Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231372e302f32342d3234203d3e20323633393133.roa
File:                     3137302e3233312e3231372e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          iRQCi/Ri2Om80fMRnFXFdRtNwMiyIPFkvidOV7qTMAk=
Subject key identifier:   56:86:8A:9A:9D:18:4E:D8:A7:DC:17:24:50:FA:B5:FB:58:C4:4D:C2
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       1B2396D636543AEC601B8C6986F33D5802C628E1
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231372e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:02 +0000
ROA not before:           Wed 30 Aug 2023 16:55:02 +0000
ROA not after:            Wed 28 Aug 2024 17:00:02 +0000
asID:                     263913
IP address blocks:        170.231.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:96:d6:36:54:3a:ec:60:1b:8c:69:86:f3:3d:58:02:c6:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:02 2023 GMT
            Not After : Aug 28 17:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:60:73:ef:cc:85:0f:b4:93:db:f7:5f:47:
                    9e:25:1a:e1:1d:5d:cb:c4:b2:f9:08:ff:6e:33:44:
                    ab:f0:58:c1:ce:38:1e:80:51:66:90:35:52:6f:6c:
                    f3:2e:ea:25:77:74:0b:44:3f:43:e4:15:31:7d:ff:
                    56:04:82:da:05:91:dd:ab:b6:c4:01:8b:ba:20:7d:
                    2d:45:3d:1f:79:a6:96:c4:0c:4e:0e:5a:a8:11:e8:
                    31:d4:a7:dc:6a:d7:62:cd:1a:2a:75:58:d8:5f:09:
                    8e:ed:e5:d2:72:b0:d0:93:9a:15:37:73:d0:10:69:
                    d0:6f:d1:76:d8:fa:49:98:07:4a:f5:80:e3:97:1b:
                    8f:c1:1d:af:f2:6b:0d:eb:eb:5a:42:31:68:73:cb:
                    b8:54:19:5d:72:f2:d0:bc:f5:4f:f8:73:00:3d:4f:
                    3a:13:c4:7d:a5:4d:0f:4f:0d:81:19:b9:e0:31:1d:
                    49:96:a8:b9:36:21:06:da:9f:49:ae:ad:51:86:25:
                    0b:4d:c3:d6:e3:24:49:6c:f3:33:8b:f7:58:20:93:
                    7a:05:09:35:7b:f6:73:f3:12:32:57:ec:04:a2:db:
                    88:fd:a0:3e:87:f8:a6:b6:04:cd:3f:49:77:6f:16:
                    79:e0:7e:fa:3a:b7:99:84:8a:82:9b:6b:56:9e:df:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:8A:9A:9D:18:4E:D8:A7:DC:17:24:50:FA:B5:FB:58:C4:4D:C2
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231372e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:52:f6:2d:f8:d8:08:19:e6:b6:4c:05:19:ea:93:3d:63:a4:
         b7:b3:3c:c8:80:4b:f9:73:2a:1d:14:ba:bf:44:59:78:c0:8d:
         ff:46:67:bc:f6:22:00:e3:fe:ac:dd:6b:13:d3:71:8c:f4:01:
         de:d5:ff:ac:7c:b7:53:23:5b:01:fd:64:21:04:60:62:37:c6:
         95:a8:4b:a7:05:d6:91:2f:b6:39:f0:43:1b:48:7b:42:1b:c4:
         1c:f2:f4:e7:c6:f3:25:5a:fa:2d:09:5d:56:12:66:3e:82:30:
         e1:a0:5a:fe:85:71:f1:55:3b:34:5e:f6:2e:fd:01:e1:02:cf:
         50:48:2f:1d:f5:00:8c:bd:24:ec:1a:a8:68:3c:2c:b0:be:ca:
         b9:dd:ef:d7:84:ba:28:24:26:0a:ef:90:26:b2:b8:97:0d:99:
         e7:07:a9:fa:e2:31:4f:b2:c5:66:95:df:82:f1:11:0d:e6:cc:
         56:b1:78:89:92:01:6a:85:71:b7:34:33:7a:3e:50:1b:8c:d7:
         2c:fa:da:7c:59:70:62:9d:32:b3:2a:0e:7e:3d:5e:62:b2:0b:
         da:bd:07:09:51:e3:a4:f6:38:d3:1c:e6:00:77:be:08:63:b4:
         d0:86:41:6e:b7:b7:4c:52:a9:0d:d9:79:47:5f:9e:6c:2f:36:
         0c:59:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:21:35 2023 by rpki-client on console-ams.rpki-client.org