Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
File:                     3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          Q8TlPE00e7zIFMZf8Nx/C2dFNNiGCszF2q7QRE2TbbQ=
Subject key identifier:   B2:1C:8C:EB:79:3D:32:61:F1:D6:07:9E:97:03:68:D6:E2:BF:D0:68
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       2A18AF318549E8C1AD09476DF93CA9AD725FB13C
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
Signing time:             Tue 08 Aug 2023 19:00:00 +0000
ROA not before:           Tue 08 Aug 2023 18:55:00 +0000
ROA not after:            Tue 06 Aug 2024 19:00:00 +0000
asID:                     53236
IP address blocks:        170.83.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:18:af:31:85:49:e8:c1:ad:09:47:6d:f9:3c:a9:ad:72:5f:b1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Aug  8 18:55:00 2023 GMT
            Not After : Aug  6 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:a0:74:c7:64:94:8b:45:5e:e0:43:a3:98:
                    73:d0:51:84:75:23:a0:03:17:ea:a7:e3:77:c1:bc:
                    60:41:3f:69:87:f6:a6:8f:f6:23:9e:9d:d5:52:8c:
                    44:12:f4:45:87:ab:83:9d:ad:df:aa:57:4c:24:7c:
                    4d:f4:39:96:b7:2e:df:25:4f:ad:a7:06:2e:92:b5:
                    20:0e:f5:72:8e:2e:44:81:23:52:4e:fe:62:1e:eb:
                    56:45:88:71:68:97:6c:ed:cf:d1:24:76:a0:bc:8e:
                    c4:39:63:89:55:29:34:b5:4f:c7:ef:0c:f4:2e:df:
                    c1:c3:0a:4a:42:4d:8a:e4:d6:87:65:19:68:27:6d:
                    cf:9b:1f:bc:ed:43:6d:36:01:23:66:77:e2:d5:e9:
                    85:75:c5:b1:a6:5b:ff:d1:b2:76:b8:7e:24:b7:d0:
                    f2:2c:ca:51:aa:45:5c:bb:00:b8:0a:96:31:c6:47:
                    d2:2e:52:3d:36:18:0f:cd:86:aa:ea:6e:f8:5e:d1:
                    8f:79:de:51:89:3a:e5:dd:40:a4:e3:ae:dc:b6:01:
                    2d:08:11:6a:1f:cd:da:db:46:f7:13:91:4e:cc:54:
                    4a:67:b7:d9:da:9c:2c:7e:19:0e:9c:5e:cd:40:43:
                    5a:d2:30:58:eb:74:2c:99:2e:e4:71:d4:e6:68:ad:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:8C:EB:79:3D:32:61:F1:D6:07:9E:97:03:68:D6:E2:BF:D0:68
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:53:bb:9a:6a:11:a2:44:e4:5c:69:bb:d2:29:27:26:75:
         37:f5:a9:10:ca:46:33:8e:72:1f:bf:9c:16:44:49:71:88:f9:
         e6:5d:0c:99:e4:af:cf:74:cd:e7:70:5f:d1:6e:2d:49:ae:8e:
         f8:a4:b5:d1:ba:ce:b6:24:aa:a9:66:b7:b9:5b:d3:ad:51:7b:
         6b:38:2f:a5:4c:2c:66:19:df:7c:cc:34:1f:e1:39:a9:be:81:
         8b:44:e5:d2:91:43:c4:af:1d:37:b9:8f:43:80:5b:0a:88:a9:
         72:b3:c7:fa:4f:ac:60:0b:3c:bd:75:8f:b3:67:ab:a7:30:7d:
         c1:d3:d0:d2:46:19:e6:13:dd:4b:a8:bc:57:39:0f:53:72:4a:
         43:e8:42:27:6c:6c:84:d2:28:8d:1e:76:c2:71:f8:7d:99:5a:
         8d:e5:7f:4a:d5:69:d7:dd:5b:cd:21:e4:6f:e8:03:92:4f:7a:
         e7:5d:b0:94:24:4a:da:11:c4:e8:57:35:27:ad:ad:d8:63:75:
         17:8f:04:bf:e3:3b:07:e3:a6:2b:0b:d0:e2:ca:1e:49:16:ba:
         0d:a7:a7:f8:a5:26:6c:30:2f:d1:e7:ed:ad:ee:8b:65:00:6b:
         80:12:e7:cf:9c:70:e3:2d:71:31:1a:06:89:e0:a4:d4:37:eb:
         b7:8d:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org