Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa
File:                     3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          pvl+147MkRP60spi+BW11lccEkqXXcl/16dKysvxqws=
Subject key identifier:   59:FB:FB:AF:01:19:58:D6:26:36:4B:C9:EF:9A:03:E8:99:8C:E5:D7
Certificate issuer:       /CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
Certificate serial:       258812DBD5E73352BD456076F937BEB8B80A643D
Authority key identifier: F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa
Signing time:             Fri 24 Feb 2023 11:31:51 +0000
ROA not before:           Fri 24 Feb 2023 11:26:51 +0000
ROA not after:            Fri 23 Feb 2024 11:31:51 +0000
asID:                     263321
IP address blocks:        170.233.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:88:12:db:d5:e7:33:52:bd:45:60:76:f9:37:be:b8:b8:0a:64:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
        Validity
            Not Before: Feb 24 11:26:51 2023 GMT
            Not After : Feb 23 11:31:51 2024 GMT
        Subject: CN=59FBFBAF011958D626364BC9EF9A03E8998CE5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:50:03:67:83:01:31:a0:9e:57:eb:7c:50:
                    2e:ea:cb:1a:2e:61:06:dc:f1:db:e8:7b:39:cf:94:
                    c9:1b:cd:58:8d:28:73:b3:fe:60:6b:36:ba:b7:b0:
                    02:a3:2c:46:d1:14:5d:dc:a2:a8:c5:76:09:54:8a:
                    6e:67:ee:d1:81:25:9d:9b:2d:72:94:0c:68:d8:93:
                    05:e4:d3:b5:db:5e:22:7b:63:f3:1d:1d:15:39:77:
                    dc:9f:84:d7:7c:0f:3f:18:51:bb:df:db:f4:86:fe:
                    91:7b:2f:d3:94:d6:15:8f:77:96:83:f9:ce:1a:5d:
                    9f:64:16:4d:33:0f:ad:4f:60:5a:1d:c8:d7:3f:a6:
                    9c:83:87:ea:6d:2f:7f:4c:98:08:c6:46:40:55:09:
                    3c:0f:f5:45:e6:81:ea:0c:d1:b0:2b:b7:c4:96:d1:
                    de:44:6a:79:1f:1b:9a:f6:5f:be:ba:1f:75:cb:50:
                    df:38:21:4b:28:d4:1a:e1:22:b1:d2:86:4d:9e:8b:
                    25:8f:e7:e1:e2:61:95:94:e0:d6:e9:37:9a:7b:77:
                    cf:43:b5:64:2e:89:6e:ec:ed:86:44:d1:84:ae:8d:
                    7c:24:6e:43:73:ed:ed:64:2e:59:42:24:e0:ee:ad:
                    ee:53:8d:f4:db:da:f4:a2:a2:38:c3:d6:3e:30:18:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:FB:AF:01:19:58:D6:26:36:4B:C9:EF:9A:03:E8:99:8C:E5:D7
            X509v3 Authority Key Identifier:
                keyid:F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:90:14:24:7f:df:50:90:81:23:e1:0d:66:a6:39:7d:ff:24:
         a3:3f:83:7c:f2:8b:c3:06:33:73:80:70:8d:8b:d6:9c:61:9a:
         2b:73:7c:64:24:1f:2b:03:1d:3a:02:1a:a6:5c:36:1d:53:2b:
         0d:a9:b4:a0:f5:b9:c9:85:fa:d4:6b:46:f1:5c:13:99:53:6d:
         2c:09:3e:73:ff:75:9f:35:00:a0:9a:64:85:24:89:3d:bc:15:
         d3:ac:0d:ab:b0:40:27:31:fe:ac:a2:6d:5b:78:a5:b4:d2:a3:
         67:ff:20:77:eb:89:a1:fb:ba:d5:a3:a5:24:ae:01:f9:86:43:
         a4:02:90:2f:25:33:9d:d8:f1:74:0f:39:39:83:64:0c:e9:f7:
         ad:06:fc:8d:e8:8e:d3:71:d5:67:52:20:1c:3d:1b:5f:4b:53:
         55:ca:4f:3b:06:ee:f6:81:16:16:d2:f1:23:bd:86:1c:92:6e:
         17:e9:e5:cc:71:33:3b:ec:b2:68:f6:40:95:2b:ab:3b:d3:69:
         5e:c2:bf:65:f4:da:95:d7:e1:b2:e8:e7:da:43:f0:48:c8:c1:
         d5:d6:5a:01:87:ff:ae:3d:70:c3:ac:20:a6:83:38:a3:b9:e0:
         e8:bb:c8:7c:2c:4b:c3:55:bf:f7:34:d6:c9:2f:aa:d2:71:a7:
         22:d1:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org