Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
File:                     3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa (raw, json)
Hash identifier:          ArIF0VumMOCyNgAtQeabkxLpuSiddXeVSbpqA0WS1qM=
Subject key identifier:   9A:58:B4:6D:F5:92:F2:A8:9C:5A:5D:89:E8:6F:91:AE:FF:B8:4E:79
Certificate issuer:       /CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
Certificate serial:       1B36E7B64097A5BB20305D3C14E1A1EA148B4205
Authority key identifier: 43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
Signing time:             Mon 05 Feb 2024 19:38:09 +0000
ROA not before:           Mon 05 Feb 2024 19:33:09 +0000
ROA not after:            Mon 03 Feb 2025 19:38:09 +0000
asID:                     265111
IP address blocks:        170.254.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:36:e7:b6:40:97:a5:bb:20:30:5d:3c:14:e1:a1:ea:14:8b:42:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
        Validity
            Not Before: Feb  5 19:33:09 2024 GMT
            Not After : Feb  3 19:38:09 2025 GMT
        Subject: CN=9A58B46DF592F2A89C5A5D89E86F91AEFFB84E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:b5:71:3b:72:10:d7:29:39:cd:8b:71:2b:
                    b3:e0:21:59:5c:5c:4d:5d:a6:c2:75:81:1d:73:63:
                    f9:c1:04:13:f0:bb:8e:e7:3c:2f:75:be:70:ea:b1:
                    8b:4e:12:fd:39:ad:75:35:b7:27:f2:87:2d:f0:71:
                    f6:c0:1d:da:76:68:cd:33:32:6e:22:66:e2:be:b4:
                    4a:00:59:a8:87:fe:cf:d2:92:2e:4e:10:07:5b:95:
                    c1:e1:89:05:b3:2b:92:2b:f0:5f:34:b0:f0:40:66:
                    88:c2:df:3c:8a:ee:7b:20:7d:19:f6:b4:69:eb:2c:
                    78:fb:1f:30:59:11:b5:c0:e4:ca:6a:4e:99:90:ca:
                    4a:e0:b5:cc:9d:d1:7d:7c:44:d6:b6:c5:01:1a:d8:
                    59:4f:3e:5c:dc:04:49:96:2f:21:4f:0c:c4:b1:dd:
                    2a:95:be:45:cd:eb:e9:f9:8f:9d:38:31:53:1e:54:
                    37:2d:15:52:af:f2:13:38:f9:2a:e5:87:76:66:f5:
                    a6:f4:98:c7:49:5d:56:37:32:2d:d8:d0:5a:c5:a8:
                    a2:cc:de:95:a1:7b:e3:89:ad:fc:a1:21:e0:bf:80:
                    c8:b4:7d:a7:31:6f:7c:b6:c4:26:05:db:21:f8:42:
                    fd:83:2b:76:0b:e2:26:f2:9b:e2:b3:6a:5b:66:72:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:B4:6D:F5:92:F2:A8:9C:5A:5D:89:E8:6F:91:AE:FF:B8:4E:79
            X509v3 Authority Key Identifier:
                keyid:43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:f0:e0:22:4d:db:eb:2c:0b:cf:b3:e3:9c:4c:f1:f2:e3:
         ca:f5:f0:b5:55:df:10:d7:ba:76:0c:97:15:de:d9:47:99:42:
         53:8e:6a:e1:9f:9e:e3:8d:6a:6b:16:6f:01:38:bd:38:58:b8:
         6d:91:63:37:4f:e4:b1:8a:ff:4d:ba:15:64:e6:ae:2b:1d:5a:
         36:0a:a8:4b:d3:56:67:8e:6b:f4:56:c0:6f:82:b5:11:69:72:
         d1:29:d9:67:31:6e:64:5a:93:c5:05:3b:1e:c8:a3:d0:d3:46:
         23:50:91:f4:91:bb:fc:cb:4b:42:50:f8:5f:a1:6d:0b:fb:83:
         ce:73:4f:a4:bb:10:f8:c7:b7:d0:88:54:9b:af:a3:16:d5:a5:
         8d:e6:62:65:0f:d2:7d:d0:69:15:74:4a:a4:e0:67:a7:74:2a:
         1a:84:2a:3d:46:3f:ac:e4:7a:5c:4d:b1:09:27:d2:86:a3:70:
         13:bb:bf:e1:b7:ad:2e:c9:84:36:c9:01:ee:20:9d:aa:82:b0:
         c3:e8:7a:fd:fd:86:e0:3f:e0:c5:39:bf:07:45:bc:56:e3:1e:
         9b:f8:85:b2:45:de:c2:fa:a8:a3:d3:55:56:7f:43:d7:18:e6:
         bc:d1:eb:3d:43:a7:d7:38:38:79:7b:8d:52:17:85:89:57:4e:
         ce:d0:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org