Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
File:                     3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa (raw, json)
Hash identifier:          n82sBvkw5ZlZRrkhkXx9pkRSKmxIAeHmMSw3bI3dSQs=
Subject key identifier:   90:75:90:42:A4:26:1D:C2:49:5C:FD:A8:3A:62:DB:A6:C5:CB:5D:DD
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       29637FB863489B0AF93D7D9E13F76137F2684B3A
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:23:51 +0000
ROA not before:           Thu 08 Feb 2024 20:18:51 +0000
ROA not after:            Thu 06 Feb 2025 20:23:51 +0000
asID:                     265078
IP address blocks:        170.233.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:63:7f:b8:63:48:9b:0a:f9:3d:7d:9e:13:f7:61:37:f2:68:4b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:18:51 2024 GMT
            Not After : Feb  6 20:23:51 2025 GMT
        Subject: CN=90759042A4261DC2495CFDA83A62DBA6C5CB5DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:65:4f:76:ab:10:70:49:b9:e8:70:9d:f4:
                    b5:a0:4c:0b:a4:75:57:57:37:bf:5f:5c:ec:3f:73:
                    e2:a9:95:2d:f9:a9:b0:f3:86:70:c2:0c:22:9e:e6:
                    de:74:20:31:6a:c0:aa:58:6b:c7:03:8a:c2:af:2d:
                    b5:4a:84:58:b6:9c:95:e9:0a:18:02:e1:4f:f6:9d:
                    a8:eb:bf:6c:ef:17:90:1a:1d:04:b7:b8:0b:6e:62:
                    2e:37:01:27:f3:f2:4d:19:80:c7:74:b3:43:05:1f:
                    a5:f1:ff:9e:42:9d:a8:88:93:f3:70:15:a4:34:8b:
                    f8:2a:3a:e5:15:16:29:64:ce:96:35:e5:ef:52:ba:
                    86:10:12:97:0f:96:7d:cf:c5:b3:ed:92:c2:7d:47:
                    83:82:aa:af:09:44:31:68:7b:22:63:14:9a:d2:d8:
                    96:d4:a3:f1:db:31:70:9f:10:5e:26:84:fb:cc:83:
                    24:46:2f:34:c8:48:65:26:ff:d8:7a:70:21:42:d1:
                    d7:f1:89:24:84:29:55:83:52:61:73:92:0c:f9:c8:
                    c4:5e:b7:e3:aa:a7:17:0e:26:47:d7:c4:2a:c8:d6:
                    63:4a:25:b1:d9:70:10:bb:4b:b2:03:f5:72:41:bd:
                    1e:b6:e6:f1:48:78:26:b2:0d:84:fa:b7:22:01:35:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:90:42:A4:26:1D:C2:49:5C:FD:A8:3A:62:DB:A6:C5:CB:5D:DD
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:8e:b2:a8:e3:6a:5b:01:0e:76:61:2f:e3:80:ef:5e:d7:
         fe:bd:db:ac:c7:68:8d:a8:e0:42:62:38:bd:b2:5a:9e:e1:84:
         fd:7d:56:de:81:9b:e1:66:08:fe:e1:36:50:1a:81:0a:24:81:
         e9:27:45:d3:c4:e3:bd:29:da:c5:7e:87:08:18:25:8a:2c:18:
         5e:39:b7:90:a9:b5:0b:1d:41:0b:8c:e7:7b:4c:0a:41:e9:0e:
         1f:bf:4e:6d:5b:38:cf:20:11:72:7d:93:50:0c:96:46:d6:a5:
         4e:6c:5c:5e:66:28:63:3d:78:7e:63:8d:7e:24:10:ce:fb:81:
         f7:b2:78:1f:a1:56:ba:73:b4:62:33:08:d1:93:91:95:7b:0c:
         b4:e3:49:0c:03:55:ed:46:cc:8b:41:4c:a8:06:da:91:7a:27:
         a3:6f:52:45:35:7a:41:6f:29:64:3d:45:4c:aa:9b:0c:8c:94:
         9b:23:33:fb:72:b2:4d:b1:32:82:cf:f5:2e:cf:e2:7e:58:35:
         78:98:96:d0:f1:7e:c9:bc:7a:7c:f6:1f:ef:77:0d:72:bb:4f:
         62:bf:be:a6:2a:82:59:a8:8c:71:19:a3:94:a8:8e:93:34:ab:
         c1:5a:47:49:fd:cc:3c:53:85:49:0e:dc:11:9b:aa:d6:fc:71:
         72:e3:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org