Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa
File:                     3137302e38302e36372e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          S1aU00ZRyEY4lEpAtdG7ixir/o6hGTiwiyKMKp3IzIo=
Subject key identifier:   28:0E:EB:8E:4B:2B:DE:80:8E:F7:BF:86:F6:C2:53:C9:2D:AF:D3:15
Certificate issuer:       /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial:       344F92A9EEBDF7AB1C9781D1FD53B25DB9B3A5F1
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa
Signing time:             Thu 09 Mar 2023 14:56:19 +0000
ROA not before:           Thu 09 Mar 2023 14:51:19 +0000
ROA not after:            Thu 07 Mar 2024 14:56:19 +0000
asID:                     262514
IP address blocks:        170.80.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:92:a9:ee:bd:f7:ab:1c:97:81:d1:fd:53:b2:5d:b9:b3:a5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Validity
            Not Before: Mar  9 14:51:19 2023 GMT
            Not After : Mar  7 14:56:19 2024 GMT
        Subject: CN=280EEB8E4B2BDE808EF7BF86F6C253C92DAFD315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:9e:5a:8f:fc:f4:f8:99:f5:13:f9:f7:b2:
                    30:b8:c0:c1:72:37:1e:22:5a:10:09:e2:4c:a8:23:
                    7a:e6:dd:a0:f8:0b:58:7c:62:fd:52:6d:5b:09:04:
                    63:01:9b:bf:f1:8a:c9:40:73:ee:07:7e:37:9a:f0:
                    fc:b6:c0:b1:9d:d3:c1:b6:5a:9d:6d:a6:fb:a3:de:
                    3a:4e:98:d6:bb:5b:7f:71:27:3d:c0:54:bb:8d:25:
                    da:1c:2b:36:34:91:98:21:a9:24:7d:45:09:dd:e8:
                    bd:31:c3:22:68:7f:29:f0:0a:3a:b6:9f:4c:c5:b2:
                    e5:d0:47:87:0b:4c:9d:dc:48:a0:69:f3:57:34:8f:
                    2c:8c:84:e6:a9:4a:aa:1d:9c:1f:21:5c:02:86:52:
                    fc:19:4e:21:5c:83:27:b5:9d:5c:3e:b4:59:67:11:
                    c8:31:8d:5f:d5:64:73:49:3b:68:db:04:63:62:19:
                    fa:65:d0:5b:2c:6d:6b:de:8d:32:bd:de:5a:17:92:
                    6e:38:50:0a:5c:81:0b:e5:10:17:c0:e4:fc:f7:ad:
                    2b:2e:9b:cc:1d:27:13:49:9e:e7:9d:22:b8:22:56:
                    f1:58:ca:20:6a:7f:ba:1d:11:7f:58:4f:e7:94:fe:
                    09:26:fe:a1:31:47:66:fc:fc:14:66:f8:44:b0:63:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0E:EB:8E:4B:2B:DE:80:8E:F7:BF:86:F6:C2:53:C9:2D:AF:D3:15
            X509v3 Authority Key Identifier:
                keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36372e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:df:46:1c:00:e9:d0:b4:f4:87:ef:bf:e5:26:09:95:f9:
         82:81:6c:16:f0:25:1c:24:38:db:49:87:66:e2:f5:e7:c3:30:
         a8:0e:dd:96:cd:11:a7:1f:e4:8d:0d:9d:29:3c:52:7c:00:e6:
         1e:9d:87:6e:6d:18:e8:f5:40:02:19:24:13:a2:fd:ed:68:ee:
         52:07:04:56:e1:cc:a5:4a:f9:c1:22:64:21:44:54:d8:18:42:
         58:b5:28:6d:84:3d:6c:6e:8b:21:00:ad:da:e5:44:4e:69:1c:
         f7:8a:fa:19:a5:db:43:e7:4b:ce:cd:58:0d:e6:d3:a1:8c:48:
         b0:92:4e:ba:e0:05:c1:c9:82:4a:d3:bb:95:bc:8a:43:28:fb:
         b1:0f:f8:39:7e:d5:6f:3e:7e:8d:c3:97:ee:52:56:63:b9:3d:
         bc:ff:05:65:fe:8b:eb:7f:95:67:1d:9f:2f:ae:91:bc:f2:7e:
         c2:4e:70:4c:e5:b9:fb:27:47:a0:61:00:2f:21:fc:74:40:0d:
         97:7c:2e:59:da:cd:2f:77:11:e5:8b:83:15:60:e3:85:a2:1f:
         6b:24:a0:0a:46:19:6d:75:a5:b1:21:94:42:88:45:76:c8:4b:
         0d:95:1d:26:4a:25:e4:e8:b1:34:1b:4e:67:1d:03:c9:5d:51:
         ca:d7:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org