Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          itqOn9M3QMNFjbjNEwRkHvX5htLJ12YfDG9zK9edjuA=
Subject key identifier:   8C:47:42:5C:62:43:06:25:9B:2D:34:C7:61:2C:43:FF:6C:68:78:1A
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       4A673E5D38A56F9F1C8B99851184C5B085361DB2
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:18 +0000
ROA not before:           Mon 04 Mar 2024 19:18:18 +0000
ROA not after:            Mon 03 Mar 2025 19:23:18 +0000
asID:                     266448
IP address blocks:        170.82.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:67:3e:5d:38:a5:6f:9f:1c:8b:99:85:11:84:c5:b0:85:36:1d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:18 2024 GMT
            Not After : Mar  3 19:23:18 2025 GMT
        Subject: CN=8C47425C624306259B2D34C7612C43FF6C68781A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:4e:34:3f:d9:e2:b9:ca:a4:6e:fa:bd:0f:
                    05:7a:9a:a1:05:20:dd:cf:ca:43:59:38:62:d3:94:
                    1a:1a:06:3e:c1:25:b9:1e:09:38:2b:64:9d:11:09:
                    a0:03:7b:ee:4b:bc:13:28:f3:ce:ff:8f:a9:06:44:
                    0a:4e:9f:15:fd:cc:9a:5d:82:29:22:03:fb:7d:37:
                    28:1d:bb:16:04:18:3b:0e:39:94:b3:49:6e:71:4f:
                    14:ff:57:ff:a0:a9:b8:ea:f5:0d:55:38:31:9b:8a:
                    6b:55:70:fc:21:32:14:83:81:5f:56:8b:f9:3e:0d:
                    b9:bc:62:1d:00:98:96:f8:99:e3:ca:ad:46:28:9c:
                    5d:26:4c:87:81:c1:de:9f:d0:f1:8a:53:ad:6e:d0:
                    a4:90:18:f3:ff:55:97:b8:df:a1:0f:a3:3e:7d:03:
                    45:ed:dd:0c:dd:82:e7:71:1e:8e:f1:b3:9c:d3:8e:
                    82:90:d4:83:ab:55:6a:ef:69:12:c9:58:e9:59:e3:
                    25:13:ae:3d:2e:52:a5:3a:74:15:31:c6:36:4e:74:
                    f1:5b:d8:77:93:5c:79:2b:1b:a6:1a:75:4c:21:99:
                    bd:ce:b2:5d:c3:67:aa:41:e9:47:6b:10:5b:33:a1:
                    92:71:73:0c:e8:a3:49:27:46:91:cb:33:ff:9e:04:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:42:5C:62:43:06:25:9B:2D:34:C7:61:2C:43:FF:6C:68:78:1A
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:b7:6a:3b:58:d4:70:ae:cf:8d:6e:7c:bf:ff:8e:5f:20:
         87:52:73:cf:6a:ed:d6:41:d1:4c:4a:ae:f1:6b:88:04:8a:cc:
         2e:10:b4:81:fb:78:8d:97:70:22:c0:d1:2f:e4:fc:36:fa:39:
         3c:7b:7a:76:fa:49:55:57:77:3b:b4:1a:15:fa:79:d2:35:e2:
         50:b9:81:af:f1:ae:fa:24:14:e1:c4:90:45:8c:7d:ea:90:96:
         c1:0c:31:6e:5d:e8:96:0d:92:82:03:cc:cc:23:6b:de:1d:62:
         81:52:38:86:d3:87:bc:ca:13:98:4b:ac:ce:27:03:ae:74:17:
         70:4e:f6:af:29:37:77:d4:e3:d0:f9:fc:1b:d7:1a:2a:97:a8:
         05:e9:50:8d:59:51:be:52:1a:50:b4:6c:53:fa:26:8a:5e:10:
         0b:b8:c1:d3:cf:2a:a6:fa:fe:fc:80:a8:4f:1d:13:05:89:f7:
         ef:7a:83:3b:b3:28:71:b4:f0:13:d7:01:f6:b3:df:ed:e6:49:
         ed:f3:e8:22:50:a8:60:9d:12:3f:fa:d0:b3:ba:ca:e0:9b:87:
         fc:c2:8f:4c:7a:a1:6e:a1:d4:c8:d1:33:87:65:43:ce:b4:7a:
         b2:0b:0e:1e:70:b4:ab:7d:67:3f:50:eb:e8:6d:48:25:85:8c:
         ae:c2:8b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org