Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3332203d3e20323634323333.roa
File:                     3137302e38302e3130302e302f32322d3332203d3e20323634323333.roa (raw, json)
Hash identifier:          WfVyPtrLTrODk+TxP404bG5ze9hH6lVJkD0iqWSXvg8=
Subject key identifier:   88:A3:C7:ED:86:C7:BF:CA:60:CF:B8:14:4C:91:4F:AD:E0:D4:A8:B2
Certificate issuer:       /CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
Certificate serial:       621A1B562A4C36D9E62D710A7DB063B0F394E200
Authority key identifier: 5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3332203d3e20323634323333.roa
Signing time:             Wed 14 Jun 2023 17:22:06 +0000
ROA not before:           Wed 14 Jun 2023 17:17:06 +0000
ROA not after:            Wed 12 Jun 2024 17:22:06 +0000
asID:                     264233
IP address blocks:        170.80.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1a:1b:56:2a:4c:36:d9:e6:2d:71:0a:7d:b0:63:b0:f3:94:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
        Validity
            Not Before: Jun 14 17:17:06 2023 GMT
            Not After : Jun 12 17:22:06 2024 GMT
        Subject: CN=88A3C7ED86C7BFCA60CFB8144C914FADE0D4A8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:b0:a9:80:2b:c5:9d:02:09:03:5c:c9:14:
                    75:65:79:a9:77:7e:89:89:77:f3:b0:fc:87:99:fc:
                    4c:2b:3a:9f:84:62:20:3a:7c:42:1e:ef:ca:c3:84:
                    7d:39:17:c5:ba:ff:1d:31:d4:7b:1b:86:0c:77:9c:
                    c2:cd:0a:cb:66:65:83:95:ec:aa:6f:1f:91:49:18:
                    53:b1:c2:c7:8d:c4:0a:01:4f:8c:da:d3:86:39:01:
                    3a:df:e6:5e:a5:8b:c7:ae:82:da:04:30:d9:05:ba:
                    d3:94:f0:47:f8:ea:bd:0d:3f:c7:ed:fd:ab:d5:c2:
                    fd:f1:c7:fd:98:c1:83:f2:a8:49:a1:94:7a:76:74:
                    b3:37:d4:43:51:60:7f:7e:d2:24:e1:39:9f:be:f7:
                    37:75:1c:aa:2b:c6:3d:d5:8f:15:c6:20:4d:34:e6:
                    d0:9d:91:92:d2:3b:c8:96:69:79:be:8c:55:94:94:
                    64:0f:32:2f:aa:7c:22:5f:1f:7c:fc:66:96:98:2d:
                    18:38:19:ed:f6:3a:5d:42:26:b9:56:3f:c9:b7:6d:
                    62:61:79:15:ee:01:e1:00:74:4a:df:6b:34:0d:f3:
                    19:0f:c7:e6:5b:27:69:03:f6:50:0f:b4:01:83:c2:
                    5e:42:bb:f4:7e:b4:58:6a:10:46:39:3d:25:a9:94:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:C7:ED:86:C7:BF:CA:60:CF:B8:14:4C:91:4F:AD:E0:D4:A8:B2
            X509v3 Authority Key Identifier:
                keyid:5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3332203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:a8:fe:55:08:bd:ba:d4:ac:d7:ce:81:31:30:e1:c5:70:
         b8:f0:ce:d6:8b:4d:fb:fc:76:6a:9f:ac:a8:a3:a2:ce:dc:f7:
         b2:ed:93:0d:09:70:08:e6:54:25:86:86:8c:23:43:55:43:af:
         3e:13:e1:e9:69:97:ba:21:13:1e:b0:2f:9d:01:63:8f:ed:a1:
         6a:13:93:54:f6:63:45:2b:17:d7:88:5b:9a:a0:81:d8:1c:08:
         a1:9f:86:61:73:2b:ef:bf:9a:d0:6c:1f:a4:28:34:02:1a:9a:
         8a:5f:5c:bd:a5:b4:51:67:78:f4:40:46:d4:19:00:e0:eb:32:
         a3:90:4a:3c:67:69:9f:9c:a6:b1:95:d4:83:79:35:e2:1e:1c:
         aa:23:8f:71:f6:89:4f:4d:e5:73:44:f3:56:87:e0:7e:86:a5:
         a3:31:ce:53:2c:fb:b4:29:74:a4:88:56:9b:a5:9e:b9:1a:8f:
         1e:bc:9e:a3:a9:b1:19:f5:c1:35:dd:a0:f4:ca:18:eb:d4:b3:
         0a:b3:66:4f:18:70:d6:ff:e9:62:6d:9d:d8:b5:51:3b:ff:33:
         a1:81:41:36:f2:a2:81:80:d0:5a:69:c7:01:5a:78:2f:f3:3b:
         c8:c6:f6:21:c5:71:c4:29:65:bb:c4:09:ae:91:64:6e:ab:37:
         da:a4:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org