Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa
File:                     3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa (raw, json)
Hash identifier:          cgV3Y6ynYtU3jrZCOB99j16hQXDdyQiCscVJzZXofVo=
Subject key identifier:   DD:0F:3A:F1:20:B2:E8:0C:C6:D6:42:C2:0C:51:0B:D9:3B:02:79:47
Certificate issuer:       /CN=1CAB310013886E30E4BDF71E98FF8E2A2B06C01F
Certificate serial:       4E46792C978931E14B61A96D68845E4C25D2BACB
Authority key identifier: 1C:AB:31:00:13:88:6E:30:E4:BD:F7:1E:98:FF:8E:2A:2B:06:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa
Signing time:             Fri 30 Jun 2023 01:09:36 +0000
ROA not before:           Fri 30 Jun 2023 01:04:36 +0000
ROA not after:            Fri 28 Jun 2024 01:09:36 +0000
asID:                     264397
IP address blocks:        170.239.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:46:79:2c:97:89:31:e1:4b:61:a9:6d:68:84:5e:4c:25:d2:ba:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CAB310013886E30E4BDF71E98FF8E2A2B06C01F
        Validity
            Not Before: Jun 30 01:04:36 2023 GMT
            Not After : Jun 28 01:09:36 2024 GMT
        Subject: CN=DD0F3AF120B2E80CC6D642C20C510BD93B027947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:f7:3b:6d:dc:9b:8c:24:30:8a:3f:ca:af:
                    2d:86:e4:b0:dc:79:ff:d6:81:fc:93:de:42:fc:6a:
                    e0:6c:21:a8:5d:3d:0e:97:db:ff:e5:f6:66:18:3a:
                    ea:90:90:39:e5:b7:99:cc:3b:12:76:6b:2b:b7:75:
                    86:74:65:f2:80:2a:11:8c:ca:b9:f2:c3:c8:9e:28:
                    e7:40:c6:bb:c6:b8:26:a8:86:46:66:73:ae:ce:f3:
                    43:63:f1:ef:fd:b3:d3:b1:66:9b:55:2d:7e:01:a3:
                    5a:db:b5:d3:c8:03:8f:5d:8f:d6:2a:8b:95:ae:ea:
                    8b:f7:98:40:5e:8c:2a:08:72:6e:d7:46:aa:b1:31:
                    68:71:ee:9e:4b:ab:d8:40:48:73:e8:97:3b:8b:4c:
                    b8:a8:4e:6c:69:ce:8d:ff:e3:c9:69:fd:92:89:23:
                    1e:54:41:bf:f0:f7:c4:e2:fa:56:d5:51:6c:dd:d2:
                    57:7f:d7:60:e6:2d:12:06:1f:fe:66:6a:0d:63:e4:
                    03:08:fd:62:9a:17:e0:46:d0:6d:c9:89:2b:09:08:
                    06:89:ff:69:f6:97:be:b9:0d:32:8b:66:f2:f5:3d:
                    b1:37:fa:79:9c:e3:15:18:da:2f:6c:76:bc:41:74:
                    a4:d7:2f:8a:4e:cf:88:7d:6b:de:1c:c2:f5:f2:d1:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0F:3A:F1:20:B2:E8:0C:C6:D6:42:C2:0C:51:0B:D9:3B:02:79:47
            X509v3 Authority Key Identifier:
                keyid:1C:AB:31:00:13:88:6E:30:E4:BD:F7:1E:98:FF:8E:2A:2B:06:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CAB310013886E30E4BDF71E98FF8E2A2B06C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/1/3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:1a:2f:d0:a7:0c:74:2f:60:f3:54:9f:6a:7a:72:5f:35:d4:
         0e:a4:9b:38:f8:1b:a9:c4:bf:2b:18:74:b7:4d:7a:d5:61:f7:
         b9:b1:1d:30:d4:b0:00:5a:39:60:a7:5e:4b:be:47:ef:66:0f:
         ea:e1:01:e3:93:10:ca:12:66:ae:12:0b:7d:18:49:33:ee:53:
         40:b4:91:cf:f1:24:1f:55:ff:44:07:bb:36:22:67:28:b3:be:
         25:ec:4d:2a:17:64:9d:78:79:90:38:fe:79:d4:1f:9b:83:e4:
         40:7f:92:61:b1:56:17:cf:d6:7f:c2:71:3f:2e:94:57:92:12:
         5e:77:22:e7:da:96:27:de:68:13:c1:6b:8a:2a:09:bb:98:c0:
         e3:36:e4:08:36:33:21:9e:d6:8c:2b:bf:57:4c:2f:26:f0:7f:
         bd:fc:44:3a:39:a7:32:3e:4d:f0:58:e5:17:67:7d:d4:7e:2b:
         c0:09:f6:dd:97:ac:a4:14:09:4d:d5:39:78:e0:b6:5b:f0:3e:
         28:fd:b9:44:9c:76:2c:6a:3d:04:ae:75:3a:18:f8:60:a6:0c:
         d1:ff:5f:c3:92:20:77:72:73:dd:bc:28:6e:85:03:53:13:11:
         6f:f5:98:0f:88:3c:42:41:85:d0:5e:42:04:c2:5a:9f:bc:16:
         bc:b8:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org