Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa
File:                     3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa (raw, json)
Hash identifier:          LQW8qePU+RyN8P9LHYXRc+u2IhE/eVPSS1uNy89MSOw=
Subject key identifier:   2C:F7:F5:42:30:C7:AD:3E:49:16:DF:61:6E:88:D9:8B:0B:11:76:34
Certificate issuer:       /CN=00163538EC66E277F93E54FBE592E30664E16F63
Certificate serial:       50E41471CA078EB90C4921FD3FA1BE0B3A3FCA2B
Authority key identifier: 00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa
Signing time:             Fri 23 Jun 2023 20:06:45 +0000
ROA not before:           Fri 23 Jun 2023 20:01:45 +0000
ROA not after:            Fri 21 Jun 2024 20:06:45 +0000
asID:                     266514
IP address blocks:        170.244.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e4:14:71:ca:07:8e:b9:0c:49:21:fd:3f:a1:be:0b:3a:3f:ca:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Validity
            Not Before: Jun 23 20:01:45 2023 GMT
            Not After : Jun 21 20:06:45 2024 GMT
        Subject: CN=2CF7F54230C7AD3E4916DF616E88D98B0B117634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:2f:c4:d8:45:33:ab:ff:16:4b:54:85:08:
                    45:1c:81:2e:00:23:20:a1:37:de:c7:59:54:20:84:
                    0a:67:b0:14:87:19:3f:4c:ef:70:cc:fc:0f:ba:d5:
                    67:18:ba:7e:54:f9:7a:02:97:a8:ba:1a:8a:d1:f1:
                    a9:04:9d:7e:e8:31:f8:64:1e:58:3a:03:45:2f:5b:
                    c4:46:1e:37:20:5b:c8:c3:ac:e6:7d:f6:59:fb:fb:
                    37:c6:9a:38:01:91:20:e3:a3:04:9c:fc:65:0d:5c:
                    82:c2:bd:46:c7:4e:de:a3:d0:70:4e:bc:8d:ca:10:
                    54:3f:99:ab:60:97:c5:32:c0:a4:e3:63:1a:4d:ef:
                    66:9f:f8:c3:73:3a:6d:4c:a3:35:4c:3b:be:50:7e:
                    68:b0:53:7b:da:88:43:79:1a:43:33:b0:f1:86:1b:
                    a7:d6:63:dc:ab:39:fc:70:d9:07:e8:08:95:4b:bf:
                    49:35:e1:6f:6a:48:f1:65:d9:ee:a5:20:ec:98:36:
                    23:93:ad:fe:1c:04:e7:7c:7b:15:77:7d:c8:e4:d6:
                    4f:d4:c2:ca:6f:89:4a:e5:c6:d6:64:ca:1e:cb:a0:
                    1c:87:1f:0f:3f:49:5c:56:46:7c:77:da:94:24:2a:
                    a4:bd:71:33:79:5f:a1:c2:ed:58:8b:ed:32:12:a7:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:F5:42:30:C7:AD:3E:49:16:DF:61:6E:88:D9:8B:0B:11:76:34
            X509v3 Authority Key Identifier:
                keyid:00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:5b:96:32:51:37:b6:74:68:fd:87:de:aa:d2:4a:c8:89:
         00:3f:9d:dd:f3:a4:d8:72:0b:78:6a:ba:e4:32:1b:c8:79:16:
         8f:1e:ae:18:92:00:80:74:be:43:f9:13:7b:d0:7e:8f:6a:25:
         e1:e4:fc:c6:2a:ea:3a:0a:6d:4c:13:8b:ad:dc:7a:44:c7:30:
         2f:43:8c:d2:52:2f:42:1e:ea:1f:46:71:9f:e4:18:f5:9b:f2:
         0c:c0:15:16:91:4e:e2:ae:b3:ca:71:13:6f:e5:83:79:9e:be:
         7f:d5:73:26:ee:26:c5:eb:04:ea:40:92:6b:64:54:c1:31:d8:
         cc:38:6e:f3:09:21:ca:62:c0:8e:25:64:8d:f6:7f:c0:02:5f:
         bf:20:5e:80:60:24:d4:26:49:7f:89:60:fd:08:a4:b4:83:fd:
         5a:d7:a2:63:94:6f:6d:ca:6e:df:ae:44:cd:f4:73:35:31:26:
         3e:55:45:6c:f2:56:03:8b:ab:79:35:a2:26:91:a2:d3:7f:8c:
         87:a6:25:ab:a6:ad:39:f5:9f:4a:85:9e:60:d4:2a:cc:93:ef:
         99:68:5e:5a:89:05:b3:71:0a:e1:80:58:21:60:79:6a:7b:1c:
         ec:77:e0:0e:91:a7:ba:98:b0:93:11:b1:38:1d:01:ff:74:42:
         f0:53:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org