Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
File:                     3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier:          6n10dho4vBIA+7viNwQZxKrE68PFrIyTji27p3CyY+w=
Subject key identifier:   99:0A:01:74:1E:20:2A:8F:57:65:2A:38:9C:42:D1:FB:BD:9C:DA:81
Certificate issuer:       /CN=4613768E155A5129847F26ACD1FEA8A145AE5FAE
Certificate serial:       276A7AE6D8380BC9D4DA7AC78F9C398437B51CB9
Authority key identifier: 46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
Signing time:             Fri 29 Dec 2023 14:37:56 +0000
ROA not before:           Fri 29 Dec 2023 14:32:56 +0000
ROA not after:            Fri 27 Dec 2024 14:37:56 +0000
asID:                     52592
IP address blocks:        170.247.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6a:7a:e6:d8:38:0b:c9:d4:da:7a:c7:8f:9c:39:84:37:b5:1c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4613768E155A5129847F26ACD1FEA8A145AE5FAE
        Validity
            Not Before: Dec 29 14:32:56 2023 GMT
            Not After : Dec 27 14:37:56 2024 GMT
        Subject: CN=990A01741E202A8F57652A389C42D1FBBD9CDA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:8d:64:d6:f9:fa:e9:70:b7:23:d7:3d:5d:
                    77:7d:2a:f0:d1:c1:25:69:c3:9d:90:0d:ed:a1:bd:
                    e7:aa:7d:45:a9:e5:9e:e0:c6:b5:a4:66:af:03:bb:
                    2b:a4:c2:dd:9b:36:74:bf:1f:5a:fb:d7:15:a3:d3:
                    e0:91:6b:dc:b9:9a:1b:42:c5:74:be:5b:fe:2b:07:
                    26:37:60:25:34:e6:38:0b:c4:c3:75:de:af:cb:67:
                    22:cf:ff:fa:66:08:71:b5:7e:4c:d9:4e:66:2d:a5:
                    bf:10:39:ea:55:8f:6a:9d:d2:fe:a0:34:71:e1:c4:
                    cf:83:f9:43:db:02:43:82:40:47:18:a6:21:d5:14:
                    cd:91:11:7b:c5:42:38:71:c9:c2:b5:c9:60:7f:bb:
                    0a:3a:2e:56:99:d3:d4:bd:a1:f9:3c:69:9c:c2:ba:
                    9d:36:08:2c:d3:c1:f8:63:86:a8:75:95:bf:b0:73:
                    b6:4a:fc:a4:5a:9b:44:c4:cb:80:d6:56:fe:31:0c:
                    c1:eb:97:f6:89:7e:dd:0d:36:1d:e0:28:18:ec:65:
                    74:d2:4e:1e:12:2b:0a:54:44:9e:f9:0b:fa:22:96:
                    ea:14:55:e0:8d:f2:a9:0f:fa:a0:8b:52:34:70:02:
                    37:f3:ec:04:e9:bd:96:98:95:19:da:6a:19:2b:7d:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:01:74:1E:20:2A:8F:57:65:2A:38:9C:42:D1:FB:BD:9C:DA:81
            X509v3 Authority Key Identifier:
                keyid:46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:ef:85:d1:8e:e4:5b:7b:77:20:9a:04:c2:20:4c:b8:4a:
         87:18:c3:4e:29:a7:97:77:10:b0:2b:85:89:03:a7:be:a9:c6:
         00:f7:4e:63:38:c3:a9:3d:06:de:37:aa:e8:0b:39:72:a8:4f:
         eb:ea:21:3e:d9:76:6a:24:98:0b:87:35:22:2e:26:05:52:02:
         b2:89:3b:e8:88:38:c5:05:50:25:c5:97:64:cc:5e:d8:ea:36:
         23:0a:c1:0b:1c:1d:91:20:7a:9f:f4:bc:5d:ce:39:a7:39:aa:
         cc:d9:32:1d:e7:98:1a:66:16:2f:50:b4:0f:3a:c5:61:1a:f8:
         53:13:85:bd:ba:04:ea:bb:ad:b0:e0:06:17:9e:5f:1e:ce:74:
         d7:b5:89:69:b2:b0:5c:3c:19:25:8e:6e:15:f6:e4:77:96:66:
         c2:99:b4:c9:5a:e6:76:a5:b2:6a:23:ab:96:db:4d:bf:3e:78:
         2f:fe:3a:55:93:b2:64:d8:74:4a:e4:c4:3c:33:ed:d5:f3:71:
         25:03:50:ba:5e:4f:e0:d0:1e:91:ff:a0:7e:09:9a:a8:18:75:
         f2:a3:78:c2:06:b6:fb:3d:cb:fd:67:93:aa:f5:53:55:5d:ef:
         35:a3:f1:66:9a:08:b5:25:11:21:3f:de:1a:35:71:f5:f2:3f:
         ec:54:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org