Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139392e302f32342d3234203d3e20323636343736.roa
File:                     3137302e38332e3139392e302f32342d3234203d3e20323636343736.roa (raw, json)
Hash identifier:          lLQHI/G6zJOrwV0lAG6YEzMHmG7oTy6BWsfUSkIpFPE=
Subject key identifier:   D1:0B:BC:2E:55:07:86:BA:42:23:FE:00:45:C7:53:81:8F:88:03:74
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       7DE1134B82B683CA1A48F59673E96D70A3B8C472
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139392e302f32342d3234203d3e20323636343736.roa
Signing time:             Tue 16 May 2023 12:14:30 +0000
ROA not before:           Tue 16 May 2023 12:09:30 +0000
ROA not after:            Tue 14 May 2024 12:14:30 +0000
asID:                     266476
IP address blocks:        170.83.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:13:4b:82:b6:83:ca:1a:48:f5:96:73:e9:6d:70:a3:b8:c4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: May 16 12:09:30 2023 GMT
            Not After : May 14 12:14:30 2024 GMT
        Subject: CN=D10BBC2E550786BA4223FE0045C753818F880374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:35:40:e8:ee:10:74:32:7f:55:93:e0:12:
                    39:bc:61:63:94:29:da:0b:bc:17:16:58:ab:1a:d9:
                    ae:eb:16:38:5f:05:46:d1:a9:c3:ba:b2:8c:39:7b:
                    f1:36:02:db:e7:b6:e4:95:ff:ae:a7:9c:a4:52:2e:
                    21:19:25:e8:5a:1f:28:49:9e:38:fc:bf:cd:8d:02:
                    be:d9:d5:ad:8a:e8:6a:c6:86:70:01:46:a7:42:6b:
                    84:71:9f:71:28:c3:db:b4:74:78:46:05:ec:3c:2a:
                    c5:f8:ea:b0:d8:b0:5e:3e:40:02:7f:91:84:31:65:
                    2d:c1:e2:9b:76:75:2f:cf:78:5e:f5:19:a6:dd:4b:
                    a0:eb:a3:77:43:b1:93:46:90:c8:20:fd:44:e6:8c:
                    d0:ed:aa:75:5c:07:46:05:51:a0:94:63:e7:ff:cc:
                    30:df:34:39:73:8c:ef:06:98:6b:27:9a:38:91:1b:
                    b2:9b:ed:f7:0d:35:ce:b3:2f:37:2c:4a:9c:bb:6b:
                    a5:8a:4e:ed:96:04:38:5b:44:f7:17:fe:d6:3e:46:
                    11:0d:60:79:6f:79:0b:22:05:8c:8f:93:68:e0:23:
                    7d:fa:a3:8d:26:c8:91:20:dc:df:bb:e0:50:40:ce:
                    da:40:6d:3f:a4:58:be:aa:0d:6a:c0:de:a3:98:11:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0B:BC:2E:55:07:86:BA:42:23:FE:00:45:C7:53:81:8F:88:03:74
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/3137302e38332e3139392e302f32342d3234203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4f:66:ef:28:de:30:3b:94:75:b6:08:0a:c0:23:a3:90:3f:
         dc:7f:be:6f:05:ca:73:af:37:bf:fd:d4:6c:87:dc:8c:93:39:
         3c:8a:16:56:11:08:d0:54:ba:12:f8:52:66:6d:25:52:55:d5:
         89:73:75:25:b0:e0:53:d3:47:34:73:fc:9f:7e:30:7d:89:17:
         fc:8d:dd:f9:83:27:40:27:27:05:de:7f:b2:d3:9f:ce:1a:2d:
         f8:a0:d2:e7:4e:1c:79:b3:78:55:ed:b9:0a:f2:58:7a:d1:24:
         ff:8c:2e:3c:36:0a:2b:7b:3d:63:7d:fa:d6:bb:cf:55:e7:d0:
         bf:9b:4d:44:eb:30:e5:f7:4f:a9:ee:95:f0:19:fd:d9:e7:58:
         df:7a:15:db:09:94:4c:e8:98:94:d8:2e:07:e8:d5:72:e6:79:
         31:17:f8:d4:dd:25:93:14:4d:a2:74:fc:5d:75:c2:1c:7f:e6:
         7a:51:dd:05:88:a4:78:5e:ee:37:41:e8:6c:91:3d:c0:62:60:
         91:f6:5c:28:af:35:56:33:3a:0b:ac:41:aa:5d:00:8b:7c:52:
         10:a7:f3:ef:ae:da:d9:e6:05:0a:94:a4:a6:27:53:4c:c6:1b:
         01:97:91:bb:52:ae:95:6b:42:1f:dd:7a:42:37:ac:e2:4b:a8:
         5a:f1:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org