Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3137302e37392e3234382e302f32322d3332203d3e203532363132.roa
File:                     3137302e37392e3234382e302f32322d3332203d3e203532363132.roa (raw, json)
Hash identifier:          O5fqJc9QbdMCRvfVif5il/JyOtzH8PywSpD8N2u9SXc=
Subject key identifier:   33:2F:54:A9:DF:A6:69:FB:2F:C9:20:D4:25:2C:B1:79:10:86:58:36
Certificate issuer:       /CN=1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0
Certificate serial:       1AE3441319FDC954DEECEBE0EC6A6FD348A0A62D
Authority key identifier: 1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3137302e37392e3234382e302f32322d3332203d3e203532363132.roa
Signing time:             Fri 05 Apr 2024 00:53:32 +0000
ROA not before:           Fri 05 Apr 2024 00:48:32 +0000
ROA not after:            Fri 04 Apr 2025 00:53:32 +0000
asID:                     52612
IP address blocks:        170.79.248.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e3:44:13:19:fd:c9:54:de:ec:eb:e0:ec:6a:6f:d3:48:a0:a6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0
        Validity
            Not Before: Apr  5 00:48:32 2024 GMT
            Not After : Apr  4 00:53:32 2025 GMT
        Subject: CN=332F54A9DFA669FB2FC920D4252CB17910865836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:8c:7b:41:96:31:7f:d1:be:9b:85:84:cc:
                    5f:59:44:eb:44:bf:38:22:70:b1:eb:09:39:ba:50:
                    d7:a3:61:3b:29:32:b3:86:bd:97:31:02:f9:ac:c3:
                    b7:cf:04:3e:3a:56:6e:f1:a4:ce:c0:fb:d4:bf:5c:
                    d5:05:ba:f7:52:ae:b9:c8:37:e3:89:e3:6c:3f:b1:
                    28:c0:fe:f1:29:f8:98:29:ed:46:b0:83:1d:16:cd:
                    56:de:99:47:99:40:3c:cd:43:de:81:09:4b:a8:53:
                    30:94:c5:e2:ed:e6:a0:76:c3:eb:70:b5:68:bb:13:
                    7a:4a:23:8e:74:19:34:10:7c:b4:b4:ac:fa:2d:a7:
                    3f:92:7d:7f:00:eb:9d:a9:49:56:f8:be:d8:13:cc:
                    d1:cd:6d:47:19:51:57:4f:70:15:5e:8a:27:fb:0a:
                    a3:ef:73:12:06:05:59:65:8f:e5:1b:39:73:b4:74:
                    eb:ba:45:59:f9:10:fe:20:cf:d6:55:94:6d:6b:42:
                    c9:39:be:ed:0e:fc:5c:31:80:b5:e0:02:41:36:7c:
                    13:b2:02:7e:69:0a:ac:ca:f7:c3:3a:13:91:b5:ef:
                    de:fd:98:4e:05:0b:01:c7:27:7d:02:15:bd:4f:55:
                    fb:f5:46:e9:06:0d:2c:d5:8d:d6:02:4b:69:4d:64:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:54:A9:DF:A6:69:FB:2F:C9:20:D4:25:2C:B1:79:10:86:58:36
            X509v3 Authority Key Identifier:
                keyid:1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3137302e37392e3234382e302f32322d3332203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:b4:0a:12:fe:41:22:84:04:af:ba:3b:f0:51:66:f2:e4:d5:
         c3:eb:be:4e:19:2c:1b:d6:f6:fa:0a:f6:f1:78:2a:bf:51:1b:
         bf:e7:c5:17:f5:61:88:0f:b4:a2:2e:f9:9f:38:24:78:42:5f:
         92:58:29:fc:b0:8a:79:46:b6:bf:b8:be:2a:9b:8f:f9:cb:a5:
         a1:35:3d:2f:bc:47:9f:27:62:7d:01:f0:fa:08:f0:bf:e3:b0:
         f4:57:e8:6e:9b:b4:62:3d:60:5c:1e:23:41:66:30:bc:18:00:
         eb:fc:87:f5:53:f5:d7:c9:2d:ec:b6:57:b1:3e:76:41:f1:15:
         c1:67:1c:02:4b:9c:6a:0e:b7:4f:04:05:44:7d:e3:7f:5b:aa:
         76:57:42:cb:52:6b:80:27:1d:b3:e9:93:55:e9:88:63:8c:ab:
         d8:88:3a:aa:81:93:cd:67:78:1c:a8:32:7a:c9:fc:eb:75:d1:
         86:1a:c8:83:89:4b:aa:11:b0:52:6c:12:d6:83:a1:73:de:01:
         fb:a3:ba:e3:e0:6d:03:d4:7b:26:14:f5:c2:c0:5a:b3:af:39:
         c2:33:c7:7e:12:d2:ee:84:c9:9b:de:db:78:8f:a9:c6:52:00:
         ad:5e:b9:98:e6:bd:7a:19:f5:2e:dc:84:89:2e:d4:8a:7e:a1:
         14:27:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org