Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38322e302f32342d3234203d3e20323635313030.roa
File:                     3137302e3235342e38322e302f32342d3234203d3e20323635313030.roa (raw, json)
Hash identifier:          tmx/eGTXmbCvTjgc4KDw7N9hHePQk5h/9oa1+HBheus=
Subject key identifier:   8F:CE:BF:94:D5:9E:4B:A3:5B:C0:42:40:F7:E3:DC:65:E4:E9:C0:BA
Certificate issuer:       /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial:       39DF63554B9AFD0564132DBFAB045B98F66B3CE2
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38322e302f32342d3234203d3e20323635313030.roa
Signing time:             Tue 21 Mar 2023 15:00:00 +0000
ROA not before:           Tue 21 Mar 2023 14:55:00 +0000
ROA not after:            Tue 19 Mar 2024 15:00:00 +0000
asID:                     265100
IP address blocks:        170.254.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:df:63:55:4b:9a:fd:05:64:13:2d:bf:ab:04:5b:98:f6:6b:3c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
        Validity
            Not Before: Mar 21 14:55:00 2023 GMT
            Not After : Mar 19 15:00:00 2024 GMT
        Subject: CN=8FCEBF94D59E4BA35BC04240F7E3DC65E4E9C0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:04:19:61:e1:e4:db:4e:9e:53:ac:98:41:
                    20:9e:a5:65:f6:49:c8:61:7b:5e:07:01:d9:1d:2d:
                    2f:79:44:3c:90:b7:3c:81:9c:f5:9e:bc:ac:1e:ce:
                    01:10:eb:5b:b9:69:cf:ce:9b:5b:8f:12:4c:e9:05:
                    ca:9b:06:83:bc:f1:a0:27:b0:ee:a8:95:38:34:cc:
                    6f:d5:f5:be:3e:a1:36:cd:ef:e9:1a:1d:97:03:e5:
                    4c:27:a3:3e:b3:e7:2e:d8:40:0f:c4:ba:fe:ad:08:
                    4d:d2:17:19:d0:46:3d:e5:5f:2e:15:03:63:0a:b1:
                    ff:9b:22:db:dd:01:b6:8f:d6:ae:7e:76:04:0c:55:
                    5f:46:aa:0b:8a:08:37:21:6c:c9:8d:af:9b:c4:85:
                    46:72:f8:5e:0d:b6:8a:76:88:58:8e:44:64:2d:4b:
                    cd:3b:1f:06:9c:da:1b:38:bf:7b:89:95:c1:e7:a6:
                    67:d8:42:22:81:cf:26:65:3e:7a:16:41:65:c7:d6:
                    98:da:85:c8:5d:45:39:c9:e1:19:0b:8c:3d:33:96:
                    32:72:f4:73:27:3f:44:bf:7d:6f:66:13:bc:55:38:
                    fb:dd:62:db:8f:68:a4:9e:7e:ff:12:d0:35:8f:26:
                    df:5c:22:67:da:d3:e1:86:ae:39:0c:f4:1b:6d:c1:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:BF:94:D5:9E:4B:A3:5B:C0:42:40:F7:E3:DC:65:E4:E9:C0:BA
            X509v3 Authority Key Identifier:
                keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/3137302e3235342e38322e302f32342d3234203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:25:c0:4e:69:94:96:51:63:d7:ce:2b:a0:54:b4:0d:34:
         f9:8f:74:44:9e:27:aa:37:30:60:68:25:4d:db:1a:09:ff:9b:
         6b:af:b9:da:09:4f:98:a3:81:15:8f:2a:36:49:c5:45:f3:a9:
         d0:27:1e:25:ab:97:df:22:31:7e:00:97:62:77:ef:c8:03:cd:
         3d:c2:59:fa:d3:bd:23:7b:44:57:85:e6:fe:bb:26:48:68:fe:
         17:ef:9c:6e:09:c6:7a:05:36:2b:4c:56:0f:6b:81:f5:7b:4b:
         10:ee:d8:e5:a8:92:08:35:44:be:75:a0:16:7d:de:ca:44:00:
         90:d4:a3:f7:8a:5a:70:11:54:9d:2e:5d:7c:0a:2f:b8:da:5d:
         d3:a7:04:f6:68:d9:85:e8:95:50:17:cd:11:f6:d5:f6:96:10:
         a2:3c:a5:a2:1e:99:b4:3c:00:55:73:ce:7f:4e:24:a3:44:53:
         6b:a6:d0:98:c7:0e:38:4c:4c:38:b5:1e:3b:7f:e6:cd:b0:e6:
         62:43:f7:35:a4:f8:46:f3:cd:61:02:ea:56:e4:53:aa:6b:64:
         aa:8b:7d:1d:42:59:71:83:47:1d:ba:3f:bf:75:22:eb:e8:f9:
         a2:d7:43:db:82:4f:d3:c1:45:dc:e1:94:83:e5:6b:15:bc:4c:
         68:5a:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org