Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
File:                     3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (raw, json)
Hash identifier:          hczzvGksBNX2dEeQelVIAA9xUaEasZBByL1QY0eYaPI=
Subject key identifier:   D5:79:9F:46:8C:C7:A1:85:3D:D9:7B:07:CF:02:A3:4B:54:1C:42:2C
Certificate issuer:       /CN=9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF
Certificate serial:       1349C663CD4B56B9FCA60C39FB4BE6C89AC3536C
Authority key identifier: 9D:8C:C9:B5:8C:BC:58:54:7F:E2:1F:49:B6:37:E2:F2:8F:E4:A9:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
Signing time:             Mon 25 Mar 2024 20:04:44 +0000
ROA not before:           Mon 25 Mar 2024 19:59:44 +0000
ROA not after:            Mon 24 Mar 2025 20:04:44 +0000
asID:                     266399
IP address blocks:        170.81.92.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:c6:63:cd:4b:56:b9:fc:a6:0c:39:fb:4b:e6:c8:9a:c3:53:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF
        Validity
            Not Before: Mar 25 19:59:44 2024 GMT
            Not After : Mar 24 20:04:44 2025 GMT
        Subject: CN=D5799F468CC7A1853DD97B07CF02A34B541C422C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:fd:ee:4f:f6:ad:82:65:8e:23:f9:36:4d:
                    0d:ea:b4:9f:7e:ee:1d:2f:03:42:65:2b:c9:25:7c:
                    2a:dd:74:4f:ce:87:fb:fa:a2:bd:f3:45:6b:c9:3c:
                    4a:dd:4a:ce:85:10:f8:d0:e7:a8:ad:b6:52:d4:e3:
                    f7:64:8e:61:d6:ce:0a:a1:fe:1f:87:2f:15:e8:12:
                    0d:c4:a2:3d:0a:61:3e:af:b9:fd:9f:18:d1:7c:52:
                    3c:05:59:e1:b1:37:9f:ec:a8:fd:74:31:5b:71:47:
                    8b:34:78:14:66:65:c4:08:c4:07:e6:68:aa:00:8f:
                    8b:41:d8:7e:36:53:b0:06:99:dd:47:e3:4a:61:0c:
                    cb:b2:77:20:09:b1:27:a1:6e:2c:f9:d4:00:8d:a4:
                    0d:91:5a:a5:e8:bb:ce:30:57:cc:76:56:e5:20:e8:
                    25:a9:e4:f8:f7:c5:91:f6:c8:7a:75:91:91:2f:fa:
                    91:a8:c8:51:bf:88:00:17:43:64:bf:e2:8e:08:e4:
                    e9:62:a4:19:bf:19:00:d1:d8:bb:f4:4f:46:c5:15:
                    23:89:f0:ad:c5:9c:50:42:b5:b3:72:01:26:69:0a:
                    27:10:5f:1f:08:ff:95:4b:c2:10:83:2b:78:fa:0d:
                    cd:f7:de:b1:a1:aa:64:37:77:84:fa:69:07:f3:c8:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:9F:46:8C:C7:A1:85:3D:D9:7B:07:CF:02:A3:4B:54:1C:42:2C
            X509v3 Authority Key Identifier:
                keyid:9D:8C:C9:B5:8C:BC:58:54:7F:E2:1F:49:B6:37:E2:F2:8F:E4:A9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:69:6e:b9:a3:12:ae:82:ed:36:49:99:82:6f:cc:b1:1c:
         e5:53:bb:67:87:ea:3a:cd:da:41:51:3c:57:fb:83:4c:ae:1a:
         9e:13:11:3a:da:ea:aa:3d:49:28:29:3e:1c:e5:c9:5d:e8:57:
         4f:38:54:9d:b7:84:78:d0:35:ce:5e:c1:23:b1:2a:88:73:e4:
         e2:76:aa:b0:96:19:16:13:0d:63:e3:49:2f:f8:eb:05:32:41:
         b5:13:47:c5:cc:3d:15:ec:47:ff:b6:5e:5a:a9:b6:61:ed:48:
         bc:f7:2b:f8:68:c0:ec:07:89:0a:9d:1c:1f:e4:6d:6e:66:86:
         a0:e8:06:0c:6d:e7:99:0f:67:a8:89:40:83:cc:75:e3:dc:c6:
         8e:e0:26:86:28:ca:d1:f4:53:74:89:37:be:73:f1:fa:d6:88:
         e7:5d:04:db:88:e4:b5:d9:ab:22:15:5f:71:f0:49:b0:b4:83:
         9b:fa:39:e0:de:3a:de:d1:e4:02:c7:10:85:aa:0f:50:4e:27:
         b9:14:03:5e:71:6b:96:02:f1:bb:b9:52:26:e4:9f:94:58:00:
         20:3c:1c:dc:51:93:98:e2:66:3d:46:2f:12:79:a3:97:01:19:
         3c:d8:f4:c2:ce:b5:41:30:a2:04:65:06:d2:58:69:4f:66:4c:
         f0:e3:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org