Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137302e3234352e3130342e302f32322d3234203d3e20323632373631.roa
File:                     3137302e3234352e3130342e302f32322d3234203d3e20323632373631.roa (raw, json)
Hash identifier:          qEuyPwdvGTWufrA4+uy07jdugYj/Ez4tMDA+yqnfA2I=
Subject key identifier:   08:1C:BB:15:7A:D5:A7:AC:73:09:F7:A5:93:3C:4E:A7:84:F0:DF:75
Certificate issuer:       /CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
Certificate serial:       186EE083C5526F0908B5BB114E7501B2ECA645F7
Authority key identifier: 50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137302e3234352e3130342e302f32322d3234203d3e20323632373631.roa
Signing time:             Fri 29 Mar 2024 19:14:00 +0000
ROA not before:           Fri 29 Mar 2024 19:09:00 +0000
ROA not after:            Fri 28 Mar 2025 19:14:00 +0000
asID:                     262761
IP address blocks:        170.245.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:e0:83:c5:52:6f:09:08:b5:bb:11:4e:75:01:b2:ec:a6:45:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
        Validity
            Not Before: Mar 29 19:09:00 2024 GMT
            Not After : Mar 28 19:14:00 2025 GMT
        Subject: CN=3082010A0282010100CE4648A771AF00D222D5A935E12D31047BD5028B0FAB912113B26DA674791CA30AABD13818737FD6E000C10B1C5343E789D6B59D5A07F0C7F61F140156B36FCA8B43BC992002BD0155901DC74BA5768DD774887B4C0F6287A8D597D256DC357DA528A0D9961D7827B2B9E5B744396B5959215FDC9BAF9B300370FF492A41640AE4AE1802A2503A5046BF0FAA3BCD1E2D0A591D214ACB395FB8AE8EEDFAA5033C983C2518AC822F89294E09052CC0EFF2D0FA6AB40E632612691C9DFE697DC3EF361BA72B314574024098F6DEFF2F50C9D8B8504801318EF87B83C74B11C0FDD81FBEAB42E13CB83FA514B8335B24E47305A55A16FE1EFA17DBBC21E1751862510203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:48:a7:71:af:00:d2:22:d5:a9:35:e1:2d:
                    31:04:7b:d5:02:8b:0f:ab:91:21:13:b2:6d:a6:74:
                    79:1c:a3:0a:ab:d1:38:18:73:7f:d6:e0:00:c1:0b:
                    1c:53:43:e7:89:d6:b5:9d:5a:07:f0:c7:f6:1f:14:
                    01:56:b3:6f:ca:8b:43:bc:99:20:02:bd:01:55:90:
                    1d:c7:4b:a5:76:8d:d7:74:88:7b:4c:0f:62:87:a8:
                    d5:97:d2:56:dc:35:7d:a5:28:a0:d9:96:1d:78:27:
                    b2:b9:e5:b7:44:39:6b:59:59:21:5f:dc:9b:af:9b:
                    30:03:70:ff:49:2a:41:64:0a:e4:ae:18:02:a2:50:
                    3a:50:46:bf:0f:aa:3b:cd:1e:2d:0a:59:1d:21:4a:
                    cb:39:5f:b8:ae:8e:ed:fa:a5:03:3c:98:3c:25:18:
                    ac:82:2f:89:29:4e:09:05:2c:c0:ef:f2:d0:fa:6a:
                    b4:0e:63:26:12:69:1c:9d:fe:69:7d:c3:ef:36:1b:
                    a7:2b:31:45:74:02:40:98:f6:de:ff:2f:50:c9:d8:
                    b8:50:48:01:31:8e:f8:7b:83:c7:4b:11:c0:fd:d8:
                    1f:be:ab:42:e1:3c:b8:3f:a5:14:b8:33:5b:24:e4:
                    73:05:a5:5a:16:fe:1e:fa:17:db:bc:21:e1:75:18:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:BB:15:7A:D5:A7:AC:73:09:F7:A5:93:3C:4E:A7:84:F0:DF:75
            X509v3 Authority Key Identifier:
                keyid:50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137302e3234352e3130342e302f32322d3234203d3e20323632373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:d8:a0:15:cb:fb:b5:fd:f1:f9:2f:6e:bf:3d:95:22:5d:
         c3:f9:cc:d3:88:ce:2d:51:46:c4:85:4a:85:0e:6b:32:8a:e2:
         36:05:a1:42:22:6a:46:95:a1:87:68:48:0a:67:69:68:8b:42:
         a4:73:3d:30:a6:21:92:df:6f:c3:2d:70:ed:59:07:27:ea:c4:
         f6:15:30:07:ef:6a:2d:58:7a:f9:58:d4:b3:34:d0:4f:e0:e3:
         de:3a:3f:4f:a8:b1:6b:c3:2c:5f:fa:71:f3:44:6b:08:06:eb:
         1e:3d:63:c5:00:09:d6:d9:a2:87:d8:ba:33:db:e9:94:01:ab:
         fc:fd:82:16:ed:ec:ce:67:b8:e6:5b:68:b5:29:8d:b5:aa:7f:
         49:8b:2c:95:2e:2a:4b:c8:1d:f7:9f:cb:6b:2e:b9:e9:fa:2c:
         5c:51:05:59:94:fe:f9:b2:1d:a9:86:8d:82:e1:bc:2b:b4:ee:
         0a:05:e9:b8:a7:2a:1e:6f:a0:a4:33:fd:f1:2f:d2:5a:d9:65:
         4b:b7:3e:1d:ca:79:ff:a2:62:6e:7e:d5:3d:59:0e:17:a9:33:
         68:b4:0c:30:9f:a3:e2:c5:9f:86:e9:cc:ec:b7:17:ef:e7:29:
         2a:59:55:17:ad:f0:f4:70:94:14:a8:78:14:bf:75:6c:b2:2a:
         9b:44:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org