Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234362e3232382e302f32322d3332203d3e203631353838.roa
File:                     3137302e3234362e3232382e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          o+sqFwBFwya1mbAnlr0/tbW+hyn1wG3iMUsr9dNwtCU=
Subject key identifier:   DA:80:08:EE:B7:64:3A:18:62:C1:F5:D1:F0:0F:29:BA:92:5C:D5:FB
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       1B7DEB085AB3130D1A49DE3AF989975EB3F2635A
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234362e3232382e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:03:04 +0000
ROA not before:           Wed 27 Sep 2023 19:58:04 +0000
ROA not after:            Wed 25 Sep 2024 20:03:04 +0000
asID:                     61588
IP address blocks:        170.246.228.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7d:eb:08:5a:b3:13:0d:1a:49:de:3a:f9:89:97:5e:b3:f2:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:58:04 2023 GMT
            Not After : Sep 25 20:03:04 2024 GMT
        Subject: CN=DA8008EEB7643A1862C1F5D1F00F29BA925CD5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:32:7c:56:cb:55:0f:19:53:f4:92:93:6d:
                    7b:a7:f8:d6:da:cd:64:f7:b7:81:69:49:b8:94:95:
                    85:2f:55:dc:c5:85:f6:b8:c7:a7:1c:df:02:01:d8:
                    13:7b:36:0e:8d:81:d7:60:bf:a3:fc:a5:da:5a:10:
                    5f:05:e4:ff:30:7c:c5:2f:01:4e:10:89:32:99:fb:
                    ec:77:40:a7:54:2f:90:cf:be:69:10:a2:6c:a7:85:
                    c8:c3:98:9d:2b:2d:d5:af:ea:8d:54:ef:30:dc:75:
                    f7:f9:b8:45:14:a4:29:c6:cf:9a:23:c9:c8:ce:40:
                    f8:4f:97:a3:0d:e8:55:17:55:af:be:c8:3b:0a:41:
                    a9:6a:86:fd:9d:2a:8d:f2:16:c0:2d:5f:ac:96:f4:
                    05:f5:ed:28:c5:2c:e8:0d:65:8d:c0:2c:43:d9:ed:
                    46:0f:ce:d1:62:31:4c:5c:a3:f3:ae:7d:bb:22:44:
                    ba:0a:b3:d8:59:0b:f9:02:6b:1c:9e:ff:7d:ec:54:
                    ca:0a:5c:f8:35:53:e3:8d:8e:d3:e2:91:eb:97:ac:
                    53:47:9a:dd:0f:f1:24:af:75:98:30:7f:52:c0:4e:
                    b5:9f:08:b1:8f:83:93:44:1c:da:04:25:76:12:67:
                    54:34:c2:a4:b6:2b:d6:ae:66:91:b6:69:e5:65:e6:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:80:08:EE:B7:64:3A:18:62:C1:F5:D1:F0:0F:29:BA:92:5C:D5:FB
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234362e3232382e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:a7:7f:b6:d6:99:84:cd:2c:8c:0d:96:ae:9b:f3:3d:67:
         28:69:ee:10:90:d9:55:a3:70:6d:db:c1:29:5f:50:e3:f5:7c:
         37:1e:4d:49:e7:b1:db:aa:c9:ca:c5:a8:9b:a8:f4:6f:ac:95:
         07:c7:5c:c0:b3:e3:19:39:ed:93:62:66:51:03:45:01:24:7a:
         88:3c:f6:3b:78:59:de:7c:fe:40:80:03:38:02:43:ed:c5:2c:
         44:79:83:28:33:3b:eb:51:62:07:64:67:0b:3c:15:69:b8:6f:
         c4:bc:db:32:a4:1e:6d:ef:5b:62:b7:9b:ae:81:ba:96:4b:95:
         77:12:ff:6f:54:c5:3e:44:c4:5c:f5:24:04:30:e7:2a:2b:4c:
         f6:ac:28:71:05:9c:a4:06:f2:3d:a8:1f:47:99:02:e3:85:fc:
         bb:c5:51:9b:e1:0f:a6:10:3f:7b:93:18:10:27:2e:bb:08:40:
         ae:ed:06:26:37:a5:ed:4b:b4:0a:6f:a0:12:11:7f:95:52:fe:
         af:29:9f:db:e7:46:ca:69:73:b0:0c:b5:81:32:44:94:6b:e6:
         25:d2:7f:17:8e:c8:65:b1:7c:45:5e:59:a9:bc:ce:95:6c:9f:
         99:29:f7:ed:a6:5d:8e:5d:d1:41:d1:2e:c7:e3:93:80:90:ac:
         7c:f1:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org