Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e38322e36342e302f32322d3234203d3e203533303830.roa
File:                     3137302e38322e36342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          SE5SZf5XpvQnjA+C7W51v2ecCaFHf7SD6wo0wJR7UMI=
Subject key identifier:   11:A0:ED:4E:E8:8A:82:C4:ED:1B:DC:53:6A:8F:35:37:A9:33:B9:9B
Certificate issuer:       /CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Certificate serial:       6BAAE2A13B3CF61A27A8F9520AF5AF313FC7192C
Authority key identifier: AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e38322e36342e302f32322d3234203d3e203533303830.roa
Signing time:             Fri 03 May 2024 20:04:33 +0000
ROA not before:           Fri 03 May 2024 19:59:33 +0000
ROA not after:            Fri 02 May 2025 20:04:33 +0000
asID:                     53080
IP address blocks:        170.82.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:aa:e2:a1:3b:3c:f6:1a:27:a8:f9:52:0a:f5:af:31:3f:c7:19:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
        Validity
            Not Before: May  3 19:59:33 2024 GMT
            Not After : May  2 20:04:33 2025 GMT
        Subject: CN=11A0ED4EE88A82C4ED1BDC536A8F3537A933B99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:10:8e:ea:dd:69:13:15:01:5c:17:48:62:
                    81:0e:36:d7:53:21:36:42:ec:e1:c9:60:fd:7d:90:
                    86:a6:4c:d9:29:4b:6c:9f:95:ef:ab:2e:ab:ba:ff:
                    6e:75:f7:20:a4:91:a8:3a:34:06:8d:f9:d7:af:7a:
                    0b:7e:d6:a8:3a:64:40:06:83:61:1d:75:c1:7e:36:
                    19:ff:d8:00:2b:5f:35:6d:7d:6e:0e:c4:00:0a:a1:
                    32:0c:93:ba:34:98:e1:56:f9:e0:d1:2e:62:88:61:
                    f2:a1:96:48:ac:56:28:35:dc:9d:aa:b0:8b:9f:c3:
                    24:94:3b:1d:fe:19:c9:7f:d3:55:c0:f5:d8:da:a2:
                    d6:2a:10:3c:a9:d8:04:51:16:6b:92:6a:1a:f0:87:
                    99:3f:1b:2d:24:1c:a4:da:06:be:a9:5e:cf:af:e5:
                    69:78:4f:9c:51:9b:ed:f5:1e:ea:3c:4f:16:55:1f:
                    34:ce:be:24:aa:2b:43:cc:c0:d1:9d:ca:61:fb:be:
                    05:0d:b7:67:17:e4:25:1f:8f:c1:25:2f:ab:fd:95:
                    3a:17:78:df:ad:5d:38:d2:cd:77:0b:a6:3b:0e:36:
                    15:bd:ad:78:e2:cf:db:ec:65:6f:8c:46:36:65:90:
                    3e:a2:d2:90:b2:b2:ac:f3:ce:dd:ee:75:9f:e7:60:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A0:ED:4E:E8:8A:82:C4:ED:1B:DC:53:6A:8F:35:37:A9:33:B9:9B
            X509v3 Authority Key Identifier:
                keyid:AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e38322e36342e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:05:b9:ea:ad:96:4e:82:c8:10:12:24:86:cc:f6:cb:ea:4c:
         05:51:77:55:f6:3c:db:3e:08:56:a8:26:0a:6f:a3:80:ee:1f:
         cf:d0:ca:73:d9:8c:b8:58:ea:d1:e4:fa:55:b2:cd:5d:a5:39:
         2c:c2:18:ff:28:5e:93:e1:c9:02:44:09:c3:6f:98:7b:30:9a:
         56:21:8b:87:9c:ce:a8:c1:cf:b4:a9:a5:0a:73:b1:71:0f:2e:
         8e:68:ae:07:92:d0:1d:48:e6:19:31:cc:2e:dc:86:f4:e2:5c:
         c5:2b:b4:c4:f4:da:db:f0:50:da:8a:b3:23:67:b5:c6:9d:f3:
         c2:eb:f6:b7:27:f1:d1:f6:6b:cd:93:2f:ce:40:33:be:d9:6b:
         12:e6:a5:0f:c9:b9:e5:a5:a2:d2:15:6f:7a:99:b1:76:f7:71:
         be:ba:57:13:20:94:4a:0a:69:be:5a:f4:d5:dd:10:f2:f6:3b:
         5e:b6:1d:c0:a8:8d:78:b3:37:73:92:4a:38:33:28:be:40:3b:
         4a:0d:1e:de:59:93:4a:7d:d5:9e:ee:71:68:f3:35:61:c2:20:
         76:a4:fa:8d:2f:33:86:af:fe:fc:42:5c:a0:83:fc:c2:d4:ee:
         b0:0a:97:68:67:89:1c:d2:01:1f:be:4e:73:4e:29:8f:ee:ef:
         18:b4:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org