Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139382e302f32332d3233203d3e20323636333130.roa
File:                     3137302e37392e3139382e302f32332d3233203d3e20323636333130.roa (raw, json)
Hash identifier:          OM6fkZgPfuwekddvA1MfCby/I3UydLezctaPyPHHo38=
Subject key identifier:   89:F4:23:A1:34:6E:39:AE:14:B7:17:CA:30:D5:76:9C:54:39:93:A9
Certificate issuer:       /CN=9B300EA8C8BD3FCB50F963E9992BCEC8D0013803
Certificate serial:       43D9053252308B63D8C04E68473928398146944A
Authority key identifier: 9B:30:0E:A8:C8:BD:3F:CB:50:F9:63:E9:99:2B:CE:C8:D0:01:38:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B300EA8C8BD3FCB50F963E9992BCEC8D0013803.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139382e302f32332d3233203d3e20323636333130.roa
Signing time:             Wed 20 Sep 2023 21:13:23 +0000
ROA not before:           Wed 20 Sep 2023 21:08:23 +0000
ROA not after:            Wed 18 Sep 2024 21:13:23 +0000
asID:                     266310
IP address blocks:        170.79.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d9:05:32:52:30:8b:63:d8:c0:4e:68:47:39:28:39:81:46:94:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B300EA8C8BD3FCB50F963E9992BCEC8D0013803
        Validity
            Not Before: Sep 20 21:08:23 2023 GMT
            Not After : Sep 18 21:13:23 2024 GMT
        Subject: CN=89F423A1346E39AE14B717CA30D5769C543993A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:66:dc:73:f2:2b:6f:33:4f:b6:67:30:0b:
                    5b:13:49:5d:8f:1e:29:7d:5c:89:dd:a6:33:07:cf:
                    59:38:54:9e:00:e8:15:9a:c5:1c:ca:b3:5e:9a:30:
                    ff:8d:f6:3f:14:51:a4:fa:56:63:e5:96:b6:73:e7:
                    dd:7a:db:18:79:83:44:1f:9e:df:f8:b5:34:dd:f5:
                    54:bd:52:b7:7e:0f:db:68:41:ec:28:15:99:41:8e:
                    ba:73:1b:4e:4c:2f:e7:3f:bb:72:a8:0b:d5:3d:2f:
                    73:17:f0:c7:a4:bc:59:a2:5e:cd:86:d6:b0:da:7b:
                    48:9c:9d:c9:cf:18:1c:a5:92:f0:f0:c6:58:ee:8d:
                    57:4c:04:01:73:39:d3:ba:56:81:06:3f:7b:59:ac:
                    bb:68:45:cc:fa:1e:f6:2f:94:5d:14:ea:3c:e7:50:
                    50:70:1c:3d:e6:5a:a1:36:d8:08:a3:86:8d:0d:d9:
                    f3:c5:2b:c9:a0:1c:ed:c3:93:12:0a:2f:b8:8d:f6:
                    60:f2:cf:84:47:98:4c:ef:c0:ac:85:9f:e6:32:c0:
                    5d:ec:d8:29:7d:5a:c3:f0:cc:3c:e7:0f:7a:da:e0:
                    4a:2a:c8:27:c0:06:c2:34:f2:5a:79:df:d3:d2:d1:
                    2f:6f:b5:fa:ae:c8:df:f3:8d:9d:18:42:0d:86:a4:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:23:A1:34:6E:39:AE:14:B7:17:CA:30:D5:76:9C:54:39:93:A9
            X509v3 Authority Key Identifier:
                keyid:9B:30:0E:A8:C8:BD:3F:CB:50:F9:63:E9:99:2B:CE:C8:D0:01:38:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/9B300EA8C8BD3FCB50F963E9992BCEC8D0013803.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B300EA8C8BD3FCB50F963E9992BCEC8D0013803.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/3137302e37392e3139382e302f32332d3233203d3e20323636333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:30:cf:96:5d:9b:cc:17:3e:06:c4:f0:92:82:c1:90:d5:
         59:d9:f3:48:c7:6b:9e:9e:ed:e5:9a:dc:ca:3d:ca:02:4d:3c:
         8d:a9:fb:6e:18:c6:3a:09:5c:fb:fe:6c:4d:9d:6d:09:8f:da:
         53:cd:98:42:ca:51:7d:20:80:2f:60:ea:e2:1c:61:55:de:dd:
         21:50:cc:b9:1d:5b:df:cf:ca:da:23:63:04:98:01:b5:27:8c:
         ac:ce:31:61:ae:86:06:49:c8:a6:9f:db:7b:ec:39:e2:4a:d9:
         ca:46:ba:24:97:d0:a2:f0:59:fd:a9:82:a1:69:52:da:fa:9c:
         07:a2:ad:f7:db:11:d1:28:12:e1:d9:d1:da:48:1d:91:6b:21:
         0c:85:9d:4e:2c:a6:83:d3:8e:9e:6d:b7:63:d2:15:50:2a:9f:
         28:4b:bd:68:e9:6a:aa:76:20:31:42:b8:21:6d:f6:af:f1:bf:
         a3:0d:9e:34:1b:ca:bc:bd:de:d8:d0:03:82:cc:cb:c6:c5:ff:
         90:9c:74:eb:b7:fe:ba:07:49:7b:25:db:21:6d:ab:ce:ca:66:
         01:63:e0:50:74:27:14:41:11:2a:04:88:11:01:42:4e:e8:2c:
         76:50:e5:85:84:b0:6b:4f:3f:27:df:a1:b8:b3:c5:65:32:74:
         7e:90:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org