Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32332d3233203d3e20323633343135.roa
File:                     3137302e3233392e3136302e302f32332d3233203d3e20323633343135.roa (raw, json)
Hash identifier:          2N0aW/ZT1a4Sj34gsf4rx0Mimv3TNctQEncRyX6xZNQ=
Subject key identifier:   3C:B3:76:7D:FF:8F:C8:7E:2E:12:A6:2E:5E:F8:23:21:FA:ED:06:B1
Certificate issuer:       /CN=55035838712C7386E139CC98D786476DBAB79648
Certificate serial:       77A08AC2155B1DDCA8A1E4C7D77937729248CC4A
Authority key identifier: 55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32332d3233203d3e20323633343135.roa
Signing time:             Tue 06 Dec 2022 15:10:48 +0000
ROA not before:           Tue 06 Dec 2022 15:05:48 +0000
ROA not after:            Tue 05 Dec 2023 15:10:48 +0000
asID:                     263415
IP address blocks:        170.239.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a0:8a:c2:15:5b:1d:dc:a8:a1:e4:c7:d7:79:37:72:92:48:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55035838712C7386E139CC98D786476DBAB79648
        Validity
            Not Before: Dec  6 15:05:48 2022 GMT
            Not After : Dec  5 15:10:48 2023 GMT
        Subject: CN=3CB3767DFF8FC87E2E12A62E5EF82321FAED06B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:18:6b:01:6c:0d:92:2c:2a:46:4f:5c:fb:
                    ed:15:80:3d:a2:39:79:d5:87:58:a5:fc:c7:1e:58:
                    3e:12:bc:6b:12:4d:8e:04:6c:a6:e4:90:cc:d2:45:
                    6f:84:44:fe:e4:ed:37:4a:5d:80:60:dd:08:06:c1:
                    84:b0:3e:ea:bc:27:35:26:5a:ab:f5:1d:b6:5d:2e:
                    80:c5:6b:6b:66:8f:d2:3b:ce:25:53:8c:3e:68:d1:
                    4e:fc:6b:42:ec:09:3f:c4:da:f6:20:e4:30:b5:85:
                    12:be:64:78:dc:f7:59:53:ca:c5:f3:84:46:4a:db:
                    44:71:cb:96:d4:68:ec:01:0d:5d:9c:a7:43:a7:76:
                    36:40:5c:31:7b:01:3a:8d:a3:a0:68:eb:cc:fe:e0:
                    c5:ba:83:c1:9c:ab:42:af:a0:6b:2d:15:59:cd:02:
                    7d:b2:1e:de:30:24:87:6a:89:e7:ec:c4:18:fa:94:
                    bf:7b:3d:2f:e9:7d:0b:a5:d7:8d:7a:1e:f5:7f:ec:
                    ad:63:c5:33:c0:2f:6a:62:d0:12:f7:ca:4d:19:df:
                    43:34:d0:f0:15:be:6d:f2:e9:28:3d:48:80:ea:a2:
                    a0:00:4f:a1:82:cd:d1:16:00:96:5c:72:ae:22:0b:
                    2e:82:16:90:fd:0e:05:9a:7d:c9:41:c5:48:19:0e:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:76:7D:FF:8F:C8:7E:2E:12:A6:2E:5E:F8:23:21:FA:ED:06:B1
            X509v3 Authority Key Identifier:
                keyid:55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/55035838712C7386E139CC98D786476DBAB79648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32332d3233203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:08:c1:ca:44:9d:c0:8a:36:09:15:72:7c:6c:1e:69:b6:
         52:84:ad:15:98:85:57:08:22:7d:62:4c:61:72:fe:69:5f:0e:
         0f:2b:bf:82:7a:17:91:fb:5c:0e:ec:90:ef:04:50:a5:7f:09:
         4b:26:10:26:98:a2:22:58:e2:06:97:f4:04:50:da:32:47:73:
         83:26:b9:76:7c:c8:0a:5f:88:70:e1:c5:0f:03:03:b6:1d:49:
         3b:bd:1c:9d:e3:5c:74:81:36:cd:37:8f:fc:08:cd:57:bb:94:
         7a:dc:ee:5f:7f:0b:0b:ee:de:76:04:90:38:18:1c:74:ec:d0:
         e7:20:e5:26:7a:3d:6f:24:b2:b3:cc:18:de:d6:fb:87:d7:15:
         17:c6:ba:b0:67:15:08:3b:60:e2:f9:24:65:9d:59:7a:7a:84:
         8d:b2:32:fd:93:a2:a1:b1:bd:83:d3:ec:4e:08:7a:02:b9:f9:
         5d:74:e9:d8:41:30:bb:ed:a4:11:ad:19:26:52:7f:e8:e2:5d:
         1a:eb:06:9b:e6:88:d6:7a:43:4a:e9:ee:1c:51:17:3c:84:f6:
         47:be:7f:6f:c3:ce:8a:e1:8b:40:b6:45:4b:e0:61:75:c7:2c:
         d3:3b:4f:0a:53:a4:13:a0:0e:1d:20:c1:61:86:71:d7:3d:80:
         02:7f:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:09 2023 by rpki-client on console-fra.rpki-client.org