Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33332e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          czGvCdt5qHrswy5w7o6am6PUdHYMw9W87O9YSfVWpMI=
Subject key identifier:   EB:EA:2E:2C:9C:46:A2:9E:3F:97:86:36:B7:F3:77:4D:20:5A:7D:FC
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       61B84C1D981286350E8991EAD881D8B5A25C4C3C
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:20:26 +0000
ROA not before:           Wed 27 Mar 2024 21:15:26 +0000
ROA not after:            Wed 26 Mar 2025 21:20:26 +0000
asID:                     264550
IP address blocks:        170.0.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:4c:1d:98:12:86:35:0e:89:91:ea:d8:81:d8:b5:a2:5c:4c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:15:26 2024 GMT
            Not After : Mar 26 21:20:26 2025 GMT
        Subject: CN=EBEA2E2C9C46A29E3F978636B7F3774D205A7DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:28:3d:5d:c0:ef:ab:05:c9:8f:fc:0c:ac:
                    48:6e:0d:c1:ce:58:3b:b1:68:97:82:a3:4d:6e:cf:
                    ff:38:9c:2d:d8:40:eb:01:cf:0b:d1:67:49:85:42:
                    bf:68:c6:f2:7b:30:8d:cc:9d:4e:db:09:c8:92:b0:
                    7b:0e:2e:27:5d:31:63:73:9c:2a:ea:fa:7c:a8:e9:
                    5e:70:85:e7:5d:25:9d:51:de:94:73:50:1b:a4:2e:
                    7a:df:a1:a9:2a:56:3a:25:b3:ae:04:53:a8:46:68:
                    49:4f:cc:85:bd:eb:93:a4:0f:0d:d2:8c:ae:6b:9c:
                    96:64:1f:eb:31:9e:7a:a3:a2:69:0a:13:dd:80:b4:
                    64:3c:3a:a4:a3:1f:2a:1a:e2:6d:f9:43:53:e5:27:
                    c7:f5:02:20:5d:d1:bc:50:f8:e9:54:fc:12:f7:90:
                    91:69:48:9a:a9:a2:8e:18:5c:8e:1c:0c:08:3a:f0:
                    11:ef:f3:d5:09:bf:35:95:d8:3d:96:3f:17:f9:da:
                    6d:4b:59:70:96:0a:f6:8c:22:47:6e:46:a6:b1:60:
                    a6:e6:0a:00:c7:d4:9a:82:96:16:0a:73:af:2e:d8:
                    2d:69:9c:a6:d5:aa:e3:0a:14:55:41:79:a2:51:e0:
                    00:ea:b7:d0:fc:db:8e:ea:fc:ad:a6:58:bd:f5:5e:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EA:2E:2C:9C:46:A2:9E:3F:97:86:36:B7:F3:77:4D:20:5A:7D:FC
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:76:17:b7:5b:93:b1:50:09:ac:37:3d:e7:6b:89:a9:ac:
         a8:87:f5:ac:06:2c:2f:11:ea:19:65:e0:8b:99:66:30:d1:c0:
         db:f7:95:a2:bd:de:ea:77:bb:2f:4a:45:42:1a:f7:71:35:e9:
         cc:56:6f:84:f4:a4:90:3a:bd:d2:6f:34:cb:d7:fe:b7:60:56:
         2f:7f:80:26:0d:3e:e4:be:3a:c8:0c:eb:3d:0b:7f:a6:17:ee:
         0c:5a:1a:85:43:e3:4f:01:d6:42:ac:71:91:d2:4f:f7:7a:6e:
         91:1d:fb:a7:aa:28:50:d0:66:f4:82:d3:d7:0b:4a:59:bf:4d:
         6f:30:86:8e:c5:69:77:81:55:9a:df:a6:35:fb:81:c6:da:e0:
         b0:a9:0c:07:b2:06:e2:c7:8b:74:a7:ce:d3:be:b4:18:34:d3:
         fb:f1:4f:ae:30:88:d1:30:a5:d3:ca:0c:c9:24:80:20:03:39:
         72:ad:62:e9:fd:38:22:62:43:ac:e6:a0:1e:98:18:94:54:4a:
         f7:09:0d:3e:4a:c6:bd:dc:00:c7:c0:eb:a3:24:a6:9b:6b:fe:
         1b:fe:31:01:20:65:7c:76:62:53:e7:3e:f4:ab:91:e9:18:cb:
         25:ed:72:6a:4e:29:e5:39:94:b4:e1:12:b6:3c:5a:83:d2:a1:
         dd:6a:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org