Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3234203d3e20323633393830.roa
File:                     3137302e3234352e3132322e302f32332d3234203d3e20323633393830.roa (raw, json)
Hash identifier:          nLrUPczPbokca9xJyFv4iN/J5jkU/RJBbATeDkPhyr8=
Subject key identifier:   68:6A:0F:45:52:EB:B0:C5:7D:EE:83:AE:6D:BD:A1:0C:8F:84:A7:DC
Certificate issuer:       /CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
Certificate serial:       31886B59607316BDFE3E8AB30407097980FCCDBE
Authority key identifier: 0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3234203d3e20323633393830.roa
Signing time:             Thu 15 Feb 2024 18:39:37 +0000
ROA not before:           Thu 15 Feb 2024 18:34:37 +0000
ROA not after:            Thu 13 Feb 2025 18:39:37 +0000
asID:                     263980
IP address blocks:        170.245.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:6b:59:60:73:16:bd:fe:3e:8a:b3:04:07:09:79:80:fc:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Validity
            Not Before: Feb 15 18:34:37 2024 GMT
            Not After : Feb 13 18:39:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:87:dc:6c:27:20:e4:c6:33:2c:a6:1f:be:
                    03:27:e6:5d:ed:c9:28:57:0b:18:96:94:e9:48:77:
                    43:e8:08:bd:21:e8:c7:31:4a:07:5f:90:9b:16:f3:
                    31:eb:ff:a2:f2:07:94:e1:91:b8:ae:52:0b:ad:bb:
                    60:0d:78:e7:a6:63:41:fa:ea:6e:f7:5d:86:07:42:
                    2e:b4:8a:4e:c0:66:d2:b4:c3:43:b1:8d:c6:9d:ef:
                    75:60:f4:72:48:ea:1e:e8:fe:9d:1c:01:86:47:e3:
                    3d:95:7d:a9:a0:ee:e4:d5:42:2f:84:31:9a:64:89:
                    15:6d:11:b3:b6:44:2d:34:33:2b:25:83:dc:cd:a6:
                    95:e3:81:b3:b1:35:10:84:09:4d:3d:4a:02:b4:66:
                    18:70:d8:52:11:06:1c:5e:27:6f:a8:8b:5e:e2:8a:
                    e2:34:76:e8:95:30:63:d4:81:29:f2:71:3c:a4:f4:
                    44:44:fe:27:dd:60:d7:41:6d:50:70:46:d6:83:a2:
                    f6:31:e3:c8:f0:33:97:ae:b2:cf:32:fe:4d:21:99:
                    0e:f1:31:35:d4:b7:70:14:70:b2:97:c9:c0:4c:59:
                    35:19:da:54:be:b0:08:bf:1f:0e:e0:31:4e:dd:a6:
                    ce:e6:42:e7:1a:d4:25:1d:fd:ce:5a:be:7b:8b:7e:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6A:0F:45:52:EB:B0:C5:7D:EE:83:AE:6D:BD:A1:0C:8F:84:A7:DC
            X509v3 Authority Key Identifier:
                keyid:0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3234203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:02:f7:d5:2e:b8:67:81:c0:fe:5e:ee:0e:be:94:0b:f2:
         69:5e:56:b6:17:83:05:4f:df:0a:cb:65:a0:c2:6a:f7:39:e5:
         f0:a2:96:74:81:19:f8:46:d6:3f:dd:ea:ac:f9:8e:c2:96:4e:
         62:d9:80:f9:0b:c4:eb:65:c6:10:d2:31:a6:77:6e:fb:9f:6b:
         97:70:4e:72:53:89:be:f2:f5:51:15:a9:69:ef:5b:7a:04:38:
         6b:e8:0d:54:ca:9b:24:90:de:68:01:d3:c9:f7:24:e5:aa:3b:
         b9:ea:4f:1d:d2:0b:91:97:4f:8e:69:41:a0:fb:30:e6:62:84:
         83:78:dc:91:ef:82:40:da:4a:f1:75:95:da:53:72:b8:33:55:
         63:c8:e7:95:4f:11:92:36:5a:73:fa:27:12:3b:4e:59:35:27:
         0d:77:a5:8d:99:ce:00:4b:14:11:f3:d2:ae:0b:fd:c7:57:0d:
         91:92:47:9d:81:40:62:80:6e:60:db:19:3b:ec:7e:1b:04:0c:
         74:a4:62:a7:b6:88:21:25:95:d6:d3:30:54:77:11:f4:cb:e1:
         0c:3a:02:c3:ac:73:3b:a3:49:2c:27:4b:63:46:f7:77:9f:5f:
         51:e5:2c:3c:d6:a0:d0:f8:34:c0:30:51:46:10:55:26:8d:f7:
         57:b4:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org