Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32322d3232203d3e20323636333839.roa (raw, json)
Hash identifier:          5nOFneGq9EuTVZXHXQIf7Pvru7lG+vvjM6rGmRPX0BA=
Subject key identifier:   F7:2A:79:65:55:6E:D9:B1:DE:B0:01:7A:C0:EB:81:12:F9:38:9F:45
Certificate issuer:       /CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
Certificate serial:       38193C99926E71A3662D326F6BC10B15F25CEFC9
Authority key identifier: B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
Signing time:             Wed 29 Mar 2023 16:07:58 +0000
ROA not before:           Wed 29 Mar 2023 16:02:58 +0000
ROA not after:            Wed 27 Mar 2024 16:07:58 +0000
asID:                     266389
IP address blocks:        170.81.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:19:3c:99:92:6e:71:a3:66:2d:32:6f:6b:c1:0b:15:f2:5c:ef:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
        Validity
            Not Before: Mar 29 16:02:58 2023 GMT
            Not After : Mar 27 16:07:58 2024 GMT
        Subject: CN=F72A7965556ED9B1DEB0017AC0EB8112F9389F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:69:6d:f0:83:76:65:ef:e0:0e:75:e6:0b:
                    e8:d5:bf:10:58:c7:d3:f1:2a:82:bb:3f:f3:dd:67:
                    57:f8:df:7c:6f:ce:c9:bb:a7:27:15:8d:ae:86:9c:
                    85:1c:22:17:dd:89:1c:f8:64:e8:69:da:eb:fb:b8:
                    6e:d0:ed:b1:ee:23:63:28:f1:8f:75:dc:07:94:9c:
                    c1:73:dd:67:08:8e:c4:12:9e:28:6c:0c:22:6a:8c:
                    e7:eb:d0:d6:31:6e:86:4f:4f:7e:2d:b4:16:5a:33:
                    0b:5d:be:8c:a2:1a:73:14:a8:df:7f:7f:89:75:95:
                    44:4e:59:68:7e:20:70:2c:81:17:95:3b:41:be:25:
                    7f:05:0d:f3:4b:79:5d:62:99:ac:8c:87:3c:a1:03:
                    ff:a3:49:69:a1:28:ff:c3:bd:17:a0:30:40:02:dc:
                    dd:5f:01:b0:cf:d1:1c:a2:7c:ff:24:3a:01:91:95:
                    39:c0:a8:32:79:e8:6c:7a:a7:51:b2:f5:2b:4b:ef:
                    38:a5:e3:eb:bf:e2:80:88:58:39:f9:2e:36:ab:8e:
                    33:b1:77:f2:c5:c7:79:39:96:65:d2:1e:ba:7d:0f:
                    d5:74:e5:06:21:12:ce:15:ec:64:c9:69:42:82:6e:
                    36:44:90:f8:c6:68:9d:34:46:bf:9b:a9:43:60:7b:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:79:65:55:6E:D9:B1:DE:B0:01:7A:C0:EB:81:12:F9:38:9F:45
            X509v3 Authority Key Identifier:
                keyid:B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:25:4d:01:6e:cd:9a:6d:26:41:4e:ce:52:16:2b:29:16:39:
         81:c3:76:47:98:0b:2d:de:a0:b9:bd:14:e1:55:e7:df:6b:e3:
         c8:21:e2:9e:ae:3f:33:6a:70:fb:da:09:8a:9d:eb:48:e7:87:
         12:35:83:eb:0f:55:8b:ef:29:d5:5d:58:86:f6:d7:a3:a1:98:
         95:59:09:10:ab:91:d0:96:03:07:66:e2:0b:99:c4:8f:44:dd:
         bd:ef:45:01:bf:83:82:bf:15:19:c8:37:ec:5d:a2:aa:e5:15:
         d0:41:2a:d0:d2:36:ef:75:9f:d7:47:7a:c6:1a:3d:ba:bf:4a:
         d2:ed:4d:a2:e7:8a:e9:3a:42:58:69:fc:43:06:b2:72:ca:6c:
         34:ae:db:a4:dd:e4:2f:6d:a0:cf:43:6b:69:26:48:41:58:57:
         f9:1b:b4:5e:61:64:bf:3c:a5:c4:36:f3:ff:c9:4a:d4:22:1e:
         f7:18:2a:44:a1:f1:ca:ea:85:a0:f9:05:7b:3a:16:00:dc:78:
         18:19:f9:f2:0e:6e:5e:b5:fd:1f:c3:e9:c6:0f:c4:8d:6e:e6:
         41:3d:8a:56:9b:77:0f:44:8a:d0:26:db:13:f2:f3:b7:c2:f3:
         60:1b:9a:25:f1:4f:af:03:f5:e6:cb:4b:c4:4c:bb:ce:80:55:
         7c:f1:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org