Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa
File:                     3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa (raw, json)
Hash identifier:          T7lvMGBBNK2yTGi2K2oIwVHltIjmYtXqFjfbo7cYnRY=
Subject key identifier:   A4:1C:15:5F:13:E2:27:16:FA:66:09:F1:A1:B1:46:23:4F:42:BD:E1
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       5B551093C103281CDDE17B6286D3692029034707
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa
Signing time:             Fri 27 Oct 2023 18:45:22 +0000
ROA not before:           Fri 27 Oct 2023 18:40:22 +0000
ROA not after:            Fri 25 Oct 2024 18:45:22 +0000
asID:                     271008
IP address blocks:        170.254.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:55:10:93:c1:03:28:1c:dd:e1:7b:62:86:d3:69:20:29:03:47:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Oct 27 18:40:22 2023 GMT
            Not After : Oct 25 18:45:22 2024 GMT
        Subject: CN=A41C155F13E22716FA6609F1A1B146234F42BDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:1d:f4:42:a3:19:a4:d5:0d:e8:03:a8:b0:
                    1e:5e:51:71:62:1c:b3:b3:90:b0:13:d4:44:da:b3:
                    aa:93:ac:b5:43:a2:85:62:bd:af:6e:36:34:2e:cc:
                    91:1d:f4:98:03:9a:c1:f2:f9:f9:f3:b9:25:c8:79:
                    68:71:5a:0f:18:db:5b:42:3c:8a:3e:6b:bd:22:55:
                    b7:2d:c6:04:9b:77:d7:ee:c8:ea:c7:d0:fb:a3:50:
                    e4:89:5b:99:f2:cb:22:42:ca:71:82:0e:57:aa:6a:
                    a4:2a:a5:c4:51:7d:a9:95:8a:56:f5:8b:9e:d8:2e:
                    fd:74:2b:63:b0:75:87:29:58:13:35:81:a8:a7:02:
                    b1:c4:c3:3c:7d:0f:c8:40:08:96:ec:92:b6:44:88:
                    42:b1:55:72:25:b1:78:c2:f1:82:e1:84:43:4f:6a:
                    0f:5e:2b:2f:8d:da:c1:1b:fc:44:85:7a:e7:51:9f:
                    94:43:da:28:1c:17:72:63:e4:79:7e:df:bc:fd:c2:
                    f9:f1:7a:c6:26:b3:ec:4e:08:8a:21:c1:c4:f3:28:
                    3d:59:e9:99:7f:3f:a1:5b:8b:ab:18:b3:38:6c:de:
                    b1:d6:93:e7:28:27:9e:35:6d:41:2d:22:4d:a0:e3:
                    4b:df:ca:57:07:ef:fd:5b:68:92:06:1c:c2:04:bd:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1C:15:5F:13:E2:27:16:FA:66:09:F1:A1:B1:46:23:4F:42:BD:E1
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b3:85:d2:c1:96:4b:a9:de:89:f8:c4:84:f4:44:ae:cc:d6:
         1a:cf:e2:cb:d4:f1:17:bf:d5:38:9e:a7:23:f4:2e:d7:e8:5b:
         b5:af:41:4a:59:dd:84:27:9c:41:5d:68:82:b6:a4:26:38:cb:
         f6:37:c6:93:90:79:f4:a5:18:92:ad:49:94:89:dd:95:c0:71:
         58:f9:a9:c9:d6:3a:43:9f:59:ab:e8:14:18:98:e2:f1:3c:f0:
         05:bd:a3:8b:e8:a7:4d:1a:38:4d:7a:16:c7:9e:aa:e1:61:ee:
         4c:90:71:e4:30:69:ec:bd:09:0d:db:29:f4:d2:a1:36:97:a8:
         24:c5:db:b7:e5:3e:f5:e9:dc:8f:aa:83:c2:d6:7d:7f:9c:a6:
         3b:df:63:86:34:9d:a5:34:e1:9c:a4:b5:74:c6:17:2d:67:51:
         5d:9d:cb:14:58:0b:36:30:5a:cb:cb:c4:48:08:78:ed:a1:d5:
         26:cd:25:4a:84:82:1d:e3:7e:b5:92:51:03:23:a6:55:b0:aa:
         b0:4b:ff:02:29:a6:1c:62:a5:9b:56:61:70:eb:6b:fe:6b:95:
         33:51:40:54:7b:00:13:c1:c0:02:8a:93:7c:8c:45:3e:68:59:
         2b:dd:b1:67:2a:24:91:a8:22:4e:67:bc:95:74:e1:78:8e:7f:
         c1:c6:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org