Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3332203d3e20323636343736.roa
File:                     3137302e38332e3139362e302f32322d3332203d3e20323636343736.roa (raw, json)
Hash identifier:          2eGFH+XHcledHsOL6EQdc123S/jhQwD0xF6jzI1F2L8=
Subject key identifier:   48:20:F5:9C:6F:D6:33:04:3B:72:EC:30:92:94:AA:1B:43:D9:66:9B
Certificate issuer:       /CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
Certificate serial:       677E4A664D8597E3A0DE07FABABCE85506FE3534
Authority key identifier: BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3332203d3e20323636343736.roa
Signing time:             Thu 26 Jan 2023 13:39:20 +0000
ROA not before:           Thu 26 Jan 2023 13:34:20 +0000
ROA not after:            Thu 25 Jan 2024 13:39:20 +0000
asID:                     266476
IP address blocks:        170.83.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:4a:66:4d:85:97:e3:a0:de:07:fa:ba:bc:e8:55:06:fe:35:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05
        Validity
            Not Before: Jan 26 13:34:20 2023 GMT
            Not After : Jan 25 13:39:20 2024 GMT
        Subject: CN=4820F59C6FD633043B72EC309294AA1B43D9669B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:b5:ab:10:7d:58:34:ae:9d:71:a0:06:43:
                    aa:ae:4c:3e:a6:1c:f5:7f:68:e2:b1:4f:9c:a1:8c:
                    14:a8:cb:75:d4:07:82:49:25:e6:7a:63:b7:bc:71:
                    fc:7d:a3:82:d3:2c:ab:9d:43:58:a0:67:4f:8c:96:
                    40:2d:3f:48:34:6e:c1:ec:84:d5:10:5c:36:58:5a:
                    36:37:76:f8:e4:fe:20:c1:d0:d6:6c:6c:1e:6b:20:
                    c8:b5:5e:07:b2:bb:3b:7f:4e:63:f6:a6:56:74:8e:
                    93:b7:42:33:f1:af:3f:a2:7a:27:a1:2f:9e:c0:8e:
                    38:bc:b2:d5:a6:c0:b0:c8:da:ba:89:1c:5d:44:07:
                    2c:2c:9a:a4:0c:78:7b:13:83:40:1c:57:31:81:27:
                    dd:d6:a5:fb:23:23:cd:43:4f:82:d8:7b:72:da:ab:
                    ed:33:3e:86:a1:19:fc:d6:52:31:e9:85:af:bc:be:
                    59:97:9a:c1:f5:29:16:f1:eb:9b:31:cd:2b:7e:89:
                    a1:28:c9:bb:11:ba:6a:45:3b:58:95:f5:68:a0:a7:
                    64:f3:ac:86:56:d9:4f:d2:f8:54:42:15:4a:5c:6e:
                    65:b3:fd:f0:75:05:3e:78:95:06:c5:f0:e8:7e:e9:
                    c5:1f:5f:dc:be:04:e5:60:59:1b:ae:bd:6e:59:55:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:20:F5:9C:6F:D6:33:04:3B:72:EC:30:92:94:AA:1B:43:D9:66:9B
            X509v3 Authority Key Identifier:
                keyid:BA:B4:3B:B8:90:0B:A7:B9:2C:91:D6:5B:3D:E1:2D:CC:80:A5:CA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAB43BB8900BA7B92C91D65B3DE12DCC80A5CA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3332203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:6a:d9:98:36:a3:cb:fc:2c:09:39:15:91:d5:69:24:cd:
         7a:97:9d:88:f3:fb:d4:2d:81:46:75:42:14:75:77:15:25:6b:
         50:23:0a:07:f9:8b:d4:12:b3:d0:11:3f:cd:9e:98:71:b1:bb:
         7e:df:23:ef:7d:06:1c:4a:98:fc:30:67:8c:1e:ee:e8:9d:75:
         c6:64:6d:da:51:e8:5f:0e:ed:f4:83:db:51:9e:05:9d:a0:41:
         61:27:6a:b4:13:24:7a:3e:f0:d3:11:b8:02:0e:9a:3d:76:56:
         27:75:9f:ab:9a:e5:3c:58:5e:79:49:78:75:ec:bd:88:1c:2d:
         44:25:c9:4c:7f:65:d3:78:4d:d0:47:eb:b3:c6:86:7d:41:ce:
         99:8d:ea:98:a2:e3:2e:bb:38:d5:39:a2:36:00:15:5c:e3:35:
         1a:e7:36:8f:2d:55:d9:a2:b7:59:17:94:0b:91:97:6c:a1:51:
         b8:9b:42:05:eb:0a:70:92:47:0c:46:ee:c3:db:18:d1:82:77:
         c4:df:09:5d:ff:db:ff:d1:37:f0:5a:d4:ee:e6:28:46:34:ef:
         05:46:3b:06:cd:f4:ae:60:dc:88:af:21:1b:77:56:bb:26:19:
         bc:43:f1:67:a0:e3:94:89:5d:9a:80:c8:3d:1b:dd:9b:ac:4d:
         68:cf:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org