87:b0:b9:c5:a0:
                    28:ca:53:b5:1d:e5:15:a5:31:3f:47:ec:77:5a:42:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CE:1A:E2:D7:D6:9D:4D:A4:40:D0:D1:A8:FB:F8:6E:10:15:D1:D1
            X509v3 Authority Key Identifier:
                keyid:23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:f6:7d:cb:6d:07:89:19:e4:c3:f2:df:1b:28:b3:2f:84:
         82:23:05:73:d6:16:86:ec:70:50:45:50:50:0c:0e:07:e5:d7:
         2a:19:59:f5:c8:b9:9e:ad:ee:08:97:7e:c7:25:1b:ae:29:0d:
         32:e1:9d:73:44:3b:9c:a1:84:47:b8:0e:16:1c:c0:eb:b2:54:
         73:d6:57:59:51:3a:bc:70:f4:f1:e5:18:64:f6:fe:c6:ff:b6:
         2f:e5:83:2b:42:54:79:76:d3:8a:d0:d7:0a:04:96:6f:98:34:
         c5:5d:89:3e:2b:db:51:e8:7f:d3:08:0e:e7:44:02:a5:2a:15:
         00:65:3e:5d:d3:f5:cd:45:82:26:95:58:d3:82:17:11:33:68:
         54:a8:01:d6:7e:c5:f2:37:e2:38:d0:72:2f:de:e5:ba:ac:aa:
         f4:78:31:16:67:da:89:c1:3c:ba:eb:52:97:b3:7a:22:d8:4d:
         25:4c:b8:5c:99:0b:50:48:7c:2f:84:c4:f1:aa:2f:75:2a:12:
         52:23:e0:6a:7f:e0:13:57:4c:11:a5:39:20:72:ea:76:de:02:
         dd:c5:e5:a2:0f:2d:a9:8c:9e:ec:2f:d6:b1:6a:11:84:ea:7e:
         ac:54:9a:69:4d:7b:f0:1d:a0:e5:84:13:b6:36:83:05:03:17:
         f9:49:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org