Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137342e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137342e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          Ymxmiex6OFXpZBjeeFD1raVC/YmyrEMFLbaqiMjcsEQ=
Subject key identifier:   B9:30:7E:30:D9:C8:9D:6E:BF:B8:E4:D5:36:66:46:CC:6B:A3:95:3E
Certificate issuer:       /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial:       032391842339E79FC6137BDFA287662A5BAAC137
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137342e302f32342d3234203d3e20323634303232.roa
Signing time:             Wed 03 Jan 2024 12:10:31 +0000
ROA not before:           Wed 03 Jan 2024 12:05:31 +0000
ROA not after:            Wed 01 Jan 2025 12:10:31 +0000
asID:                     264022
IP address blocks:        170.245.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:23:91:84:23:39:e7:9f:c6:13:7b:df:a2:87:66:2a:5b:aa:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
        Validity
            Not Before: Jan  3 12:05:31 2024 GMT
            Not After : Jan  1 12:10:31 2025 GMT
        Subject: CN=B9307E30D9C89D6EBFB8E4D5366646CC6BA3953E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:9a:80:ae:a2:3d:d6:c2:fc:e2:03:96:b7:
                    91:3b:8c:6d:e2:ee:8e:ca:af:eb:bc:46:39:a3:91:
                    20:4a:b3:27:e2:63:01:2b:e8:d8:71:58:47:b5:f2:
                    f6:c5:0d:a1:e6:ff:64:70:12:c6:57:63:94:98:ee:
                    00:75:34:ef:90:19:19:a3:50:c4:c9:5c:78:c1:e5:
                    e1:94:c3:42:db:b6:39:1b:f7:81:78:41:23:08:d7:
                    f2:6e:8a:fd:23:11:0c:62:78:e4:f7:f8:28:48:6e:
                    2d:57:82:a4:38:09:17:25:d9:3a:a9:17:ee:f9:80:
                    8d:7c:c8:9a:a1:f3:45:f1:c6:a1:a3:bf:c6:99:75:
                    03:8d:2d:c5:a4:a4:2b:3b:03:c5:32:3f:5a:ed:47:
                    fd:46:03:3d:a8:6b:9b:c0:c0:10:99:7f:aa:26:ae:
                    cf:b9:e3:f3:e1:9e:d4:7c:2a:95:ed:a6:ba:5c:b2:
                    59:87:70:6f:d6:f0:e2:b3:4d:b0:07:e0:5e:b1:95:
                    43:75:64:8b:ab:e0:89:64:fe:eb:b6:da:1c:ec:95:
                    84:6c:06:3f:ce:46:e7:5f:90:d6:7a:44:42:d8:26:
                    26:b3:79:32:04:73:ff:8d:67:c8:4b:9b:af:2b:97:
                    34:a8:4a:07:1e:e6:0f:16:96:8a:57:a1:67:74:14:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:7E:30:D9:C8:9D:6E:BF:B8:E4:D5:36:66:46:CC:6B:A3:95:3E
            X509v3 Authority Key Identifier:
                keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137342e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:33:27:5c:8e:e7:ce:51:3c:13:5c:e9:e1:26:28:8c:65:09:
         2c:3b:4f:d0:17:4e:f2:e2:40:4e:ae:bb:32:d5:d6:e3:95:2b:
         d6:da:bb:8b:4a:5f:f3:8e:7a:86:10:e5:ad:58:89:25:24:90:
         31:d2:5f:2b:ae:60:c8:79:85:e4:2a:e8:62:b1:bd:13:15:54:
         35:00:46:ca:b9:fc:b5:f5:76:0e:49:a3:b6:3b:0a:de:5e:4f:
         33:a2:6b:c9:22:85:7b:07:70:dd:94:cc:d2:65:63:7b:2f:65:
         f2:b2:6d:a6:da:ea:a3:ac:0e:87:32:9b:01:1a:7b:6c:53:bb:
         01:8d:07:b2:f2:55:a2:ba:0d:52:e0:50:8f:45:73:cf:22:f9:
         93:d7:0c:c7:e6:c1:aa:db:cb:18:33:d3:f3:34:e7:4c:a4:8f:
         93:75:d4:09:17:52:12:ff:ad:1c:2b:b9:f0:41:ab:44:72:1b:
         c3:e4:5c:de:c4:14:f5:af:13:64:c2:f8:15:bf:06:bf:60:ef:
         e7:54:43:37:4c:5c:2e:c6:45:67:de:01:ab:5d:1c:d6:7f:20:
         da:7d:a1:cb:21:32:3f:4b:28:e1:cd:54:d1:bd:af:bb:80:76:
         7b:44:7a:f1:a7:76:a7:85:73:9c:ae:a9:55:4d:48:49:b0:bb:
         bd:b7:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org