Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          K0aOQAkZALr7GNfxEUk8HTx9rdPdOD0WbfPrOy8XygI=
Subject key identifier:   B5:69:93:C5:E1:24:C6:D5:CE:14:C4:CB:D8:83:B4:E2:12:9C:D3:75
Certificate issuer:       /CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
Certificate serial:       5225D2809F187D1B0B0AF21198279FE6BF0C2EEF
Authority key identifier: B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 29 Mar 2023 16:07:58 +0000
ROA not before:           Wed 29 Mar 2023 16:02:58 +0000
ROA not after:            Wed 27 Mar 2024 16:07:58 +0000
asID:                     266389
IP address blocks:        170.81.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:25:d2:80:9f:18:7d:1b:0b:0a:f2:11:98:27:9f:e6:bf:0c:2e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
        Validity
            Not Before: Mar 29 16:02:58 2023 GMT
            Not After : Mar 27 16:07:58 2024 GMT
        Subject: CN=B56993C5E124C6D5CE14C4CBD883B4E2129CD375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:47:ba:96:cc:4d:e3:d9:f9:a0:49:9d:ac:
                    0f:b7:c0:35:49:44:e9:e2:7d:55:25:90:90:41:79:
                    54:f9:e0:23:d4:42:26:df:4b:00:90:21:22:9f:dc:
                    85:30:6f:1a:27:eb:e7:2c:7a:ce:a9:b1:3b:52:8b:
                    06:fb:4a:c3:86:b2:f6:e0:f7:66:9c:7a:80:75:87:
                    9b:79:16:ae:b1:2f:88:5d:be:a6:0c:a7:74:aa:b0:
                    de:1b:9a:4f:8c:55:07:83:9f:49:82:a5:2c:96:21:
                    49:95:b2:b4:c3:c1:11:03:cb:7e:ef:8a:ca:6b:88:
                    37:d4:c3:a3:ad:af:63:35:92:1b:97:88:1a:a5:bb:
                    2c:7c:51:e4:0e:e4:77:ca:d7:64:64:dc:70:03:22:
                    77:db:ee:1f:11:09:ab:73:03:65:38:cf:ff:9d:8f:
                    71:09:56:9f:fc:17:4f:c1:84:c8:23:25:c8:72:a1:
                    63:cf:67:06:88:b3:7d:99:ca:49:46:83:1d:0c:19:
                    f8:c2:af:1c:72:87:d1:16:43:80:8f:f8:31:5c:c2:
                    57:a8:e5:36:b3:a5:8b:6b:8b:65:36:19:4d:ad:c4:
                    21:5d:3b:6d:e9:af:65:fb:60:15:ff:7c:9c:a1:db:
                    b8:33:6a:ed:88:51:57:e6:cc:74:df:27:c1:d4:93:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:93:C5:E1:24:C6:D5:CE:14:C4:CB:D8:83:B4:E2:12:9C:D3:75
            X509v3 Authority Key Identifier:
                keyid:B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:f4:7b:9f:96:16:7c:20:c2:5c:71:a2:96:f0:4d:7e:75:
         60:61:56:41:0e:71:b2:f3:b1:2f:59:a4:3f:98:78:2e:f7:8b:
         20:1f:c8:d5:ca:3a:67:6f:28:1d:fe:21:86:05:05:5d:fa:19:
         6d:ed:2c:01:e4:0e:c0:fc:5b:d9:22:c3:2c:8b:e7:d3:4d:50:
         be:4b:9c:29:70:a7:22:d6:78:89:10:85:c6:c9:fa:c0:b0:e2:
         3b:6b:82:0d:77:22:2a:06:55:8c:10:ee:4a:af:8a:c9:60:f9:
         28:cb:1d:c6:f8:bf:52:f4:d8:04:12:23:39:a8:9f:2a:25:75:
         29:34:4e:12:b1:89:3f:fd:cf:5b:10:a6:a7:50:40:76:2d:bc:
         6d:b3:a9:81:50:62:6f:46:d5:d1:8c:c2:8c:ac:93:d1:92:03:
         a1:b7:21:e0:8e:3a:16:4d:89:17:28:c5:ae:e5:4e:67:12:9b:
         18:2c:92:19:b4:bb:90:47:55:52:22:07:71:0a:14:aa:fc:f7:
         17:37:0f:71:e3:2f:f9:8e:3a:e4:e5:d7:8c:86:16:8b:d9:89:
         d3:95:37:9c:07:9d:72:fb:38:e3:84:32:6f:23:68:04:c9:3d:
         b1:b0:bd:91:a9:d8:29:1a:81:ec:b0:28:62:29:dd:7a:00:06:
         78:55:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org