Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa
File:                     3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa (raw, json)
Hash identifier:          erp1lYsUSHf8ZzN4gjm0Voywa8E1kKoCNTqtu6f7KB8=
Subject key identifier:   D8:A1:F3:B4:A5:2F:AD:58:AF:AE:B2:73:DF:22:F5:B0:1E:7E:7E:A8
Certificate issuer:       /CN=6743C4A78A5B0898D12BF05B78A48F50CF8820D6
Certificate serial:       32D3143F0C7E831AA67EF3C4B28E0AB6F934E4DE
Authority key identifier: 67:43:C4:A7:8A:5B:08:98:D1:2B:F0:5B:78:A4:8F:50:CF:88:20:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa
Signing time:             Thu 28 Dec 2023 22:00:26 +0000
ROA not before:           Thu 28 Dec 2023 21:55:26 +0000
ROA not after:            Thu 26 Dec 2024 22:00:26 +0000
asID:                     266030
IP address blocks:        170.245.244.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:14:3f:0c:7e:83:1a:a6:7e:f3:c4:b2:8e:0a:b6:f9:34:e4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743C4A78A5B0898D12BF05B78A48F50CF8820D6
        Validity
            Not Before: Dec 28 21:55:26 2023 GMT
            Not After : Dec 26 22:00:26 2024 GMT
        Subject: CN=D8A1F3B4A52FAD58AFAEB273DF22F5B01E7E7EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:39:24:28:e2:cf:6f:3d:55:c9:ad:dc:3e:
                    78:56:f5:55:48:5c:b2:e1:0a:9b:f2:9b:0b:e9:70:
                    fe:2e:44:49:bb:99:73:9b:5b:5a:89:38:09:8f:a2:
                    0d:dc:02:93:34:84:69:82:1f:d7:30:c5:22:a5:68:
                    12:b1:68:98:24:eb:50:50:8b:bd:93:dc:c8:5b:15:
                    b9:0f:5c:08:a5:ad:87:2d:dd:dc:59:6f:06:57:12:
                    5f:75:e9:1a:ec:62:e7:d2:f6:cf:6e:5d:3f:4e:63:
                    f8:43:58:ef:35:67:e4:01:c2:0e:9a:60:8d:89:43:
                    3c:74:24:5c:88:dd:32:c0:f4:5f:ac:73:8e:5f:de:
                    f7:b4:b2:5f:db:75:db:15:53:86:6e:fe:d8:c4:2a:
                    cd:3c:01:e3:68:8c:fe:fc:1a:55:22:20:e2:e7:5a:
                    ce:dc:1b:37:22:8d:b1:f3:ed:08:62:16:7d:1d:14:
                    a5:64:f1:dc:91:8c:05:b6:d7:c8:6a:b6:50:a0:29:
                    ff:1c:35:c3:7d:b3:c3:8b:64:04:c3:34:a6:da:4d:
                    c9:f2:f5:dd:ee:e9:0f:f5:91:e5:98:ed:a2:ed:ce:
                    4c:f3:bd:e2:4c:43:9e:18:39:e4:8a:02:ab:4c:1f:
                    ad:9d:95:43:39:ed:8c:18:1d:de:83:13:c0:df:f2:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A1:F3:B4:A5:2F:AD:58:AF:AE:B2:73:DF:22:F5:B0:1E:7E:7E:A8
            X509v3 Authority Key Identifier:
                keyid:67:43:C4:A7:8A:5B:08:98:D1:2B:F0:5B:78:A4:8F:50:CF:88:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6743C4A78A5B0898D12BF05B78A48F50CF8820D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/0/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:ce:bb:25:ff:85:79:ab:07:00:ea:82:49:bf:69:96:cb:
         5a:f6:6e:4b:db:90:f0:95:51:f5:76:fb:2d:84:25:4c:5b:c7:
         54:08:e7:fe:43:58:36:c7:9c:ef:16:60:53:a6:2a:63:a7:d5:
         f8:c1:2a:4f:4e:a3:bc:29:8e:78:ca:04:f0:fd:6d:56:5a:d9:
         c3:e8:7e:65:12:8d:cb:03:4b:f9:a0:3d:6e:e9:ae:85:6e:46:
         65:1f:8d:fe:a9:39:ed:bb:71:e1:e1:61:fc:9e:4a:ea:c7:7e:
         7c:c9:4f:5b:e8:29:6e:34:f8:b8:0e:26:37:9d:f1:9f:3c:de:
         7d:66:9d:57:c8:47:32:e8:f6:fc:cc:60:2e:7e:30:af:7d:3f:
         a0:92:da:ee:8c:f6:f2:97:be:30:2e:c3:b8:9e:e4:32:6b:ae:
         eb:3f:1b:97:5d:0d:7a:0a:78:36:32:8a:55:06:69:e5:b9:0b:
         8f:41:52:92:29:ae:2e:4d:b2:50:18:0c:d7:54:1c:fd:60:7f:
         87:69:e5:87:86:e8:2e:80:ca:70:8a:47:4b:77:0d:80:bc:d1:
         4d:f1:ce:03:e6:45:f8:a3:53:c9:35:61:88:80:e2:d7:93:f2:
         de:89:53:37:33:3c:7c:d2:72:b0:98:6a:80:3d:cf:a6:ea:da:
         09:29:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org