Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3234203d3e20323635303239.roa
File:                     3137302e38342e32342e302f32322d3234203d3e20323635303239.roa (raw, json)
Hash identifier:          xnxD4Xszi8uXRpDr6d+Epvac/F4OYBJtTCDvPK+4yvo=
Subject key identifier:   FB:BC:DA:C5:87:65:A8:17:A8:89:B1:30:22:BC:48:E0:FE:ED:E4:95
Certificate issuer:       /CN=A03486539CF993B45B5DFE200C7DCC6785D63CBF
Certificate serial:       334AFA4812BBC621A3BB56EAB14456325A70314B
Authority key identifier: A0:34:86:53:9C:F9:93:B4:5B:5D:FE:20:0C:7D:CC:67:85:D6:3C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3234203d3e20323635303239.roa
Signing time:             Fri 30 Jun 2023 03:00:00 +0000
ROA not before:           Fri 30 Jun 2023 02:55:00 +0000
ROA not after:            Fri 28 Jun 2024 03:00:00 +0000
asID:                     265029
IP address blocks:        170.84.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4a:fa:48:12:bb:c6:21:a3:bb:56:ea:b1:44:56:32:5a:70:31:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03486539CF993B45B5DFE200C7DCC6785D63CBF
        Validity
            Not Before: Jun 30 02:55:00 2023 GMT
            Not After : Jun 28 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:8d:66:84:6c:d0:26:b5:46:47:e6:7a:c4:
                    19:25:0e:79:82:1b:2f:c5:97:81:b5:b8:cf:a8:ad:
                    29:7d:ab:a8:72:1a:64:6f:0f:8d:42:a3:87:75:15:
                    ae:46:84:6b:be:8d:28:f6:1e:32:25:44:b9:65:a1:
                    1e:bc:13:d5:17:3b:54:b1:ac:d9:ad:c7:ba:ee:30:
                    86:b2:95:17:ec:69:16:7b:7b:b0:f3:b4:bb:6a:ac:
                    5c:dd:b5:08:1f:ee:37:46:c0:c2:89:68:15:94:7f:
                    51:63:27:8e:d9:43:f7:44:b2:8d:10:0b:3d:f2:ca:
                    db:b7:91:3f:61:b9:4d:fc:5f:a2:ae:39:8a:cf:41:
                    8d:b6:c7:1d:c8:6a:69:34:64:e6:80:eb:ce:3a:a6:
                    d0:a5:7e:3a:4e:4d:ca:58:ae:ba:f7:f9:48:09:c1:
                    d6:47:75:c6:30:b5:21:c7:ef:e1:e3:f2:d0:30:33:
                    a4:1e:aa:e7:a4:92:5e:16:a7:1f:12:ef:cf:59:d0:
                    58:24:7a:a4:8c:fc:d8:8f:4b:e3:d7:fd:e8:08:7b:
                    36:98:f2:aa:e6:00:0c:9d:f0:f2:7c:78:2d:a5:68:
                    b2:57:20:a2:88:bb:36:ab:bc:b4:8a:8c:ba:e2:75:
                    bf:f1:36:9a:66:4d:71:b1:60:45:1d:1a:80:52:09:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:DA:C5:87:65:A8:17:A8:89:B1:30:22:BC:48:E0:FE:ED:E4:95
            X509v3 Authority Key Identifier:
                keyid:A0:34:86:53:9C:F9:93:B4:5B:5D:FE:20:0C:7D:CC:67:85:D6:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3234203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f8:30:2b:33:a7:61:58:a7:41:1e:ef:83:f3:de:c0:5a:ac:7a:
         e7:e7:be:8c:6e:dd:64:b4:dd:de:17:ef:7b:6a:64:e9:22:31:
         3e:16:2b:02:79:5d:2a:8f:2a:c8:d6:ca:48:22:a7:e1:c4:25:
         49:a1:6b:e1:ac:4a:9d:c6:a6:c1:a7:04:08:8b:a9:85:37:ed:
         b8:d2:f3:66:e5:17:d4:fc:cd:38:47:f8:0a:b8:40:8f:aa:bc:
         01:ec:52:0a:37:31:49:7f:62:1f:b0:34:9c:66:47:3f:80:34:
         25:ee:b0:cd:e2:cf:18:8a:aa:65:ad:89:74:2a:cb:d1:34:5a:
         98:12:16:64:93:25:5f:e7:45:86:7a:e6:0e:4b:41:30:55:6a:
         0d:5e:e9:24:79:94:ee:f4:67:c9:f2:d5:59:65:62:c4:b1:1d:
         59:5f:5a:db:89:00:55:8a:1f:78:c3:6d:bc:2d:a8:d5:88:b3:
         0c:f6:8f:ed:55:b7:af:35:27:e9:9d:71:25:2d:57:32:37:01:
         f8:f7:56:08:58:aa:7a:21:f6:1d:94:18:63:f8:b7:20:e5:72:
         ff:40:e2:82:25:cf:41:fd:1c:fd:3d:71:de:8b:76:e6:2a:e6:
         27:c1:f4:e5:77:82:1a:75:7c:e3:ef:2d:a1:ab:6a:93:cb:c1:
         cf:4e:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org