Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32342d3234203d3e20323636343736.roa
File:                     3137302e38332e3139362e302f32342d3234203d3e20323636343736.roa (raw, json)
Hash identifier:          D/X9MZymnLi+v1I+QS6EfSWc7tUfyMUFbTFJFbPpC0o=
Subject key identifier:   07:08:59:64:76:DD:47:4A:46:7C:CE:C3:EF:91:4E:E7:CE:9C:07:F6
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       462C3147C0BBBC256C85675D98E04077EA7E18B6
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32342d3234203d3e20323636343736.roa
Signing time:             Tue 16 May 2023 12:14:18 +0000
ROA not before:           Tue 16 May 2023 12:09:18 +0000
ROA not after:            Tue 14 May 2024 12:14:18 +0000
asID:                     266476
IP address blocks:        170.83.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:31:47:c0:bb:bc:25:6c:85:67:5d:98:e0:40:77:ea:7e:18:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: May 16 12:09:18 2023 GMT
            Not After : May 14 12:14:18 2024 GMT
        Subject: CN=0708596476DD474A467CCEC3EF914EE7CE9C07F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:db:6e:72:5b:c0:d2:17:ba:53:f4:ff:ce:
                    b4:e5:7f:b6:aa:81:0e:90:f5:af:29:32:cb:37:ab:
                    82:89:bf:f0:e5:f1:2a:bd:68:74:14:6b:46:fc:71:
                    fd:96:43:3d:7d:ce:6d:f5:39:cf:04:71:4b:66:e3:
                    26:37:9c:0b:36:b8:c2:6e:c4:50:eb:bf:64:e2:4b:
                    a8:45:af:b4:a3:c4:7f:98:c7:51:4f:cd:97:6f:f0:
                    b4:cd:5f:a3:0e:51:1e:5c:64:35:d9:aa:60:6d:20:
                    79:8c:1d:17:5d:91:ff:18:aa:c8:62:f9:c2:34:07:
                    7a:b0:3b:9b:78:f7:94:da:34:fd:32:ff:f4:47:47:
                    27:bd:68:f4:39:a6:8f:0f:90:fa:f3:be:73:03:44:
                    98:20:71:72:a5:b2:79:46:2d:cd:2c:e4:34:b5:f4:
                    32:63:8c:fc:40:6b:df:b2:79:7d:c8:e2:0a:66:cf:
                    ef:37:6d:fd:d6:66:3f:1f:ca:52:04:20:82:48:1b:
                    84:87:05:a8:b0:97:84:2a:3a:90:83:87:35:40:a2:
                    86:75:fd:cf:3d:d3:7c:0f:d1:fe:9a:79:9b:0a:01:
                    34:90:3f:23:45:e8:b5:77:c6:1b:a6:6e:90:f8:d8:
                    7c:14:5b:68:ce:0a:45:9f:05:ec:80:a3:20:2b:a9:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:59:64:76:DD:47:4A:46:7C:CE:C3:EF:91:4E:E7:CE:9C:07:F6
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139362e302f32342d3234203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:85:60:66:a8:01:e9:82:66:64:df:9a:2d:5a:99:a8:ef:56:
         ee:15:51:61:ad:50:8b:71:09:5b:e4:ea:59:38:6a:39:ec:42:
         7d:4e:af:6b:89:81:36:ea:f1:ad:8a:b2:40:69:1f:7f:35:38:
         5f:75:4c:67:1d:94:da:c6:29:cb:8c:48:70:d0:ba:ad:81:55:
         dc:5c:c9:c2:e0:da:87:56:15:d5:c5:57:f7:88:9d:90:c3:ee:
         d6:16:3f:eb:97:fc:d7:64:27:bf:43:b8:d0:9e:dc:00:1f:cb:
         b5:b1:70:4c:88:31:95:59:16:42:98:b9:65:30:60:8f:35:e3:
         38:68:c1:89:c9:fc:60:ef:48:11:39:de:8c:d7:42:f5:41:c0:
         cb:24:1b:81:ef:d0:83:19:e8:26:2f:c2:d9:91:ee:2c:b4:ed:
         79:13:ca:46:f0:19:52:eb:f4:04:38:6d:c8:f0:d1:88:a6:aa:
         a7:cc:ab:5e:78:16:97:d8:f2:e5:8d:a0:cd:80:ed:d3:4e:7d:
         7e:97:85:c8:92:e1:36:48:8c:71:bf:3a:ac:ab:de:5a:82:f6:
         39:2c:d1:16:3e:12:3d:28:d8:be:3b:a7:10:5c:35:37:de:37:
         5c:df:c5:18:e4:c7:43:a9:96:45:1a:39:7e:5d:5a:97:22:75:
         ad:8d:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org