Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323633303733.roa
File:                     3137302e3234342e39382e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          x3mRwVwArIefCYjbFwcPnkVg5UHPzoL+AplwOBz8FoA=
Subject key identifier:   90:D6:8B:DB:19:69:A3:D8:AF:80:0D:23:EC:10:E9:29:0C:EE:A1:6C
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       162D1920881DEF5C5E1B1D605243C8B5DDE6ECEE
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323633303733.roa
Signing time:             Thu 23 Mar 2023 00:30:29 +0000
ROA not before:           Thu 23 Mar 2023 00:25:29 +0000
ROA not after:            Thu 21 Mar 2024 00:30:29 +0000
asID:                     263073
IP address blocks:        170.244.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2d:19:20:88:1d:ef:5c:5e:1b:1d:60:52:43:c8:b5:dd:e6:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 23 00:25:29 2023 GMT
            Not After : Mar 21 00:30:29 2024 GMT
        Subject: CN=90D68BDB1969A3D8AF800D23EC10E9290CEEA16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:3f:aa:20:91:02:28:e1:27:bf:62:49:60:
                    82:00:06:60:38:3d:b5:87:09:c4:f1:c6:b4:3a:ce:
                    56:60:98:58:e4:17:42:6c:47:91:57:b7:2d:94:5b:
                    58:59:6d:94:cc:d5:76:98:94:bc:d1:a6:b3:62:b0:
                    e8:0c:2c:e4:26:0a:82:a2:f9:be:84:b9:d6:b2:74:
                    b0:47:04:52:dc:c6:3f:b4:05:0e:3f:b6:54:03:b0:
                    68:55:86:10:aa:e6:b9:ce:df:53:78:a5:65:4b:ad:
                    08:71:8f:8c:38:1d:7e:9e:85:3a:14:d9:bf:21:b4:
                    18:ab:2c:a6:ac:5f:ac:ee:e3:cc:a5:67:a2:f4:79:
                    9f:ee:bc:2f:ef:1f:b7:21:30:08:3e:70:12:8f:0f:
                    06:11:fd:9f:8c:4d:97:91:7e:ed:7a:19:75:66:4d:
                    a6:19:8c:6a:b2:d0:c4:fe:f1:ed:36:25:d2:0a:10:
                    6a:ae:3e:0c:a4:49:7a:96:57:bd:b8:4f:3c:52:c3:
                    4e:4d:cb:21:44:9c:3d:9c:6f:7d:3a:9f:a3:87:09:
                    3a:7b:2d:b7:80:cf:7f:48:b9:2c:8b:81:39:2c:a6:
                    14:fd:75:0c:73:a5:aa:1e:ee:7b:95:79:c2:70:32:
                    0c:5b:72:d1:79:09:d5:c9:85:97:95:9c:df:7f:fa:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:8B:DB:19:69:A3:D8:AF:80:0D:23:EC:10:E9:29:0C:EE:A1:6C
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:93:e1:90:bf:e2:5f:17:28:e2:50:a9:9a:4e:0f:1e:8d:14:
         f2:40:68:e3:84:ff:b1:1e:34:d6:e3:d4:1b:a5:ef:88:4c:e2:
         c3:ee:2b:3b:dc:bc:d5:d7:4f:a6:d2:e0:ab:43:cd:97:2a:ef:
         05:fc:dd:54:54:ac:cb:72:6b:56:48:35:a8:03:87:09:93:98:
         dc:9e:71:d9:2e:2a:fc:7b:30:84:df:79:b9:df:93:54:6c:85:
         5f:2a:d9:db:1b:46:6a:c3:fa:27:f6:f4:39:7e:01:2a:e8:50:
         81:9c:a9:c2:3b:aa:32:9f:a7:d4:ee:1a:e6:a4:6a:b7:ee:95:
         e5:b9:a7:ad:00:9d:a9:98:c6:32:f6:71:a9:f0:05:c3:4c:bc:
         0c:e0:f3:47:53:84:52:2f:08:7e:14:5d:f5:19:70:81:44:16:
         f6:60:53:58:91:5d:24:1b:5d:54:79:49:62:df:81:67:a2:28:
         fc:4d:45:80:82:27:d0:6f:0f:be:fb:58:19:9d:63:90:fe:d0:
         83:e9:9d:ec:03:fe:47:93:b4:3a:cf:38:a6:cf:a3:ae:cf:f5:
         51:dc:ae:1c:69:e2:07:4b:5c:9c:aa:b4:11:0a:59:a5:45:76:
         32:38:6a:bd:6b:97:16:65:0c:20:62:64:e7:66:10:fb:cd:ec:
         ab:cb:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:25 2023 by rpki-client on console-ams.rpki-client.org