Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/3137302e3233332e3235322e302f32322d3234203d3e20323635303937.roa
File:                     3137302e3233332e3235322e302f32322d3234203d3e20323635303937.roa (raw, json)
Hash identifier:          dYTWeGwYoZnwE8iG6tb8K7BN9X2jyJ0sUSdC9oQZqyM=
Subject key identifier:   5D:21:DA:1A:DC:9D:B6:62:EE:63:DE:E8:CC:91:64:C1:44:7C:90:2A
Certificate issuer:       /CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
Certificate serial:       6B8C6C9D44D0A7473FA1CE9935C33F7CE924D7EE
Authority key identifier: 8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/3137302e3233332e3235322e302f32322d3234203d3e20323635303937.roa
Signing time:             Wed 20 Sep 2023 18:02:00 +0000
ROA not before:           Wed 20 Sep 2023 17:57:00 +0000
ROA not after:            Wed 18 Sep 2024 18:02:00 +0000
asID:                     265097
IP address blocks:        170.233.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8c:6c:9d:44:d0:a7:47:3f:a1:ce:99:35:c3:3f:7c:e9:24:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
        Validity
            Not Before: Sep 20 17:57:00 2023 GMT
            Not After : Sep 18 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:49:48:9b:a7:4a:ef:26:b6:0b:84:a2:0f:
                    c0:c6:f7:4a:b5:43:4c:fa:f8:e2:3f:f5:28:11:cc:
                    33:a7:b2:86:9f:f9:dc:4d:91:d8:5f:ab:fe:ae:f2:
                    43:87:94:45:76:ed:46:a9:67:8b:d2:2a:67:c9:95:
                    9c:9e:87:5f:29:b5:e8:8c:63:3f:06:22:65:d2:b3:
                    57:65:40:06:c9:01:da:0d:af:55:37:24:a1:68:c8:
                    e0:28:b9:79:23:de:03:af:07:d9:2c:02:e0:88:71:
                    1f:d1:6e:ef:12:cc:70:13:ed:0e:bb:a0:93:2b:ca:
                    e1:64:c7:fc:47:c7:64:45:7b:87:c6:63:f5:79:d8:
                    31:de:d0:a8:e9:9a:2c:ad:8a:59:ac:8c:71:2f:0f:
                    4f:52:6a:f4:11:87:a8:52:cd:88:4a:2a:6b:3a:df:
                    25:85:7d:48:5a:81:5d:23:05:29:4f:a7:68:29:5c:
                    1e:91:53:30:cf:d4:49:af:7c:78:c1:5e:23:49:69:
                    f8:8d:49:da:27:d6:70:f0:e2:7d:37:2b:22:b8:e9:
                    06:f5:e9:62:6e:7e:29:61:d7:b6:46:34:56:6c:d6:
                    e4:f3:bd:21:89:41:88:da:da:8d:d4:36:be:a0:c1:
                    48:62:e8:0d:5b:9e:a3:9d:3e:34:bb:a8:7e:fd:cc:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:21:DA:1A:DC:9D:B6:62:EE:63:DE:E8:CC:91:64:C1:44:7C:90:2A
            X509v3 Authority Key Identifier:
                keyid:8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/3137302e3233332e3235322e302f32322d3234203d3e20323635303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:21:e0:5f:23:99:dd:ba:4c:b5:0d:49:c7:a6:d4:99:76:
         0d:ec:ef:a1:e0:ee:c0:f3:38:52:1a:9f:d7:8f:a4:f2:9c:65:
         74:89:c5:bd:99:d6:e2:82:39:1e:c2:85:6f:b7:fd:41:83:c0:
         cb:cc:88:3d:55:bc:d7:ce:b4:ed:f2:36:35:80:73:4b:43:cb:
         d8:f9:2b:89:72:fd:d5:b3:22:32:1c:43:95:10:f8:68:09:a7:
         1d:67:de:65:79:9d:09:ce:7e:48:74:1b:bf:b2:14:b9:40:85:
         d6:84:1c:12:63:2b:70:af:af:ac:d6:3f:5e:42:7d:fd:64:e1:
         a3:8f:86:bd:04:33:07:13:7d:ce:c2:c0:61:54:a0:bd:e2:87:
         3d:98:28:d2:f8:76:b3:95:63:15:30:d1:a9:13:30:b4:79:a8:
         57:63:a4:ce:23:50:08:8c:2d:3d:6e:9f:7e:c5:f1:8d:d2:b3:
         eb:1c:87:a3:b6:66:d6:3f:da:f8:3d:b7:c5:7c:bd:a2:f3:99:
         36:54:d9:f2:f9:9d:98:c3:c7:42:aa:7d:77:7c:b5:7e:1a:5a:
         b1:f2:96:e1:71:fb:4f:88:4e:dd:22:d5:99:14:16:aa:a0:a6:
         16:be:87:77:0e:77:84:18:57:18:bb:14:c7:36:89:96:a1:35:
         a8:b3:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org