Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          Kjpct9nWCrB3VtE9fM8c3RRoqGclEWX/Mr3cUNcnQdY=
Subject key identifier:   A6:89:FE:7A:CE:70:2E:F6:D4:5D:D4:9D:CE:CE:8C:94:AB:F7:ED:0E
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       4A4115E141D071CE6333C487939F5BA7F7315FE5
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:19 +0000
ROA not before:           Mon 04 Mar 2024 19:18:19 +0000
ROA not after:            Mon 03 Mar 2025 19:23:19 +0000
asID:                     266448
IP address blocks:        170.82.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:41:15:e1:41:d0:71:ce:63:33:c4:87:93:9f:5b:a7:f7:31:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:19 2024 GMT
            Not After : Mar  3 19:23:19 2025 GMT
        Subject: CN=A689FE7ACE702EF6D45DD49DCECE8C94ABF7ED0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:b3:b3:cb:f7:03:2f:d2:f9:74:b5:7d:71:
                    1a:ec:0f:ab:39:58:a2:b0:a5:f9:0d:f3:57:44:6f:
                    f8:54:97:66:94:8e:fa:14:7c:aa:7f:21:62:77:24:
                    df:b3:89:7c:3f:38:85:b8:11:05:3d:04:47:ec:a5:
                    08:0b:fb:10:9b:ae:b3:19:38:b1:e0:6b:c7:ec:f8:
                    77:96:b1:3f:d5:e6:94:4f:95:39:83:62:cc:93:d7:
                    b7:50:ce:1a:57:f3:41:9f:c6:53:84:0a:31:44:f5:
                    f9:f4:9f:fe:af:be:c4:62:d8:69:7a:8c:5c:36:64:
                    22:cd:34:83:49:d4:03:0c:cc:96:4a:5e:34:e2:40:
                    f9:45:b0:43:af:ad:c5:66:80:fb:c8:d5:83:fc:8c:
                    b6:dc:ac:b1:cd:77:b2:2f:cf:5e:f7:f3:67:ef:fe:
                    e9:02:0b:9d:a6:2b:c9:1c:d0:a6:9d:1f:7c:f0:0b:
                    3e:8d:dd:32:d6:e4:88:18:d0:4e:2b:e9:56:6c:5d:
                    bb:2e:23:b7:28:e1:01:0d:ad:4e:43:f3:d0:2e:f0:
                    91:b9:4c:f8:1e:ab:1a:90:18:97:6b:7f:f0:8f:cd:
                    02:8b:1b:ae:43:56:9b:3a:86:6e:a9:2f:6c:09:45:
                    aa:73:6e:d5:f3:fc:6a:37:7d:fd:40:61:e4:f6:de:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:FE:7A:CE:70:2E:F6:D4:5D:D4:9D:CE:CE:8C:94:AB:F7:ED:0E
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bd:a6:c7:64:51:f3:e3:44:bb:4a:89:d5:c4:fd:f1:fd:25:
         eb:26:22:46:73:af:b6:e4:4f:79:2a:b3:2f:fd:94:c7:7a:95:
         fd:ec:48:d3:d4:3d:50:06:7f:d6:57:9e:13:8e:c3:0b:6f:e0:
         a5:c0:63:3c:ab:ce:cf:bf:07:85:9a:f0:02:0e:28:20:54:6c:
         82:79:5b:69:f7:8e:6c:32:84:98:4f:eb:ef:ce:a5:46:0b:ee:
         cc:de:4a:2a:49:bb:ff:93:f2:17:fe:00:e8:c7:de:0f:8d:ec:
         34:98:a7:b8:d6:5d:49:52:a6:f3:b7:76:c7:f0:6c:5b:fd:c4:
         48:35:e3:59:c3:5f:eb:59:96:8a:b3:01:28:19:22:43:02:02:
         58:80:3d:eb:cb:f7:b6:41:e8:ae:e2:48:5e:5d:0d:74:83:4c:
         67:24:12:8a:55:d2:51:47:92:f2:2d:14:73:18:13:4b:1a:87:
         0b:f0:06:2b:f0:ee:61:cb:a4:36:e5:43:04:bd:25:ef:ba:a9:
         80:e5:68:35:0b:d2:56:45:f2:e8:12:3c:ca:76:c6:f3:e4:6d:
         15:c5:a2:74:9b:7d:1c:35:47:bf:39:26:ee:cc:96:31:23:7d:
         73:88:27:05:de:7b:50:f0:28:ef:5f:db:72:48:3c:c1:25:c6:
         6e:9b:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org