Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139382e302f32332d3233203d3e20323636343736.roa
File:                     3137302e38332e3139382e302f32332d3233203d3e20323636343736.roa (raw, json)
Hash identifier:          G3u6yv1f6sk7R5Sav0GkPLiXczVQ8rNcxwzlQ+YVXXE=
Subject key identifier:   DE:89:45:B3:C7:C0:08:9F:E4:71:52:2B:7A:EE:40:3A:89:FA:FF:A4
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       4E4E167E612ABE1CA21B810A07C4F6E8D460796F
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139382e302f32332d3233203d3e20323636343736.roa
Signing time:             Tue 16 May 2023 12:14:22 +0000
ROA not before:           Tue 16 May 2023 12:09:22 +0000
ROA not after:            Tue 14 May 2024 12:14:22 +0000
asID:                     266476
IP address blocks:        170.83.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:16:7e:61:2a:be:1c:a2:1b:81:0a:07:c4:f6:e8:d4:60:79:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: May 16 12:09:22 2023 GMT
            Not After : May 14 12:14:22 2024 GMT
        Subject: CN=DE8945B3C7C0089FE471522B7AEE403A89FAFFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:57:b6:15:83:81:e1:e3:65:04:dc:33:3e:
                    58:41:e0:4a:1e:4f:e4:1a:02:45:e1:68:76:3e:78:
                    a7:a0:96:bb:49:06:32:79:c1:91:bb:a9:45:a3:5b:
                    b3:87:4c:7a:31:b0:d4:88:ed:9c:f5:4b:91:eb:9f:
                    5c:40:ef:81:16:b3:a7:55:1b:6c:ff:3a:ed:72:4b:
                    e7:be:36:6d:87:90:76:96:b3:e4:be:1a:28:61:56:
                    6c:79:d0:68:3d:78:73:ee:3b:c9:14:09:4e:e7:26:
                    fc:21:b3:e5:fe:9b:8b:d8:d6:45:df:7a:77:c0:f8:
                    1d:23:78:e5:17:33:2a:bb:0d:5b:a7:e4:ff:2e:97:
                    f9:ca:48:5a:ba:79:b8:1b:00:b3:1f:6c:57:e0:a6:
                    cc:5e:e2:f4:a9:70:7d:b0:d4:7d:35:28:c0:d8:8b:
                    4f:c1:40:d0:83:e3:f6:7c:ee:b3:6d:0c:a8:40:8d:
                    52:97:33:21:3a:d2:cf:24:67:57:f9:48:fd:de:48:
                    72:f5:ce:02:e0:37:3d:7a:1d:20:3f:62:a1:27:5f:
                    56:0f:89:00:90:a0:fc:c1:87:72:2b:20:72:be:de:
                    c9:0f:a4:03:54:94:9f:7b:8f:02:1a:a1:55:94:95:
                    d4:92:11:91:c9:0a:a1:9b:4b:09:f4:9f:09:b6:57:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:89:45:B3:C7:C0:08:9F:E4:71:52:2B:7A:EE:40:3A:89:FA:FF:A4
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139382e302f32332d3233203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:ff:2e:68:9c:73:5a:98:94:8e:05:57:41:9c:d5:49:95:d7:
         10:7d:29:c9:d2:5e:0d:f8:47:ad:95:e5:a4:b6:9e:17:22:22:
         29:20:02:24:ae:2c:ae:4f:2b:46:5f:fc:07:e9:c7:a3:18:d2:
         45:9f:6c:21:fe:21:51:e0:3e:b3:36:7b:fd:a8:ec:08:92:0b:
         ce:e1:ba:70:b2:c5:99:54:10:b3:9f:cf:33:cd:27:bf:c0:90:
         ce:45:42:89:9b:80:cc:67:ed:b1:36:62:2a:40:35:cd:fe:b9:
         f9:82:38:1c:83:d6:a3:28:ec:bc:d9:88:26:75:bb:6d:41:cf:
         ec:d2:a1:44:cc:48:32:ef:17:63:bf:0e:c8:6f:07:18:fb:2d:
         5f:03:e9:95:a8:ee:5c:e4:6d:6b:23:da:3b:c2:c0:f9:04:3c:
         24:aa:cf:93:f4:85:43:d0:36:89:9a:aa:a2:fc:0b:ca:72:0a:
         15:ba:da:26:f3:26:66:53:a6:d2:7d:8b:53:ff:7b:ce:11:cc:
         15:85:47:16:bf:b1:d5:1d:3a:de:fc:f2:01:dd:9e:2e:d0:08:
         a1:9d:a6:f1:32:7e:b7:be:eb:0a:75:0f:95:45:d6:20:c1:a8:
         51:6c:ca:4f:e5:14:e5:0a:d2:7b:59:2f:48:f7:fa:5b:7d:8e:
         0b:07:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org