Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
File:                     3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa (raw, json)
Hash identifier:          2QFyskvirZHKV0T5rk6VLa5kq9OUkr/zaOFdv22tkMo=
Subject key identifier:   57:0B:B3:71:5E:DE:DB:AB:62:2F:56:2A:20:A6:A8:D4:2F:16:E6:77
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       47C2229E4129A0E2EF7F412BD283E8AB8058A1AD
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:18 +0000
ROA not before:           Mon 04 Mar 2024 19:18:18 +0000
ROA not after:            Mon 03 Mar 2025 19:23:18 +0000
asID:                     266448
IP address blocks:        170.82.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c2:22:9e:41:29:a0:e2:ef:7f:41:2b:d2:83:e8:ab:80:58:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:18 2024 GMT
            Not After : Mar  3 19:23:18 2025 GMT
        Subject: CN=570BB3715EDEDBAB622F562A20A6A8D42F16E677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:22:0f:26:a1:26:c8:a4:1c:ba:aa:f2:06:
                    2b:7d:45:26:bc:58:3c:ac:22:40:d3:c5:e5:61:af:
                    06:00:18:16:f2:b4:f6:9c:0e:db:30:9d:a8:1b:55:
                    70:8b:50:ca:aa:fa:7d:21:1a:60:29:02:08:24:ce:
                    ec:a7:e3:da:e7:aa:4d:00:02:4d:07:65:6c:ae:53:
                    13:5f:bc:08:47:b3:da:43:4b:ee:8e:00:fe:fa:c9:
                    32:d9:a2:0b:2b:7c:23:75:66:66:f4:40:b6:1e:45:
                    50:0c:9b:4f:16:a8:e4:60:19:67:44:fb:1d:8a:99:
                    47:1d:23:6a:e4:01:01:65:72:de:b9:71:98:2d:9c:
                    da:c4:57:1b:cf:ac:ac:4e:b0:f4:1d:12:6d:81:78:
                    79:6f:4d:ff:84:44:3d:35:0c:b7:1d:4f:2b:03:da:
                    12:12:f1:7b:1b:9c:98:80:df:db:43:0c:c6:b7:2b:
                    ca:4c:90:da:95:72:bb:00:3a:4f:bc:86:08:f6:32:
                    ad:a1:cd:80:b0:dc:64:fb:1c:6b:05:a9:22:4f:59:
                    52:1f:e2:5a:38:4a:cc:69:5c:20:f0:6b:b5:e1:7f:
                    f5:5b:bd:ac:77:c0:40:92:e8:ef:ac:db:c1:64:63:
                    fb:08:f7:1f:dd:2d:81:c9:98:a6:0d:31:2d:b5:04:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:B3:71:5E:DE:DB:AB:62:2F:56:2A:20:A6:A8:D4:2F:16:E6:77
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:28:a5:24:95:53:77:40:51:9e:45:15:a7:7b:f1:bf:f5:
         56:0a:e2:8b:05:0a:3e:6f:bc:04:fe:48:f9:a2:fb:4e:ae:78:
         6b:0d:f9:f9:52:0d:74:b7:0f:a5:23:9d:a0:aa:73:17:82:39:
         d1:bd:19:86:a8:7b:1b:31:bc:9a:1d:0f:19:03:7b:8a:50:a9:
         05:e5:3b:bf:e5:80:de:67:57:f0:1e:99:ea:03:66:19:3c:a9:
         5f:5c:64:38:7d:f5:4d:92:34:0c:0a:d2:6a:59:68:f9:08:2c:
         ed:87:dd:3a:bf:61:e9:25:c5:dd:16:1b:54:32:c0:9a:ad:e6:
         bd:69:8d:c4:88:a2:30:96:e5:61:99:17:fd:96:af:e2:65:68:
         25:f4:d3:26:7b:c4:a2:b7:b9:2c:99:d3:b0:98:74:1d:c1:0c:
         77:95:ad:22:b5:77:0c:31:b8:48:9d:c0:18:94:57:27:d1:c2:
         99:d0:4a:94:fe:2b:e7:4f:e1:31:42:f6:2e:c6:a2:48:cd:11:
         6a:4e:76:0c:e4:c5:bf:1c:24:a6:85:41:95:d0:7e:e9:97:65:
         c6:ac:d0:59:13:39:37:d8:31:69:8f:5b:37:bd:bd:8a:61:3c:
         f3:97:ea:d2:44:b8:73:52:99:bb:a2:96:aa:35:8e:2e:11:41:
         0d:c9:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org