Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa (raw, json)
Hash identifier:          UZEBR+yBxr1xUVKTN98OPAPoi7s/KWNJxvk9/WHOg0M=
Subject key identifier:   9A:EB:C8:CF:70:DE:33:0C:A4:FE:69:AB:13:73:52:CB:F9:9D:2E:88
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       07F12B6F3F6688611BE61E755991D5C337453FEB
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:03 +0000
ROA not before:           Wed 30 Aug 2023 16:55:03 +0000
ROA not after:            Wed 28 Aug 2024 17:00:03 +0000
asID:                     263913
IP address blocks:        170.231.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:2b:6f:3f:66:88:61:1b:e6:1e:75:59:91:d5:c3:37:45:3f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:03 2023 GMT
            Not After : Aug 28 17:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:36:5e:f1:b0:1d:d9:2d:b4:9b:f3:c4:10:c1:
                    4f:33:bf:4a:c5:05:8e:10:ab:31:b3:5f:d5:e2:3b:
                    df:02:be:fc:5c:0b:85:27:24:30:2a:a5:d6:a2:25:
                    8d:b6:05:b3:72:aa:c4:28:98:8b:76:07:76:1a:c8:
                    d3:3f:3c:2d:7d:54:a4:fd:e2:2f:76:5c:47:87:96:
                    16:e2:e9:c3:47:ef:45:99:01:8c:cf:d9:72:11:d8:
                    47:19:2c:c3:4d:ba:8d:2b:80:23:a4:02:c7:79:0d:
                    ce:5f:1d:55:7c:71:22:65:5a:f1:f5:a5:d1:de:f9:
                    8f:05:bb:38:b3:22:48:9e:bd:6b:ba:9c:7c:27:25:
                    ea:9b:6c:33:aa:91:17:05:ae:bf:1b:fd:4e:ed:47:
                    29:52:bc:99:14:f0:f8:ef:0a:16:33:e1:95:8a:69:
                    cb:23:27:89:f3:14:c4:ba:cd:7a:36:ad:dd:4f:0c:
                    9d:35:f8:fb:5a:19:55:87:be:6d:61:77:d3:5e:51:
                    f2:a8:aa:a3:c2:75:6c:35:44:11:dd:65:d3:85:8a:
                    a7:aa:f0:38:2b:6f:63:64:9b:ce:5b:b2:d2:aa:80:
                    3b:1f:c3:86:07:1f:94:ac:ea:e4:98:5e:bc:ce:33:
                    01:92:db:98:7d:4d:c1:de:88:ee:54:99:b0:72:67:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:C8:CF:70:DE:33:0C:A4:FE:69:AB:13:73:52:CB:F9:9D:2E:88
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:71:e0:b0:13:43:4b:2b:e8:47:07:7d:22:60:be:00:50:e6:
         89:a6:72:75:05:82:49:78:6a:87:c1:61:14:93:32:64:e4:31:
         3d:9f:6f:9e:60:d7:3f:f1:01:bb:72:d0:39:f6:8b:e9:c0:6a:
         f2:21:11:ad:b5:4a:a9:22:37:85:a1:64:2d:1f:5f:6a:0c:cf:
         35:ac:8f:60:85:73:77:50:f7:7b:7b:83:ae:e0:e3:d6:a2:8b:
         48:d5:d7:2b:cc:e4:37:6a:1f:ba:59:e1:a5:14:65:2a:9b:f4:
         d4:7a:ed:a3:5d:06:ba:b9:88:7f:af:2e:c9:90:0a:f9:65:e3:
         93:c0:ed:14:7e:51:6d:05:8d:95:9a:ac:ee:5f:8d:f9:39:17:
         23:14:03:72:f1:85:d7:b5:ca:f0:57:72:49:f6:f4:31:ac:c3:
         5a:59:df:46:e4:46:16:c1:af:a1:a6:dd:1f:83:9b:41:e9:16:
         fc:93:91:5b:ac:f2:27:a4:66:05:b5:4f:94:be:95:9f:b0:fb:
         7b:29:b5:0a:f5:cf:ea:41:79:92:be:5e:09:9c:13:6d:ff:50:
         93:31:a5:a6:57:58:4e:c2:d7:63:9c:6b:e8:0d:fd:ec:1d:e3:
         0f:b6:25:80:dc:1b:ed:f8:54:01:a9:0d:f1:cd:59:c0:07:e3:
         0d:13:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:27:37 2023 by rpki-client on console-fra.rpki-client.org