Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3332203d3e20323634393837.roa
File:                     3137302e38342e31322e302f32322d3332203d3e20323634393837.roa (raw, json)
Hash identifier:          IWXQ7SbbFfqNyZi7tXQ8iHJpuT798P/mIQKJ3peFpNU=
Subject key identifier:   6F:A0:92:99:29:24:0D:69:6A:96:D4:6C:CA:A2:65:03:3D:FC:39:9B
Certificate issuer:       /CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
Certificate serial:       0A24456DFBF240B9E37B769BE4D94576CBDB91A9
Authority key identifier: 3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3332203d3e20323634393837.roa
Signing time:             Wed 25 Oct 2023 13:26:23 +0000
ROA not before:           Wed 25 Oct 2023 13:21:23 +0000
ROA not after:            Wed 23 Oct 2024 13:26:23 +0000
asID:                     264987
IP address blocks:        170.84.12.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:24:45:6d:fb:f2:40:b9:e3:7b:76:9b:e4:d9:45:76:cb:db:91:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
        Validity
            Not Before: Oct 25 13:21:23 2023 GMT
            Not After : Oct 23 13:26:23 2024 GMT
        Subject: CN=6FA0929929240D696A96D46CCAA265033DFC399B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:04:94:38:c1:c5:b0:6c:bf:92:36:83:ae:
                    7e:88:d1:ae:42:94:c5:3c:17:b1:e2:94:54:3f:a1:
                    50:c2:c2:3b:1e:bc:3c:98:0a:14:08:cf:eb:84:8c:
                    81:09:9b:26:a8:2d:5e:2c:76:ed:8d:97:a9:8c:f4:
                    86:d2:25:87:40:a2:9d:bc:a5:88:1b:b3:66:6a:8d:
                    9c:0e:72:01:8d:2e:1d:34:3d:b0:b2:96:7c:8d:9e:
                    d7:1d:7a:2a:a0:69:c7:30:75:fa:60:60:c4:21:a1:
                    ac:40:19:81:03:cc:58:44:34:6e:9b:b3:02:ac:94:
                    51:b1:49:51:67:96:ca:85:2d:55:80:70:80:89:83:
                    e6:d0:fc:08:57:0a:a3:25:91:41:2f:5e:89:a4:ea:
                    86:a7:ab:90:07:98:ec:fd:c3:cf:9a:f7:ad:55:31:
                    04:33:f4:63:43:5d:c1:20:e5:7a:d6:0b:5b:2a:50:
                    95:65:d6:b8:1e:bd:a0:79:ee:e2:6c:d8:ea:df:db:
                    42:f2:e7:c2:f4:41:45:c4:68:8a:75:81:2d:8a:c8:
                    69:b1:8d:a6:91:dd:72:8d:df:7e:2c:aa:63:21:5a:
                    92:34:d3:c4:26:5c:9a:ca:b9:48:32:82:73:f0:f2:
                    3f:13:d1:b1:55:54:03:a2:71:bf:71:ea:1f:db:5d:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:92:99:29:24:0D:69:6A:96:D4:6C:CA:A2:65:03:3D:FC:39:9B
            X509v3 Authority Key Identifier:
                keyid:3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3332203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:eb:35:b3:05:18:03:96:17:7c:3a:8a:87:e7:dd:7a:27:
         c5:fd:5d:00:56:44:bf:b5:8e:ab:ce:0b:61:68:7b:b8:1c:16:
         a5:8b:d5:71:01:79:c1:b2:ba:7f:c2:d1:35:c7:ec:74:24:36:
         0e:6c:17:10:e0:a8:91:e2:20:3c:4c:b0:45:e0:dc:d7:e5:d9:
         c6:80:20:4c:ce:96:97:48:af:33:20:c7:9e:6b:6a:bb:5b:70:
         f9:9a:4e:92:52:30:b0:a8:c0:4a:5b:8b:e8:dc:cb:b7:d3:5c:
         10:9f:2d:85:95:58:e2:f5:b9:c4:23:c6:80:11:f9:d1:59:91:
         c6:81:69:40:e2:3a:0b:19:35:8c:3d:8d:b1:88:87:be:f0:d6:
         29:9e:15:90:ea:fa:56:ef:b0:90:2e:38:fd:3e:fb:eb:8d:09:
         cc:8a:2b:2c:7b:ed:25:a7:6d:83:dc:d8:c4:9d:f9:84:c5:b3:
         39:29:b9:0c:63:51:56:77:51:2a:85:14:32:31:50:49:46:1c:
         70:7e:3b:87:2d:ca:dc:44:40:23:2a:ee:af:85:72:71:95:5a:
         48:4f:1c:6b:cb:01:c3:bc:8a:c3:73:2d:0d:c2:c8:94:95:2f:
         91:73:49:db:93:a6:88:23:9c:78:d5:e8:57:ef:0f:bf:55:cb:
         47:f0:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org