Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
File:                     3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          D/IQ5m9K6ae9JxCOyfUN4BF96ZwiKya7+sN5Y6NJqiA=
Subject key identifier:   0B:01:B4:E0:43:E5:EC:4C:D2:B6:EF:9F:E1:E6:07:15:57:2C:B7:80
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       0D9936E909B71977F5058A152E553471595822CD
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:50 +0000
ROA not before:           Mon 14 Oct 2024 01:44:50 +0000
ROA not after:            Mon 13 Oct 2025 01:49:50 +0000
asID:                     28270
IP address blocks:        170.245.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:99:36:e9:09:b7:19:77:f5:05:8a:15:2e:55:34:71:59:58:22:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:50 2024 GMT
            Not After : Oct 13 01:49:50 2025 GMT
        Subject: CN=0B01B4E043E5EC4CD2B6EF9FE1E60715572CB780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:dd:80:c7:c7:2d:4d:2c:93:5d:4b:03:50:
                    9d:50:45:99:d1:f8:3f:92:82:e4:de:b8:75:02:c7:
                    1f:4a:3a:f3:c6:20:cc:85:13:e3:3d:34:d0:8e:28:
                    dc:39:f5:a2:b9:70:14:42:a0:9e:f2:30:55:db:cb:
                    9d:4e:62:84:b1:c8:c3:33:eb:a0:95:af:70:c3:ea:
                    9a:13:2c:94:03:3c:0a:a1:1a:1e:78:1e:9e:dc:69:
                    64:67:05:8a:81:60:c8:42:6e:40:6b:c7:be:bf:fc:
                    e1:c7:27:33:25:bf:22:81:2c:f5:f9:21:23:93:a9:
                    df:bf:d0:e5:c9:f2:36:dd:de:8c:07:b3:61:f7:9a:
                    d8:d3:61:02:53:68:ef:83:98:a8:40:03:85:24:0d:
                    af:61:26:46:cc:a1:8d:e5:33:d3:40:47:5a:df:00:
                    7f:dd:00:df:dd:33:ae:4d:63:87:cb:e8:6d:35:83:
                    bb:96:04:04:df:ea:0f:e2:f5:1e:b0:c7:5f:d3:13:
                    51:7a:d4:b1:14:bb:83:33:8e:6b:e6:a9:2a:3e:59:
                    68:4c:f6:45:a0:d0:a7:29:27:7e:a8:54:ab:a2:0a:
                    2c:9c:82:43:15:83:70:2e:3b:31:f5:d1:fa:2a:50:
                    b9:b9:6c:51:ff:c3:0b:88:fd:1f:66:d0:0c:48:c2:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:B4:E0:43:E5:EC:4C:D2:B6:EF:9F:E1:E6:07:15:57:2C:B7:80
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:09:29:e2:9a:07:77:31:64:1d:92:f3:19:18:92:ac:38:fe:
         8f:9c:28:5e:b7:2b:4f:ba:ff:18:2e:ef:0f:b3:8d:33:55:6e:
         23:2b:0a:1a:4c:08:73:24:14:b8:54:ee:d8:88:cd:ce:7a:22:
         0d:83:06:0d:c8:7d:72:6f:01:cc:49:62:f3:4b:c3:66:61:5f:
         08:86:bb:1d:07:df:b7:23:4a:80:b1:a7:72:1c:a6:12:0e:91:
         3a:ed:15:28:58:ef:91:9b:8b:57:b4:3a:0d:3d:2b:62:84:2d:
         09:36:c4:6f:66:d8:07:1b:c4:7c:0c:49:4d:30:b4:c6:1c:21:
         40:9e:93:10:4c:02:bc:90:8d:52:a7:2e:44:a8:7e:c6:c2:f3:
         58:b6:d1:a0:94:c3:59:96:79:41:36:6d:33:38:61:40:34:e8:
         aa:d8:4e:db:8a:b0:e5:ce:af:4e:10:ad:cf:7a:2b:4d:de:13:
         68:5e:aa:b1:23:14:0b:1d:ed:2f:9e:9e:08:59:7f:0b:cc:4a:
         97:c4:4c:43:30:a6:ae:fa:ef:02:3e:73:d0:07:24:64:ee:5e:
         05:c4:c6:0f:6f:d9:90:08:75:37:7c:ad:ae:09:00:9a:da:56:
         9a:d7:b6:26:30:7b:de:8e:09:d5:93:52:77:42:a5:77:4e:c1:
         4c:c4:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net