Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa
File:                     3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          5bGqhDoo8b1S7M7bDFDyNtA2ls8aQg8idVG357DrGug=
Subject key identifier:   AB:B4:F5:2C:32:6C:E9:53:B1:6A:68:62:88:6F:69:9E:3B:C6:FC:63
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       388552853D1CE366265EC7CF6EC83B83D87527CF
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa
Signing time:             Tue 05 Mar 2024 19:03:49 +0000
ROA not before:           Tue 05 Mar 2024 18:58:49 +0000
ROA not after:            Tue 04 Mar 2025 19:03:49 +0000
asID:                     262595
IP address blocks:        170.83.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:85:52:85:3d:1c:e3:66:26:5e:c7:cf:6e:c8:3b:83:d8:75:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Mar  5 18:58:49 2024 GMT
            Not After : Mar  4 19:03:49 2025 GMT
        Subject: CN=ABB4F52C326CE953B16A6862886F699E3BC6FC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:31:45:6f:2d:50:d8:47:35:92:43:80:9c:
                    b6:c9:11:7b:c2:52:f7:e8:76:c0:c5:ae:7b:a3:5e:
                    f6:ed:26:4f:88:0f:58:9c:48:d4:47:a8:54:bb:45:
                    ed:34:9f:b2:f4:e9:84:57:1d:26:c4:69:70:8e:3b:
                    c9:49:93:b8:c4:c7:b9:1c:1b:0e:63:4b:5b:52:0c:
                    e9:16:87:51:1b:47:8d:0c:ca:84:94:61:ca:f5:ef:
                    c8:5f:c4:fc:73:a7:7e:e8:5e:74:6e:80:e8:05:a8:
                    ef:d3:dc:df:6e:21:45:db:00:f1:3b:db:c1:24:a2:
                    8a:bc:fb:02:e2:79:33:60:3c:7e:5d:20:5a:ab:9b:
                    da:8a:12:24:a0:4a:cc:77:dc:f4:26:2e:c3:64:96:
                    f2:57:ee:a6:22:de:75:bd:77:9e:89:41:76:2a:2c:
                    6b:aa:00:5a:6b:6c:84:77:bc:3c:19:f9:04:eb:9d:
                    09:51:a9:0c:ea:85:b8:d7:73:ae:37:2b:e0:d5:46:
                    3d:62:e1:e0:4b:5d:88:82:34:61:9a:e4:22:b5:4d:
                    51:e3:aa:fe:69:59:a5:bf:7b:26:cd:fc:4e:c8:cd:
                    de:2e:a7:6a:91:80:49:d2:1e:ec:a7:95:dc:9f:80:
                    8a:f0:5b:be:89:d9:33:6e:22:81:ec:a6:0d:95:ef:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:F5:2C:32:6C:E9:53:B1:6A:68:62:88:6F:69:9E:3B:C6:FC:63
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:81:c7:81:05:a9:95:02:39:b4:3f:90:9f:26:f6:fd:15:
         68:ab:c2:ea:98:7a:e1:ae:65:ae:96:36:23:78:b5:68:1b:21:
         a5:ad:25:cc:55:ad:2b:22:84:ff:52:75:53:9f:6e:0b:78:1e:
         91:a6:6c:32:5b:34:40:26:ab:94:b9:2d:27:9b:8c:de:ee:35:
         c0:24:2d:28:00:dc:0b:3f:51:7f:9c:d8:c9:42:11:83:3e:23:
         45:b7:f6:c8:32:cd:35:46:22:c2:f2:e5:a3:42:4b:fb:27:78:
         c9:cf:86:6c:b8:e1:90:3e:42:7e:13:2a:88:a5:a9:a3:a2:06:
         c9:36:7b:67:f8:39:e9:5e:d4:bb:86:64:1f:5d:11:6c:62:3a:
         de:c3:55:fb:51:40:6c:5a:03:b9:dd:ac:ba:dd:de:91:e3:a7:
         15:f2:bc:cd:68:cd:1e:90:f6:25:44:46:04:6d:29:21:84:7c:
         7f:7a:aa:c2:7a:f4:ed:03:9e:5f:01:a3:89:e3:4a:d2:74:30:
         9a:91:4d:a9:b0:57:08:69:2f:81:fa:44:48:24:70:64:c4:f0:
         0b:e2:9d:c0:26:67:f2:a2:dc:44:f3:98:ec:43:83:36:65:aa:
         af:a3:74:cf:f1:40:db:d6:3e:45:0c:44:d0:c9:7b:6c:c1:44:
         2d:10:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org