Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
File:                     3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa (raw, json)
Hash identifier:          hjb52vTI/tm4As5lesC8VTpJKGjRX00Hfp1whbsDYn4=
Subject key identifier:   49:1A:E8:93:99:DE:21:59:ED:3E:31:2A:A0:F6:E7:B2:7B:31:2E:9B
Certificate issuer:       /CN=32149EE0DC10ABC770C49D053156E085CC1E2144
Certificate serial:       3657FFDB5BE01789A33E32F5EDC02EBC0C755475
Authority key identifier: 32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
Signing time:             Mon 19 Feb 2024 18:24:37 +0000
ROA not before:           Mon 19 Feb 2024 18:19:37 +0000
ROA not after:            Mon 17 Feb 2025 18:24:37 +0000
asID:                     266509
IP address blocks:        170.244.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:57:ff:db:5b:e0:17:89:a3:3e:32:f5:ed:c0:2e:bc:0c:75:54:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32149EE0DC10ABC770C49D053156E085CC1E2144
        Validity
            Not Before: Feb 19 18:19:37 2024 GMT
            Not After : Feb 17 18:24:37 2025 GMT
        Subject: CN=491AE89399DE2159ED3E312AA0F6E7B27B312E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:43:af:97:57:e6:2c:09:ef:72:2f:8f:2a:
                    1f:69:fa:fe:0f:d1:47:4d:07:c9:7d:86:1c:96:66:
                    d9:c6:90:a3:b3:67:52:45:a1:93:0b:46:5e:e9:99:
                    ee:02:9e:2a:eb:b9:3d:6b:3b:e3:73:22:22:47:3f:
                    29:1b:28:61:d5:e4:f1:84:bc:3e:54:18:2f:c9:4c:
                    87:0d:33:4d:bd:23:3c:60:10:d7:d3:66:c4:7a:0b:
                    f4:af:78:02:0c:30:97:6a:b2:7e:a1:54:86:5e:5f:
                    82:5e:2f:3a:cc:e3:4f:a3:a2:73:42:ef:22:b4:ec:
                    ad:89:c7:d2:56:64:b9:4c:20:76:41:7b:c1:f2:76:
                    af:53:e9:c5:a4:dc:fc:75:bd:75:4e:14:10:4e:6a:
                    6e:6b:71:32:0b:fa:d3:f4:b6:15:da:a9:f4:f6:94:
                    64:5a:d5:eb:dc:01:82:30:bc:05:c9:98:7b:cc:f4:
                    34:43:cb:e6:07:4d:8d:b5:16:1b:fd:77:25:40:5a:
                    bf:d9:0c:2e:74:fa:38:24:1b:7e:81:5c:c0:f8:b9:
                    32:d3:f0:e6:f3:c5:0f:aa:fd:5c:51:2a:3f:70:40:
                    f8:ce:ab:6c:76:d4:66:7e:90:14:b4:9e:a4:35:5b:
                    3c:94:da:59:d0:74:6d:22:c6:ff:9c:b6:4c:65:8e:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1A:E8:93:99:DE:21:59:ED:3E:31:2A:A0:F6:E7:B2:7B:31:2E:9B
            X509v3 Authority Key Identifier:
                keyid:32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:d7:73:ac:ed:17:91:fe:1d:c8:e1:0d:9f:83:62:9a:11:
         29:8b:29:cf:64:a4:77:00:ec:69:0a:6d:58:c2:55:86:ec:17:
         ab:b6:34:fd:fa:a5:58:3d:7a:89:f3:25:32:36:14:2e:fc:8d:
         9b:40:fb:16:40:57:75:b7:31:16:49:d9:46:6e:c2:6a:29:4f:
         af:6f:93:9f:74:b2:36:28:a0:28:d9:c8:21:f8:2b:e6:a2:ca:
         be:e2:f5:65:c3:37:09:d6:3e:19:08:03:9f:e1:ca:1d:c3:63:
         b6:e7:7d:91:13:71:b9:47:0a:52:79:c0:64:71:87:86:27:a8:
         26:81:0a:bf:f4:2c:82:bc:a9:10:5c:3a:90:b3:0e:f8:d4:6f:
         24:8d:2f:b1:6b:83:9e:43:76:2d:f7:70:ab:40:f8:6d:11:4e:
         5f:fc:85:75:98:46:f2:24:c3:1d:db:0c:e4:ac:b9:d5:50:ab:
         92:79:3c:6b:ae:6c:7c:0d:a0:c8:ce:ea:ec:13:ae:e9:a7:7c:
         a0:af:d3:04:74:bf:cf:b6:dd:35:73:e6:32:15:55:cd:d8:c9:
         3e:3b:c5:de:94:38:8a:e4:3f:21:f7:ff:97:48:60:ad:61:94:
         4a:0d:f3:f4:4d:fb:54:21:62:08:82:88:88:19:aa:fe:26:3a:
         25:94:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org