Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38332e39362e302f32322d3332203d3e203631353838.roa
File:                     3137302e38332e39362e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          yFnRMAG6JZ0V6nuUG8L/cBAZ8JT8dZmBsfECbO+niWo=
Subject key identifier:   40:17:DC:15:51:04:32:7C:07:70:B7:9D:AD:7C:4A:F9:B5:33:39:1A
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       06771C6DCBB0A67193AF259DE18407547603B567
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38332e39362e302f32322d3332203d3e203631353838.roa
Signing time:             Tue 31 Oct 2023 10:13:40 +0000
ROA not before:           Tue 31 Oct 2023 10:08:40 +0000
ROA not after:            Tue 29 Oct 2024 10:13:40 +0000
asID:                     61588
IP address blocks:        170.83.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:77:1c:6d:cb:b0:a6:71:93:af:25:9d:e1:84:07:54:76:03:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Oct 31 10:08:40 2023 GMT
            Not After : Oct 29 10:13:40 2024 GMT
        Subject: CN=4017DC155104327C0770B79DAD7C4AF9B533391A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:1d:3a:9d:97:0a:76:7f:0d:b8:5a:9e:8e:
                    00:17:93:8a:94:bd:97:f2:6d:60:e9:ac:55:b4:c6:
                    55:39:08:ce:ed:2f:bd:cc:d7:83:30:58:c7:5e:bb:
                    84:63:9e:ca:f7:64:b8:9a:39:96:da:c2:04:e8:7e:
                    a3:91:b4:1d:fb:3c:bf:8a:8b:79:7a:6b:49:bf:11:
                    63:8c:79:33:8e:a7:0e:e2:a4:67:c1:80:12:b0:3c:
                    85:cf:0e:cd:44:d5:d7:80:54:b3:fe:e6:b9:73:b1:
                    31:ad:74:2a:2c:62:93:e8:56:e2:64:0d:a8:16:52:
                    4e:92:3e:49:7c:95:58:47:70:35:56:1b:5e:9c:83:
                    c1:2b:c4:1c:fb:75:22:0c:65:6d:d8:28:b5:80:e7:
                    a1:66:ae:5a:69:67:fe:77:58:06:d4:60:b0:ef:7b:
                    07:7d:9b:0f:b3:a4:97:93:bd:04:2c:66:59:4f:61:
                    11:00:b6:1b:9a:ea:59:7c:9b:3d:31:fa:99:9b:9e:
                    5d:08:9d:ed:d1:65:78:10:89:27:aa:35:f0:15:d6:
                    4d:7d:a1:b1:ea:d4:5c:8e:de:02:cb:ca:c8:a7:b1:
                    fc:01:5e:96:27:24:d8:e4:8c:3e:a6:c9:d9:62:be:
                    fc:80:05:f9:ec:54:52:43:d2:3b:56:7e:d8:41:b3:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:DC:15:51:04:32:7C:07:70:B7:9D:AD:7C:4A:F9:B5:33:39:1A
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38332e39362e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:59:31:5b:c6:5f:76:82:f1:86:50:7a:69:1e:40:01:95:
         f5:0a:17:34:88:dc:ff:d1:f0:93:64:2a:23:e4:18:eb:87:93:
         82:2f:2a:01:69:bf:2a:3c:f4:31:ec:80:14:be:70:11:86:58:
         bd:0b:b4:9a:d7:3b:e6:76:73:d4:d0:91:24:0f:b0:4c:9a:18:
         3e:60:90:ca:fb:3a:76:71:3c:e3:50:21:53:c6:ec:58:50:d0:
         89:ca:ed:2d:9d:63:0f:ea:5f:1c:21:5a:e5:4b:3c:02:5f:da:
         72:c2:12:ff:93:d5:4d:dd:4c:23:0c:ff:e0:86:55:14:cb:59:
         1b:4b:f5:7b:3c:c3:ae:fe:23:1f:d8:cb:2a:98:61:6c:16:a0:
         57:37:a2:21:1e:46:8c:38:16:c9:f7:b3:19:36:74:8c:51:5c:
         74:be:10:17:88:90:41:52:eb:e2:eb:ad:96:bf:34:eb:7a:9c:
         e9:a7:a6:f0:26:e8:0e:49:a8:a7:25:fc:59:69:74:37:55:31:
         fe:f1:9e:3d:1a:6b:8e:c2:44:ca:9d:15:cd:2a:5f:83:77:0e:
         91:50:38:0c:65:50:58:89:80:f5:62:16:90:92:e6:3b:fc:80:
         bb:06:bb:29:65:b8:a3:9a:dc:79:ac:0a:5e:23:98:61:06:50:
         81:ba:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org