Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          HgFUkFmjnZWmWYGaa62csTGaiXF0AZzICrUWCu+DVXo=
Subject key identifier:   54:BC:DC:D4:10:CB:4F:9A:E7:4A:8C:A7:75:8C:D9:CD:82:40:CA:FB
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       1578240F959D69A1F9493AECFAAB70ABF9964D56
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:27 +0000
ROA not before:           Fri 09 Feb 2024 10:54:27 +0000
ROA not after:            Fri 07 Feb 2025 10:59:27 +0000
asID:                     262485
IP address blocks:        170.238.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:78:24:0f:95:9d:69:a1:f9:49:3a:ec:fa:ab:70:ab:f9:96:4d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:27 2024 GMT
            Not After : Feb  7 10:59:27 2025 GMT
        Subject: CN=54BCDCD410CB4F9AE74A8CA7758CD9CD8240CAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:8f:e1:64:f4:6a:e9:80:16:1b:1b:4a:19:
                    da:a1:80:3c:78:5d:ae:cd:bc:f6:35:60:cd:ce:01:
                    02:7a:3a:5a:eb:51:ba:e0:d0:34:ea:94:4a:d1:7c:
                    93:52:69:df:48:56:de:55:58:04:0d:e0:ee:16:93:
                    ef:d2:d7:1a:60:a1:c4:1d:a2:00:d0:ff:84:02:e7:
                    1e:9d:a7:66:c0:44:36:13:7c:db:ae:72:d4:24:60:
                    04:ad:d5:7a:a7:fd:99:99:93:eb:dd:ad:e3:4e:a6:
                    7d:7f:a1:7f:be:0d:4d:fd:00:06:63:2f:df:78:06:
                    76:cc:15:82:de:9f:92:f8:7b:3b:41:1e:9f:99:6a:
                    8e:e1:4a:b7:36:13:45:b5:58:5e:37:e1:41:e6:3f:
                    70:23:eb:80:47:e8:61:4e:e2:11:19:d3:ff:7a:a6:
                    cf:50:5b:73:0c:05:db:c2:69:67:dd:79:97:4b:79:
                    3e:83:cb:3c:fc:5f:3d:5e:d1:36:ea:34:a4:0c:22:
                    32:dd:a6:0c:62:e9:cf:5d:33:f7:92:cb:20:62:89:
                    7a:76:f4:6c:84:79:6d:e5:98:3d:95:53:d9:36:43:
                    1b:4f:aa:a2:d1:fd:2a:c2:2c:0e:e5:ab:e5:46:c0:
                    3b:03:8c:b7:02:34:38:4a:2a:48:e8:56:e8:5e:71:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:DC:D4:10:CB:4F:9A:E7:4A:8C:A7:75:8C:D9:CD:82:40:CA:FB
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:d9:61:92:db:f6:5d:9b:df:b5:e7:8e:ff:2f:ab:f5:11:
         ea:fc:9f:5c:2e:1b:84:a6:9d:8b:6c:f5:67:5c:9e:43:c4:27:
         f4:fe:55:d5:ac:1b:85:6c:fd:74:64:20:00:3c:0f:27:66:7d:
         25:32:3c:9c:67:88:92:a5:1a:5d:aa:d2:2b:bd:5b:6d:54:25:
         f3:7f:9f:78:07:17:ae:d3:f2:83:a0:84:11:9a:26:3d:53:83:
         65:1f:9c:21:60:92:aa:60:19:b4:03:32:a9:cf:7d:1b:05:e9:
         0e:b2:5f:14:aa:87:be:6d:90:7e:89:62:8e:73:93:dd:53:f5:
         f0:d5:98:2f:c0:0b:75:93:04:8d:1d:f5:1f:a1:4d:e6:e8:bb:
         68:d8:50:45:05:6f:00:a7:a8:76:65:7e:73:d6:5d:28:10:5e:
         22:e9:ff:63:0b:92:ce:73:a6:fe:fe:de:98:8b:78:c1:a9:9b:
         e0:42:3c:8c:35:84:0e:d2:dc:08:08:3c:70:36:ba:0d:7b:63:
         3e:e6:1e:13:f9:9b:ee:82:68:f8:bc:14:64:5c:55:4d:68:0c:
         99:4d:03:b7:0d:39:e0:1a:ba:35:ec:c7:f8:1c:33:47:b9:51:
         c4:bb:df:a0:fe:07:59:58:6c:56:f4:65:75:47:83:77:e1:33:
         9b:d9:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org