Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa
File:                     3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa (raw, json)
Hash identifier:          ibbeBcDPqo7uci1xr5HkbSVR4Fd6ueqF+dPw72MUkac=
Subject key identifier:   78:A6:AD:61:79:46:CA:3A:E8:A8:CD:F2:FD:38:BF:B0:C9:D3:99:08
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       2C9CB8B820898F7DA00728843A987930860945F4
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:24:07 +0000
ROA not before:           Thu 08 Feb 2024 20:19:07 +0000
ROA not after:            Thu 06 Feb 2025 20:24:07 +0000
asID:                     265078
IP address blocks:        170.233.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9c:b8:b8:20:89:8f:7d:a0:07:28:84:3a:98:79:30:86:09:45:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:19:07 2024 GMT
            Not After : Feb  6 20:24:07 2025 GMT
        Subject: CN=78A6AD617946CA3AE8A8CDF2FD38BFB0C9D39908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:1e:03:1e:c2:34:ae:72:24:8c:f3:64:55:
                    39:3b:a4:7d:3a:9a:8a:48:ea:c5:23:be:3d:20:78:
                    f3:b7:5b:c4:f3:d1:7d:8c:0d:e4:df:ea:ff:96:e5:
                    2a:7f:d7:60:be:eb:c9:ee:dc:0f:53:17:82:08:98:
                    08:05:2d:6b:fc:16:f1:5e:7d:85:35:0c:ca:84:8c:
                    d6:05:c4:38:ee:9d:95:f2:1c:d4:ce:12:10:15:7f:
                    f8:b1:a5:43:90:bd:a0:45:3f:bf:82:ac:eb:9c:26:
                    18:fa:1c:62:58:92:5e:ed:71:f1:36:b8:c2:ba:db:
                    17:67:80:b5:2a:d1:72:90:75:82:a1:71:38:58:cb:
                    9d:4a:78:41:1f:7a:5f:9c:d2:d1:6d:40:84:c7:db:
                    4b:39:55:57:22:9d:c7:f7:65:40:e3:df:9e:49:26:
                    16:ec:3a:b7:b5:61:3b:74:35:71:40:d4:9f:c3:ae:
                    b9:b4:95:0b:b7:eb:ff:eb:b3:1d:74:16:ee:fc:c6:
                    c8:9f:49:e4:53:58:91:9a:6c:dc:c4:df:15:28:3b:
                    d1:21:c6:f0:f6:2e:e8:95:10:c1:4b:38:f8:74:f1:
                    de:88:f3:a4:90:4a:2e:d0:14:a2:74:cd:0d:0d:d7:
                    98:36:06:cf:2c:ff:67:81:9c:c3:47:b8:94:72:3b:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:AD:61:79:46:CA:3A:E8:A8:CD:F2:FD:38:BF:B0:C9:D3:99:08
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32332d3233203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:00:3d:7d:81:ec:10:c0:35:34:e9:b3:bd:27:0d:d6:fd:ab:
         11:24:c2:5a:59:f1:d7:1f:d8:01:66:ae:71:77:13:c0:83:0a:
         cf:56:7f:0a:7e:cb:f5:92:f6:86:49:eb:fd:11:50:4e:aa:1d:
         0e:f2:de:4b:93:ee:56:b3:41:86:f1:cb:e4:19:78:98:5c:6b:
         46:cf:7a:5f:94:83:f0:c1:b5:2e:4d:d3:a9:4e:0a:97:d2:16:
         59:01:ec:e5:a7:53:62:3d:2f:43:9f:6d:9e:92:cf:30:dc:95:
         19:bc:f1:c2:d4:a7:20:09:26:af:61:c8:28:bb:59:a4:fb:8c:
         de:3e:fb:30:a8:b9:ba:73:57:e8:ef:8a:8f:d1:d3:66:b1:d8:
         cb:bf:c9:4c:aa:9d:dd:89:18:f3:98:02:61:65:d4:ea:4c:e6:
         aa:b4:4f:6c:75:fc:e6:06:63:92:76:f6:d5:11:43:89:69:be:
         94:7b:f9:e5:9d:7a:3b:9c:3d:65:1b:5d:6c:df:13:51:53:82:
         b1:c4:e7:12:54:72:c4:f2:39:93:9a:20:54:7a:fb:c9:65:fc:
         52:60:4b:a9:37:58:74:91:ca:17:0b:dd:bc:45:d6:7f:3f:2e:
         62:aa:e6:89:c9:97:f9:d1:f2:a7:c3:cc:a7:09:30:af:d0:12:
         a3:5c:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org