Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32342d3234203d3e20323636333032.roa
File:                     3137302e37392e3136382e302f32342d3234203d3e20323636333032.roa (raw, json)
Hash identifier:          XJmeqvOVPChEiOmCAlbeZRnWU7FeYy0a1hoKuYv8bbc=
Subject key identifier:   CB:DD:E6:CF:02:6C:B1:D2:B4:4C:20:A4:9A:4B:E1:9B:09:ED:B7:0F
Certificate issuer:       /CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
Certificate serial:       25F76BE7881E1C2A43C1BA8AF9770679C1639594
Authority key identifier: F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32342d3234203d3e20323636333032.roa
Signing time:             Tue 20 Feb 2024 22:30:56 +0000
ROA not before:           Tue 20 Feb 2024 22:25:56 +0000
ROA not after:            Tue 18 Feb 2025 22:30:56 +0000
asID:                     266302
IP address blocks:        170.79.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f7:6b:e7:88:1e:1c:2a:43:c1:ba:8a:f9:77:06:79:c1:63:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9387F47D8872E43A828969C27F3B31F1C2E66C6
        Validity
            Not Before: Feb 20 22:25:56 2024 GMT
            Not After : Feb 18 22:30:56 2025 GMT
        Subject: CN=CBDDE6CF026CB1D2B44C20A49A4BE19B09EDB70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:e2:b2:de:16:c3:81:37:5d:9e:b6:e4:04:
                    c7:60:49:e3:2a:f5:be:92:7c:63:c8:bf:12:bb:d5:
                    b1:34:6f:24:dc:1e:f4:43:48:a7:09:30:85:48:33:
                    4c:76:bc:91:26:c0:10:bd:73:a9:b2:f4:00:15:0f:
                    4e:80:bc:3d:5d:bf:1d:26:3b:fc:19:d3:f4:a1:9f:
                    2d:82:94:2e:5f:53:98:38:d4:03:06:fb:3e:d1:22:
                    8b:fa:46:da:4c:9e:f9:a8:72:22:9d:c1:02:66:ba:
                    40:12:86:a0:a8:d6:cc:4c:e8:1b:f6:9c:5b:3b:4d:
                    2d:69:8b:61:b2:4d:e1:27:fa:4c:a9:62:4f:c9:a6:
                    f5:13:fd:16:0b:c3:b0:29:68:4b:3a:ea:a8:3e:3a:
                    58:86:bd:6c:05:7a:8f:20:17:9a:d1:55:30:a7:be:
                    35:a1:14:bc:fd:9e:59:ab:09:b1:f3:6d:2f:bb:b2:
                    3b:90:b3:ab:93:c9:64:e2:28:a9:7b:54:93:5b:58:
                    69:56:ff:06:40:d9:86:e6:a0:02:27:59:cc:8f:19:
                    af:40:1e:46:4e:a7:24:35:f1:4f:11:7b:9f:0c:3b:
                    dd:a7:d4:ee:39:a6:4f:e1:b1:33:cb:5e:d9:c6:6a:
                    6c:50:21:fd:89:4a:6b:6b:aa:fb:22:bb:c0:6f:98:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:E6:CF:02:6C:B1:D2:B4:4C:20:A4:9A:4B:E1:9B:09:ED:B7:0F
            X509v3 Authority Key Identifier:
                keyid:F9:38:7F:47:D8:87:2E:43:A8:28:96:9C:27:F3:B3:1F:1C:2E:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9387F47D8872E43A828969C27F3B31F1C2E66C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32342d3234203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:12:93:21:c4:9d:6e:d5:98:bf:ed:5a:96:fc:f7:a5:31:c5:
         e1:00:59:91:7f:11:1f:5e:bd:7d:fe:22:f2:a4:38:69:79:09:
         a6:d9:4c:94:ee:8d:10:89:4c:f3:dd:c9:b5:06:46:ed:62:bf:
         54:52:bb:07:10:13:f9:f3:ac:b4:18:74:fa:31:88:16:92:71:
         9d:c4:d9:38:a8:6f:e4:ca:a6:1b:9e:b2:6f:97:31:44:1e:71:
         13:49:d7:7c:b3:c1:5e:dd:d3:a2:c5:cc:0f:28:0f:7b:c6:1b:
         8e:e7:f8:5a:1e:f8:ec:3f:6f:e9:3a:a8:16:0b:c5:d5:64:01:
         1a:9d:57:bf:aa:7d:82:13:26:64:79:e1:82:8b:6a:d0:5f:cc:
         ae:1b:a1:8b:d2:bc:64:ec:91:b7:03:30:2c:a6:d6:9a:84:e0:
         27:54:d2:95:35:f8:17:37:ae:6e:45:7b:e1:22:42:80:f3:85:
         21:17:af:9d:98:b4:88:5b:27:e6:19:70:8c:a0:15:fc:50:63:
         07:73:dc:9a:17:2d:43:20:87:ab:1a:84:b3:80:70:4c:b3:79:
         fb:7c:ed:ff:d0:a0:8d:ef:05:0f:ac:3b:b0:4e:8f:e3:51:24:
         b4:7a:71:7d:24:1a:f6:5b:8c:03:e6:4d:ae:0f:77:ec:96:06:
         27:b6:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org