Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32332d3233203d3e20323632353639.roa
File:                     3137302e38322e37322e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          w4AQYOBlpJrvWtGhbyBmOFZMzJOHVyvuh/K/0ltVopQ=
Subject key identifier:   82:23:83:04:C1:0A:DC:44:88:BF:7F:E1:54:CD:72:79:0C:24:DA:6E
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       6D2D5C3B97B5F48A15976F3116FE232128A80099
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        170.82.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:5c:3b:97:b5:f4:8a:15:97:6f:31:16:fe:23:21:28:a8:00:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=82238304C10ADC4488BF7FE154CD72790C24DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:4f:6f:9d:06:72:a2:94:3e:73:97:46:2a:
                    85:79:bb:2e:81:6b:d4:54:66:a6:2e:2c:f7:23:e3:
                    4b:77:ad:46:35:a8:4b:55:1f:b7:68:f5:59:aa:32:
                    9e:a1:a0:52:31:5b:f9:c8:51:71:ea:45:0e:22:d3:
                    93:e7:36:a3:8d:a3:5d:a4:fe:f8:7f:82:6a:a6:28:
                    c2:63:43:4d:67:35:2d:14:de:b0:d3:93:83:93:70:
                    54:93:58:ee:f2:19:61:e6:49:78:fc:88:16:92:56:
                    72:ce:3d:82:7c:d7:61:0c:23:fa:5d:72:6f:61:fd:
                    6d:64:ff:af:8f:52:32:d9:0d:36:ed:e5:07:3e:68:
                    a5:84:66:39:15:e3:5a:e5:5a:c4:ba:94:5d:ba:3e:
                    b2:cb:cb:c3:47:77:7a:58:fe:26:7f:5c:d3:dd:ae:
                    e1:dc:45:63:4f:9d:6a:a5:cf:ca:8a:ca:85:e5:f3:
                    c9:e4:aa:68:28:88:e7:3f:60:5f:ec:70:a9:41:5e:
                    9b:b7:25:a1:e4:d3:82:07:49:0e:7b:41:90:b5:f9:
                    2a:0d:58:5a:bb:0a:f2:17:36:61:d3:0d:97:91:46:
                    00:b0:b3:e1:07:85:b4:fd:91:d9:bf:4d:4a:e6:36:
                    fe:0f:3e:b8:a9:e9:4d:b4:12:7c:5a:3b:24:a9:62:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:83:04:C1:0A:DC:44:88:BF:7F:E1:54:CD:72:79:0C:24:DA:6E
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:19:dc:eb:47:31:0b:59:02:bd:04:a9:1c:ea:19:97:ad:
         12:19:1d:07:77:3c:cb:de:2d:6b:85:02:20:87:d2:63:89:ec:
         b6:5a:e5:2f:6c:c4:6d:4d:4a:02:5e:40:3b:b9:0d:88:59:1a:
         bb:9f:b9:cc:ab:0c:1f:7c:5b:ff:09:7f:b7:a4:b3:91:7b:75:
         9e:4a:90:d1:3e:51:96:1c:60:f3:6e:e2:b7:49:b7:aa:61:db:
         ac:2a:b0:ba:5c:1c:18:be:dd:56:39:f6:72:91:59:56:be:85:
         08:04:39:58:e8:16:09:13:f9:ef:83:7b:23:24:8b:3c:b7:7d:
         5b:5e:a4:8a:09:dc:91:e0:a6:1a:d4:d0:f8:c2:aa:c5:9d:cd:
         07:10:14:d5:3b:56:a1:20:2f:87:a2:56:97:d0:58:25:6e:17:
         d2:63:4a:95:f5:ac:db:4e:94:fc:23:9f:d7:aa:53:cc:cc:c6:
         04:2b:22:b8:16:dd:bc:c3:29:19:ad:1c:5b:89:62:ec:93:7d:
         03:ed:f6:bd:d2:9f:5d:c2:fd:a1:01:0b:35:6e:b1:db:00:d8:
         38:22:9b:68:bc:85:79:7e:56:35:1e:59:ed:15:c0:9a:af:93:
         5d:03:a9:04:d8:02:80:75:44:45:52:02:62:bc:6a:ba:55:50:
         00:4d:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org