Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa
File:                     3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (raw, json)
Hash identifier:          Jruxkc0382yeGMsHbd8aquS1CnuFmWrePGEvE29OlCg=
Subject key identifier:   10:1B:7D:CE:CF:EC:B8:AC:CE:FF:A1:B6:F3:27:2A:F8:28:AB:BD:CD
Certificate issuer:       /CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
Certificate serial:       575459C4BAA07187438B105530E7EB9E041AEA4D
Authority key identifier: 43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa
Signing time:             Sat 03 Feb 2024 20:56:35 +0000
ROA not before:           Sat 03 Feb 2024 20:51:35 +0000
ROA not after:            Sat 01 Feb 2025 20:56:35 +0000
asID:                     266400
IP address blocks:        170.81.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:54:59:c4:ba:a0:71:87:43:8b:10:55:30:e7:eb:9e:04:1a:ea:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
        Validity
            Not Before: Feb  3 20:51:35 2024 GMT
            Not After : Feb  1 20:56:35 2025 GMT
        Subject: CN=101B7DCECFECB8ACCEFFA1B6F3272AF828ABBDCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:96:9d:0c:18:4c:e1:ad:08:bd:0c:57:9a:
                    b8:0a:8b:c9:08:5e:72:5c:98:9a:d3:25:38:90:e9:
                    2e:19:3e:97:9f:8d:5a:af:cb:7d:57:44:fd:9e:a1:
                    ab:26:93:9d:f2:71:71:a1:9c:d4:67:ac:94:84:19:
                    70:85:6e:b1:c5:81:ea:5d:d1:76:13:c6:47:7a:11:
                    4e:84:33:5c:93:d0:d5:05:8f:b1:0f:01:5b:4e:7b:
                    68:30:58:a6:51:2f:a6:9e:4b:d2:e8:e4:28:fb:2e:
                    1b:0a:ef:cf:55:e2:28:ab:36:4e:b0:67:f1:fe:70:
                    b1:57:f6:36:30:8a:c5:16:dc:67:95:ae:37:6c:be:
                    77:7e:99:26:e9:88:d8:41:94:75:ae:8b:91:b5:4b:
                    e8:78:70:a0:ca:8f:71:1b:16:6f:f4:d6:4c:44:12:
                    86:68:54:b3:7b:dd:fb:81:5f:8c:4d:a7:fb:3b:2b:
                    41:4e:3f:82:01:48:71:ec:96:e0:19:61:b1:48:91:
                    94:92:28:33:75:87:6b:91:6f:b3:ae:ce:f7:f7:73:
                    4d:58:55:b3:ff:c6:64:ba:17:11:31:ef:70:da:e9:
                    de:14:61:4e:5e:ed:a1:bb:60:4b:8f:78:a8:0d:ee:
                    cd:8a:6d:9a:a5:6d:08:29:cc:3d:15:27:ef:af:9a:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1B:7D:CE:CF:EC:B8:AC:CE:FF:A1:B6:F3:27:2A:F8:28:AB:BD:CD
            X509v3 Authority Key Identifier:
                keyid:43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:7b:40:f9:24:7c:31:26:a5:2e:63:43:35:f3:1e:47:ae:
         28:81:8a:97:50:c8:bf:4e:c0:54:6b:c1:7c:d8:92:1f:91:17:
         19:1b:db:7b:96:08:ef:be:68:24:7d:69:07:4c:a2:57:f9:b4:
         79:9f:d8:b9:ca:b3:95:45:bd:8c:68:04:af:e2:69:6e:9b:da:
         29:77:2c:5f:59:00:c6:39:2b:1d:84:da:80:9b:6d:e6:cc:68:
         3a:f6:6d:a8:6a:e1:08:8f:fc:d3:da:37:b0:ef:ee:d7:b3:54:
         c7:29:a1:15:cf:34:01:30:72:c1:4d:92:28:98:fd:18:af:e0:
         9f:b3:d1:06:b7:73:19:b8:46:50:e1:20:88:3c:e6:4a:9d:20:
         04:44:20:34:64:46:db:dc:43:68:0a:8c:b5:f4:c9:f5:13:fd:
         68:82:93:a8:72:c0:f2:23:31:c8:87:38:4f:f8:13:64:63:a1:
         a3:4c:f5:d4:ca:5a:a7:ea:a0:e6:05:f6:ef:2d:1f:fc:75:29:
         8c:07:7e:8a:5f:fe:d0:6c:f2:8b:01:49:c8:72:62:5f:98:8b:
         f7:e0:5e:c7:a1:12:98:ff:d9:50:76:0f:76:de:a5:38:9a:9e:
         e2:06:e1:8e:0f:18:ce:7b:d2:db:bd:17:e8:00:30:d9:be:d9:
         0b:33:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org