Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137302e3233312e34342e302f32322d3233203d3e20323632373332.roa
File:                     3137302e3233312e34342e302f32322d3233203d3e20323632373332.roa (raw, json)
Hash identifier:          iZuNpXdCX9lhHudptfeJJiScCiapg1sH4WtQR9G8hgw=
Subject key identifier:   DD:B3:EC:F3:BB:72:80:80:6C:DB:26:FE:02:07:7A:E4:81:3F:DE:38
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       3B20EB154075679992CBE270104D1D34DA7829C8
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137302e3233312e34342e302f32322d3233203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:32 +0000
ROA not before:           Fri 02 Sep 2022 03:09:32 +0000
ROA not after:            Fri 01 Sep 2023 03:14:32 +0000
asID:                     262732
IP address blocks:        170.231.44.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:eb:15:40:75:67:99:92:cb:e2:70:10:4d:1d:34:da:78:29:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:32 2022 GMT
            Not After : Sep  1 03:14:32 2023 GMT
        Subject: CN=DDB3ECF3BB7280806CDB26FE02077AE4813FDE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:de:a1:82:b4:d5:93:84:6f:11:86:88:85:
                    df:6d:94:af:1d:68:ab:df:d7:11:ea:5e:51:56:3a:
                    e7:93:f6:e8:1f:96:89:1d:10:2d:9b:1f:6c:69:0a:
                    85:f4:73:3e:74:a4:39:2e:67:d1:ed:9f:61:a2:99:
                    e2:5b:48:ad:44:47:82:6a:52:17:a3:c3:eb:b2:ad:
                    09:86:c8:84:0f:23:e9:1c:3b:12:3e:0e:25:c9:80:
                    3e:bb:02:2d:79:73:46:0d:4d:03:ef:9a:8b:87:a0:
                    c2:a6:13:c3:c1:ed:fd:07:75:40:08:e1:31:86:75:
                    a8:81:9f:cb:dd:7c:60:a0:ea:15:5f:11:24:ef:e5:
                    fe:6a:ad:cc:f7:d2:8f:46:2b:5f:8b:8c:c8:78:f1:
                    c8:ca:4e:4f:ea:27:d3:43:cf:59:ad:15:c7:72:b8:
                    fc:d9:b6:8c:32:cb:4a:ae:3f:a0:e8:f8:b6:a9:7c:
                    e1:42:15:ca:da:e7:0e:60:39:39:dd:16:6b:2b:4b:
                    c6:2f:70:a4:ea:2c:01:de:eb:05:b6:50:13:ef:ed:
                    5c:0f:d0:7d:21:fc:e3:dc:0a:3c:22:29:21:df:ab:
                    1a:5c:b8:45:8a:8c:f7:7f:29:4d:4c:0a:a1:2d:86:
                    45:08:b0:62:08:b0:53:b5:e2:1f:77:3d:86:93:60:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:EC:F3:BB:72:80:80:6C:DB:26:FE:02:07:7A:E4:81:3F:DE:38
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3137302e3233312e34342e302f32322d3233203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:37:d7:25:7f:09:49:1b:87:17:c6:e1:e9:fb:49:6a:11:49:
         a4:d2:a1:d8:41:2b:42:48:e4:69:6a:56:b9:77:90:50:dd:1b:
         0d:c7:ee:81:28:e6:02:53:79:80:c2:23:ef:32:67:6a:c0:d8:
         60:fb:34:68:a8:41:e0:37:90:ac:2f:f2:ca:34:c6:2f:8a:74:
         a2:1f:4d:cc:21:77:49:2d:02:08:15:84:61:1b:20:97:25:db:
         f3:ef:f3:33:ee:9f:90:02:a6:43:65:a9:1b:eb:80:3c:1f:17:
         c3:da:e1:65:44:d1:30:a1:41:e8:63:2d:01:77:f1:5e:6c:2a:
         96:4a:e6:85:23:29:2e:a8:ea:dc:42:54:08:6d:38:7a:35:b9:
         cd:4a:aa:8b:cd:bd:5f:ff:a6:70:69:de:c5:28:c4:6a:e4:b8:
         12:82:93:01:8f:62:37:74:87:13:d0:22:26:f3:da:83:9f:02:
         2e:67:2d:a7:7d:2d:05:1b:49:8d:a5:37:52:a8:ac:ad:05:6e:
         27:14:22:1e:2a:ba:0d:bf:98:5d:fd:6f:42:fc:1a:1a:06:f9:
         15:df:11:43:16:17:43:b0:80:50:ad:fd:d7:80:e0:b1:09:ab:
         30:e6:31:d5:74:62:b8:fc:f4:a9:27:ac:62:5e:17:8a:57:a1:
         56:ee:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org