Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa
File:                     3137302e37392e33322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          trfrS9jqUUmKFNN6kZyQGORm69ddoq7RdciS38IVYyY=
Subject key identifier:   9F:B8:46:27:5F:B3:2B:0C:AA:E9:34:11:35:D6:97:5F:09:5D:25:B5
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       569B63C9E8DA4DAE0DFFD4448A623EB15F6227E2
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 21:01:47 +0000
ROA not before:           Wed 12 Jul 2023 20:56:47 +0000
ROA not after:            Wed 10 Jul 2024 21:01:47 +0000
asID:                     263880
IP address blocks:        170.79.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:63:c9:e8:da:4d:ae:0d:ff:d4:44:8a:62:3e:b1:5f:62:27:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:56:47 2023 GMT
            Not After : Jul 10 21:01:47 2024 GMT
        Subject: CN=9FB846275FB32B0CAAE9341135D6975F095D25B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:71:0a:6d:d4:86:39:05:12:a8:7f:19:d8:
                    c0:3f:8e:ef:60:cd:77:c5:a1:7e:23:58:ce:db:96:
                    85:d9:da:77:e4:57:2d:1b:36:d7:36:31:f9:45:21:
                    23:94:3a:c3:1c:1f:1f:1d:c2:53:fd:be:55:7b:b5:
                    c4:ee:46:10:68:1a:87:98:4a:ff:5a:bc:0b:c2:d9:
                    f9:76:8d:7b:08:cc:06:1e:07:93:ac:35:5a:f3:17:
                    0b:af:09:c5:98:91:d9:49:22:ca:45:93:fe:85:d8:
                    e2:91:f3:0f:9d:fd:e5:54:f7:ee:46:cb:fc:bf:48:
                    d2:fb:37:96:9c:31:b9:48:7d:c9:bb:d9:d2:39:fa:
                    59:46:c1:af:ba:f7:d3:35:dc:55:48:9c:6e:f4:6b:
                    ac:bb:ba:12:64:fe:ae:0a:fb:98:3b:42:ee:49:9d:
                    48:03:d3:8e:10:30:4a:a2:d5:f5:35:9e:2d:31:af:
                    18:04:64:d7:73:5e:84:35:ab:dc:73:c0:5b:df:68:
                    21:b8:7c:cc:af:5a:3e:6b:6b:8e:97:ba:57:ec:ea:
                    42:aa:4a:2a:7c:ce:88:e2:c9:75:01:ec:1f:3e:a3:
                    d8:59:23:ab:af:79:cc:18:37:67:91:63:1b:5d:cf:
                    46:f9:f4:09:d6:8f:55:3a:50:66:fb:eb:9c:4d:96:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:46:27:5F:B3:2B:0C:AA:E9:34:11:35:D6:97:5F:09:5D:25:B5
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:69:3b:1d:eb:dc:d0:36:be:5d:db:fa:9f:50:25:0a:74:
         bc:ab:47:6c:e8:37:de:1c:44:f1:4b:98:4c:03:1a:78:ba:fe:
         f7:99:39:22:6a:e2:52:be:5a:db:e3:f9:8a:5b:b4:f9:bf:bc:
         2b:5d:e7:9a:69:db:15:9f:2a:b2:f1:66:e9:55:62:73:33:59:
         2b:e2:bb:1a:bf:f1:98:72:73:48:a0:f4:9c:55:42:d1:d1:fa:
         37:db:3f:4a:c0:94:43:9b:45:c8:3b:ec:2d:e9:93:72:fc:f4:
         08:f6:76:65:3b:4a:3e:ab:1b:fc:86:cc:d9:7c:19:e8:10:f8:
         ca:97:9d:64:d3:8f:98:5e:2b:fa:e0:1b:df:01:3d:cb:4d:d4:
         44:c3:f5:b9:b2:d3:a5:ed:4b:db:95:f9:d7:ef:c5:bc:db:b0:
         06:71:c9:b2:33:54:d5:67:d3:fa:01:85:53:84:d7:b2:6c:2c:
         c6:66:81:35:48:55:12:bb:a6:6e:1a:7a:0a:e5:21:4a:a2:83:
         3c:cc:f7:65:f4:a3:b4:af:01:e8:87:da:24:b0:d4:4d:31:62:
         76:75:0a:62:ed:e7:69:5a:5a:b6:a1:a0:cc:26:9f:ba:1a:f9:
         bd:3d:cb:5a:96:63:15:f0:40:40:6e:6d:7e:ec:86:3c:e5:e9:
         ab:8d:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org