Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          7Ax5UhJVlMWovs4hH8ZgPezE8rCGVNuWSGHV5u4Oh00=
Subject key identifier:   C4:25:7D:36:15:02:A2:D0:19:DD:45:BB:DB:DA:99:A8:D9:C2:24:BE
Certificate issuer:       /CN=00163538EC66E277F93E54FBE592E30664E16F63
Certificate serial:       7FF95B387AFA47FDBD57FE71918FA5F5A99C292A
Authority key identifier: 00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
Signing time:             Fri 23 Jun 2023 20:06:46 +0000
ROA not before:           Fri 23 Jun 2023 20:01:46 +0000
ROA not after:            Fri 21 Jun 2024 20:06:46 +0000
asID:                     266514
IP address blocks:        170.244.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:5b:38:7a:fa:47:fd:bd:57:fe:71:91:8f:a5:f5:a9:9c:29:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Validity
            Not Before: Jun 23 20:01:46 2023 GMT
            Not After : Jun 21 20:06:46 2024 GMT
        Subject: CN=C4257D361502A2D019DD45BBDBDA99A8D9C224BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:c7:5d:cf:38:f9:55:c5:d4:2c:ee:aa:1e:
                    b6:b9:46:b5:89:fa:ba:29:db:dd:af:f1:cd:4a:14:
                    3e:d7:65:92:7b:15:f7:a3:c7:50:32:6e:27:03:0c:
                    85:db:c7:bf:2d:99:b9:ab:6f:4f:1f:67:6e:a4:b8:
                    e7:eb:41:25:39:f5:20:97:12:3f:75:44:49:19:23:
                    e4:d3:63:f4:f1:c8:69:f2:5f:be:2f:bc:1a:c0:38:
                    ed:11:29:75:c5:ce:af:35:ac:86:8f:18:b4:38:fc:
                    66:6e:64:25:ef:40:a0:e9:a2:b0:6b:f2:44:0a:99:
                    72:0d:2d:5e:61:23:fb:51:65:47:e7:30:5f:a8:f9:
                    66:6f:01:b4:d9:29:17:45:7a:c6:3e:a8:82:b7:de:
                    20:63:1d:76:18:aa:eb:36:58:d9:a3:e7:f9:cb:60:
                    5a:c3:d0:c1:93:f9:99:f7:65:a5:86:a8:43:c6:83:
                    4a:63:c0:3f:be:31:ad:30:65:76:7b:b5:d1:9b:37:
                    18:ee:b5:94:fe:19:b2:12:c7:43:e6:f0:d0:12:20:
                    6b:0c:77:51:6a:0c:30:38:ec:28:85:4d:0c:70:78:
                    e3:73:1b:53:c7:82:de:9f:66:de:e1:1a:7d:04:53:
                    79:7f:ae:6a:f0:85:3b:02:38:70:87:44:48:c2:30:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:25:7D:36:15:02:A2:D0:19:DD:45:BB:DB:DA:99:A8:D9:C2:24:BE
            X509v3 Authority Key Identifier:
                keyid:00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:86:b9:82:fc:83:d8:c3:a8:08:cc:ba:7e:6b:d0:b4:b0:
         d0:6b:2e:e1:91:07:04:73:f7:61:ac:3a:31:18:68:be:fe:52:
         54:26:9d:dd:54:97:15:84:3d:c3:98:43:c2:50:ce:6e:31:d4:
         29:cb:e3:c5:0a:34:c7:a2:f3:0d:37:66:ce:bc:88:a6:41:60:
         28:af:49:67:66:21:13:b0:57:62:1a:eb:cb:5b:4c:d9:7d:5b:
         81:9d:dc:e7:94:67:1f:f6:3a:2c:5c:3c:63:96:b4:52:89:dd:
         bb:39:e0:83:02:5c:b2:a9:9e:16:2e:cf:55:ce:7c:6a:3b:6c:
         73:0d:52:ef:61:fc:a5:9b:a0:2d:68:aa:2a:bb:a6:21:ea:e9:
         2b:95:0a:2f:36:e6:20:49:0f:ee:6e:b2:94:11:02:c7:5d:10:
         67:6e:10:7f:af:7a:6c:83:79:60:76:38:66:da:2b:40:7b:16:
         46:84:b4:a1:78:99:4a:a8:a6:1b:3b:cd:9e:44:73:86:e1:69:
         0d:f8:9b:55:59:43:7b:cb:2f:56:df:e4:10:9f:31:ca:06:b5:
         19:28:fb:68:f0:f0:fe:37:a9:87:03:1a:86:83:09:12:78:03:
         b0:10:d5:3d:7a:73:d0:99:9e:10:be:c1:95:a0:1d:8b:d8:f9:
         b0:8d:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org