Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36362e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          ybEgVK1jdwyk67XeiIix911IST6JYzb/vlTTh3YRIOY=
Subject key identifier:   83:6A:97:2E:B8:C5:24:62:CF:96:C0:E2:1B:48:73:FF:7F:A6:36:3D
Certificate issuer:       /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial:       1BD9D596EA26A65C62368B24B84C3FE4C9AACDAB
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa
Signing time:             Thu 09 Mar 2023 14:56:04 +0000
ROA not before:           Thu 09 Mar 2023 14:51:04 +0000
ROA not after:            Thu 07 Mar 2024 14:56:04 +0000
asID:                     262514
IP address blocks:        170.80.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d9:d5:96:ea:26:a6:5c:62:36:8b:24:b8:4c:3f:e4:c9:aa:cd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Validity
            Not Before: Mar  9 14:51:04 2023 GMT
            Not After : Mar  7 14:56:04 2024 GMT
        Subject: CN=836A972EB8C52462CF96C0E21B4873FF7FA6363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:b5:a4:64:7d:d4:99:cd:15:11:c4:66:a2:
                    06:29:37:8e:ed:24:8f:6b:fd:35:40:8e:a8:a0:c0:
                    2f:4d:f0:57:08:9f:6d:8c:e4:bd:6a:06:78:b6:54:
                    d9:73:f6:19:c6:6e:d5:03:11:64:5a:e5:a4:9e:d0:
                    0c:dd:ae:35:08:5e:55:d6:fc:29:11:68:f2:5b:f2:
                    99:16:04:0c:44:34:de:d0:7f:8a:db:64:ab:43:70:
                    c3:9e:47:b1:3b:6c:10:8b:7b:b4:e5:98:99:0f:57:
                    14:fa:2a:8c:a9:c0:6d:b8:64:23:0d:39:c5:af:f2:
                    f1:74:0e:51:b8:02:e1:dd:08:fa:94:7f:7c:ba:03:
                    21:b9:80:49:73:bd:44:42:cd:b2:2f:61:a0:26:96:
                    9f:31:16:cf:dc:06:39:c6:41:90:31:1c:d9:89:53:
                    9d:55:47:b7:ee:7d:ed:23:63:b9:4b:b8:fc:de:d5:
                    24:18:3c:66:c7:30:d7:5a:b9:39:54:2e:89:42:70:
                    47:7e:aa:05:ca:68:5d:a7:8d:d4:e1:99:b2:73:cd:
                    e3:1d:ce:ca:b6:6d:2c:d4:45:12:45:79:9b:62:9c:
                    f0:31:61:ef:40:67:c0:72:d6:7a:a6:73:94:a8:d9:
                    7c:34:46:62:8a:9e:4b:76:ff:d0:a7:d3:98:c8:75:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:97:2E:B8:C5:24:62:CF:96:C0:E2:1B:48:73:FF:7F:A6:36:3D
            X509v3 Authority Key Identifier:
                keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36362e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:4f:b2:fe:0b:bc:db:df:cd:6e:26:a7:0e:92:61:b6:a9:
         25:23:fb:4e:08:8b:d7:9d:6f:a4:9d:61:e3:0b:5a:53:b5:0d:
         65:e2:9f:25:c0:38:05:8d:4f:68:52:c4:87:da:ed:79:1e:d3:
         9a:f9:73:91:98:5a:9c:b1:b7:7d:64:ac:25:e8:67:c2:94:58:
         7d:b6:be:3a:e4:e7:1f:46:1b:00:bc:99:3d:6e:bd:0b:3e:19:
         00:5f:dc:18:dc:5f:cd:60:0b:88:e8:f6:a2:88:d6:d9:83:79:
         79:f1:12:cc:09:62:e6:c2:a3:45:cf:52:e9:6b:6d:76:72:75:
         80:bd:4b:92:74:72:c9:86:62:22:76:76:78:a3:8f:26:4f:98:
         e7:d4:43:47:99:be:40:5d:21:c4:a7:17:13:f0:39:eb:22:a1:
         1e:18:98:33:18:c6:b8:fc:df:4f:99:fb:90:cd:65:9f:d9:83:
         cf:10:27:47:fb:95:fd:34:03:86:bf:0c:47:a0:5d:fc:d6:31:
         7b:ab:19:ff:05:84:3c:45:68:95:96:10:9b:16:69:a7:4c:05:
         f6:56:fa:d2:1c:66:37:10:17:fb:d9:a8:58:9b:71:5b:92:14:
         82:66:b6:51:47:e2:84:58:7e:c3:8d:f0:92:d2:a2:ed:e1:bd:
         82:f8:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org