Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3332203d3e203631353838.roa
File:                     3137302e3233332e3232342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          K6g30fC5Qf15vttA1TgYH7SYNEH3SHXroA4jHIDJ4HQ=
Subject key identifier:   3D:DE:03:16:77:10:E4:9A:FC:E1:20:45:25:44:79:18:91:2B:C2:BA
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       199DE3CD50E1BEBBA032FBAA4F9F0CB36B9F6BBE
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:01:00 +0000
ROA not before:           Wed 27 Sep 2023 19:56:00 +0000
ROA not after:            Wed 25 Sep 2024 20:01:00 +0000
asID:                     61588
IP address blocks:        170.233.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:e3:cd:50:e1:be:bb:a0:32:fb:aa:4f:9f:0c:b3:6b:9f:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:56:00 2023 GMT
            Not After : Sep 25 20:01:00 2024 GMT
        Subject: CN=3DDE03167710E49AFCE1204525447918912BC2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:0e:67:ed:5f:db:6f:49:11:b3:cb:49:bc:
                    33:89:5c:16:5d:59:fe:10:d5:59:5e:e2:b2:af:fb:
                    83:7f:f6:5a:e5:05:f3:17:5b:83:46:3b:27:a3:43:
                    8a:34:18:68:5e:ea:bf:f8:06:6f:a7:37:d1:04:cd:
                    bf:c7:47:34:a5:65:0e:6d:72:d6:b7:31:d0:5d:90:
                    a0:4c:15:5d:d6:3b:e1:b7:72:0a:99:49:09:5e:5d:
                    70:71:f4:9f:cb:a3:f0:6f:29:80:76:7f:ff:9c:ae:
                    50:75:3e:7b:b2:2e:5d:ce:93:1b:c7:77:76:4e:1c:
                    32:3d:f4:42:dc:e8:97:26:17:55:58:fd:51:ff:ec:
                    97:44:34:5e:c5:fd:2b:87:ca:a9:67:59:05:65:11:
                    3a:ca:ac:1b:28:65:a6:69:79:6c:94:65:5c:35:b5:
                    8c:fe:4c:93:00:92:77:c9:4a:d8:6d:b4:be:99:55:
                    bd:d1:3d:d1:87:11:e5:4c:37:45:75:6b:bc:dc:45:
                    ae:c1:c5:a0:81:9b:fc:2b:2c:c3:09:9e:02:13:71:
                    b0:fa:3b:1c:5f:99:0a:45:5f:a5:c7:4d:d6:0b:e2:
                    0a:fc:d9:c2:74:e8:a7:cb:38:4f:f6:a1:69:93:6a:
                    0c:be:f0:a1:ab:bd:02:b6:1f:71:dd:c5:67:ba:cd:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:03:16:77:10:E4:9A:FC:E1:20:45:25:44:79:18:91:2B:C2:BA
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3233332e3232342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:ec:c4:f7:0f:ac:ff:7d:61:90:01:60:4e:20:a7:e3:3a:51:
         35:d4:04:69:69:d6:73:32:de:cc:2b:1b:24:e5:5a:e9:d2:f8:
         ef:50:21:7a:95:59:52:2b:a7:57:8c:34:71:49:08:c9:aa:0b:
         06:e9:f9:2b:d0:f8:7f:e4:93:3f:ea:bb:17:9d:c5:1d:fb:56:
         de:54:c2:30:ce:56:c8:e2:0b:f5:d5:c3:b5:db:e0:79:a4:89:
         03:41:6b:31:36:8f:c0:60:c5:62:d9:d3:a2:5f:72:bb:34:d5:
         30:63:14:85:c8:cf:cc:95:b4:4f:22:2e:cf:ec:d7:82:6c:af:
         a7:b9:bf:ad:cc:46:cc:38:e8:7b:c0:de:05:02:ac:06:74:cf:
         0f:9c:51:ae:d1:1a:f6:6e:78:99:98:67:99:18:49:e2:c5:76:
         af:d2:29:73:a8:93:fd:e2:73:b3:7b:d1:08:4c:aa:04:17:78:
         a3:cf:06:33:ff:55:af:0e:aa:b7:7f:2f:55:37:18:e1:10:e8:
         57:f4:9b:10:f4:e4:9c:37:e6:5c:4a:62:9d:80:5d:5d:f7:78:
         60:e6:c1:e4:2e:4e:24:10:b6:10:82:df:7a:40:63:db:06:00:
         19:f7:7f:b8:15:24:1d:1f:57:8d:0c:61:44:b5:7b:05:ba:e7:
         9d:9e:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org