Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136342e302f32342d3234203d3e20323635303136.roa
File:                     3137302e38342e3136342e302f32342d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          T449dvjWiWPGJ7qsa2APvUHkCa37nVUHVZNztEhUBE8=
Subject key identifier:   78:5B:C9:CB:A7:CC:29:19:67:5A:69:1B:C6:24:8B:62:3B:EE:1F:21
Certificate issuer:       /CN=DAE2341ECECC35E3C1ED956DC635B6B853DE2C21
Certificate serial:       3961A5C15B7995265AC0D13AA54244C0693F233D
Authority key identifier: DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136342e302f32342d3234203d3e20323635303136.roa
Signing time:             Tue 27 Feb 2024 15:00:00 +0000
ROA not before:           Tue 27 Feb 2024 14:55:00 +0000
ROA not after:            Tue 25 Feb 2025 15:00:00 +0000
asID:                     265016
IP address blocks:        170.84.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:a5:c1:5b:79:95:26:5a:c0:d1:3a:a5:42:44:c0:69:3f:23:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAE2341ECECC35E3C1ED956DC635B6B853DE2C21
        Validity
            Not Before: Feb 27 14:55:00 2024 GMT
            Not After : Feb 25 15:00:00 2025 GMT
        Subject: CN=785BC9CBA7CC2919675A691BC6248B623BEE1F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:db:a2:40:38:06:be:41:3f:e7:1f:0d:6a:
                    78:f3:11:4b:83:22:4f:ea:11:11:36:d2:0f:0d:30:
                    70:ed:ad:0e:d9:2c:f7:fa:9b:93:e9:19:41:32:d6:
                    58:5d:59:07:dc:53:16:b6:27:d7:34:04:2b:82:7f:
                    cc:70:3d:f7:25:1d:ec:8c:99:a0:b6:e2:5e:35:48:
                    66:c8:d4:9f:0e:c8:c1:4b:36:36:2c:f1:03:14:9e:
                    cb:ca:ee:10:a3:9b:03:c6:d3:d7:88:25:b8:77:db:
                    96:a9:f9:0d:8e:83:d2:1c:a4:c9:d5:89:14:82:13:
                    34:a3:31:58:f2:b4:27:45:cc:f1:76:be:76:20:3f:
                    66:22:ae:53:8f:52:8f:b2:7f:07:fb:19:16:f7:fd:
                    e4:45:bd:ca:2d:d8:7f:a7:f2:32:9a:6d:c1:25:f4:
                    1a:35:9a:4f:08:83:b2:1c:51:fe:03:8a:5c:4f:c8:
                    70:64:a9:6d:db:2b:4f:f5:e5:8e:35:3d:bc:94:18:
                    59:94:20:5f:51:02:33:d3:c7:c3:0f:e0:d7:07:dd:
                    d9:ea:45:89:58:9a:6a:2c:1f:62:a3:1a:7b:2c:64:
                    00:8a:36:9a:7c:7a:8e:2a:22:b6:71:9c:53:18:e6:
                    16:32:e6:df:8c:45:d1:cf:d6:61:6e:6c:ed:e8:e6:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5B:C9:CB:A7:CC:29:19:67:5A:69:1B:C6:24:8B:62:3B:EE:1F:21
            X509v3 Authority Key Identifier:
                keyid:DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/3137302e38342e3136342e302f32342d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:6f:01:77:9d:32:ff:8d:cd:5b:30:77:47:fd:3d:0a:a1:
         05:cf:da:5c:aa:ef:07:e2:f9:8b:4b:05:0d:14:4b:ee:0f:17:
         7e:73:ae:2d:c8:d7:b6:3b:81:ad:f4:9f:b0:30:f7:b0:20:b0:
         18:27:69:44:e8:7a:60:8f:dc:b6:e1:3f:2f:b2:e2:11:cc:12:
         71:d5:c3:12:7f:2e:42:b2:09:06:e9:0f:44:5f:16:d4:e2:17:
         e4:9a:5a:07:90:8b:c6:56:62:28:32:a1:67:1c:f2:02:9a:70:
         1b:f3:13:a7:a4:7e:07:72:d5:65:93:e0:09:50:08:d3:8f:01:
         56:16:35:3b:77:cb:c5:1b:29:02:9f:db:15:7a:92:d3:e6:b6:
         94:ad:ff:21:72:8b:b7:bd:b3:29:81:6e:bf:49:36:ff:61:74:
         23:42:d0:1f:24:57:80:63:1a:43:c3:92:c9:00:4a:47:20:79:
         7f:ec:19:0c:fd:7f:8b:66:87:d9:0b:6e:c6:39:a8:17:1c:4c:
         98:74:87:30:ce:26:ff:9a:db:e3:6f:19:06:be:27:eb:e6:e2:
         1a:c0:06:2b:36:42:9b:56:46:36:ad:14:c0:a6:26:13:24:29:
         7f:29:55:63:04:f7:9e:99:1d:fc:d9:13:b3:0a:95:7d:e1:d1:
         13:c6:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org