Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/3137302e38302e37362e302f32322d3234203d3e20323636333731.roa
File:                     3137302e38302e37362e302f32322d3234203d3e20323636333731.roa (raw, json)
Hash identifier:          XIvvzYOdydgxkfiJnfwLQSo5REYuM/z2AbbVEnfdiCQ=
Subject key identifier:   31:D5:C2:85:B0:F7:9A:FC:72:2F:6D:15:6E:65:4D:9A:42:89:F0:8E
Certificate issuer:       /CN=C4B88A7B913815E7F9917402C3CC7931DF14AEE7
Certificate serial:       058EEE0D616D251FC00438D98D4EB9687D93A276
Authority key identifier: C4:B8:8A:7B:91:38:15:E7:F9:91:74:02:C3:CC:79:31:DF:14:AE:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/3137302e38302e37362e302f32322d3234203d3e20323636333731.roa
Signing time:             Sun 20 Nov 2022 23:28:44 +0000
ROA not before:           Sun 20 Nov 2022 23:23:44 +0000
ROA not after:            Sun 19 Nov 2023 23:28:44 +0000
asID:                     266371
IP address blocks:        170.80.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:ee:0d:61:6d:25:1f:c0:04:38:d9:8d:4e:b9:68:7d:93:a2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B88A7B913815E7F9917402C3CC7931DF14AEE7
        Validity
            Not Before: Nov 20 23:23:44 2022 GMT
            Not After : Nov 19 23:28:44 2023 GMT
        Subject: CN=31D5C285B0F79AFC722F6D156E654D9A4289F08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:cd:ad:82:1c:2a:56:7b:7b:15:b8:d1:08:
                    84:22:d7:39:41:86:7c:04:11:a4:d6:53:38:da:fe:
                    87:e6:33:6a:2d:3b:18:42:d1:19:e0:42:51:7d:5f:
                    47:33:ed:a7:26:a8:e6:e8:8d:6f:54:ac:06:be:2b:
                    3c:a2:b6:f0:7b:0a:72:ad:3c:c4:86:a5:48:02:eb:
                    93:d7:f2:5a:36:f8:02:8a:66:36:da:18:c1:2c:82:
                    41:36:b3:7a:93:f0:23:ab:82:2f:dd:f3:fc:5b:a8:
                    61:b4:8a:3a:32:f2:66:1e:a1:7c:66:b2:f9:49:e2:
                    f8:78:9b:89:40:d7:d5:5c:a0:28:e7:cc:40:8c:c3:
                    9f:8a:e4:5d:a5:fc:f7:45:74:d2:2a:c1:e6:bf:7d:
                    db:09:08:1d:fd:b7:59:87:42:f0:4f:92:9a:00:5f:
                    71:4c:49:61:75:f5:df:b7:f9:de:3c:d5:16:dc:d0:
                    e4:88:4e:a7:58:17:01:70:b6:ce:6f:ae:a3:69:64:
                    d8:b1:1b:3e:6b:d9:01:be:d8:57:1a:3d:2c:85:ca:
                    cc:ef:2a:65:a5:92:05:e9:db:d9:8b:93:43:96:4d:
                    68:5a:ee:9e:ff:10:46:6e:1d:28:5d:f7:bd:8d:50:
                    52:a2:43:fd:01:c1:44:8f:95:83:71:07:b0:e6:7d:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:C2:85:B0:F7:9A:FC:72:2F:6D:15:6E:65:4D:9A:42:89:F0:8E
            X509v3 Authority Key Identifier:
                keyid:C4:B8:8A:7B:91:38:15:E7:F9:91:74:02:C3:CC:79:31:DF:14:AE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4B88A7B913815E7F9917402C3CC7931DF14AEE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/3137302e38302e37362e302f32322d3234203d3e20323636333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:4f:bc:b1:c1:1a:a3:d8:b7:65:a9:c2:b1:4b:73:d4:c7:
         3a:19:c7:7a:43:54:45:1e:a3:08:41:1c:5a:ec:2c:d7:fd:78:
         dc:9e:ef:68:b5:b2:d9:e0:62:98:52:85:41:61:86:26:ac:ee:
         ca:3f:f9:22:65:cb:a0:5f:85:16:d6:62:1a:be:40:88:58:39:
         71:9c:d1:c0:8c:06:71:ff:ec:8a:06:3e:2a:a5:f5:70:64:5e:
         22:b0:d7:b2:0d:a5:52:6c:16:4d:c7:d9:30:fd:04:c2:c0:a6:
         38:29:4d:10:e9:77:f9:68:fc:2f:41:9b:b9:80:9e:f4:4c:68:
         7b:9a:86:b5:b3:7f:1b:e1:5c:e6:5b:53:c4:4b:1e:50:c4:9e:
         99:53:aa:c4:01:1a:62:3d:cb:6c:94:a4:ba:87:4c:9b:bd:f7:
         8f:a6:c2:0b:1f:97:71:2e:86:48:e8:e5:3f:79:a3:45:31:41:
         54:ff:a6:3b:23:ae:70:b0:aa:ca:80:0e:07:f1:4d:8a:2d:3a:
         3c:55:66:04:8d:1d:77:b6:22:70:0a:5d:07:2a:8a:e5:15:39:
         2d:4b:45:65:98:ef:de:61:5b:16:14:10:75:62:fe:11:6c:20:
         32:25:bc:af:13:a1:7a:56:9b:bf:93:bd:18:2b:15:3b:1c:a2:
         de:fc:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org