Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32332d3233203d3e20323634353530.roa
File:                     3137302e302e33342e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          Fiocv45LUt3mfK4P20/M9/9ts3VWb8tOPTXPWrovzF8=
Subject key identifier:   23:E2:05:5A:72:3F:AD:04:1F:91:C3:9B:5D:49:F8:D5:C3:67:E9:DD
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       60D30BB0D163A9F9E8181403E1A07261BB5CF872
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:19 +0000
ROA not before:           Wed 10 Apr 2024 00:16:19 +0000
ROA not after:            Wed 09 Apr 2025 00:21:19 +0000
asID:                     264550
IP address blocks:        170.0.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:0b:b0:d1:63:a9:f9:e8:18:14:03:e1:a0:72:61:bb:5c:f8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:16:19 2024 GMT
            Not After : Apr  9 00:21:19 2025 GMT
        Subject: CN=23E2055A723FAD041F91C39B5D49F8D5C367E9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:e2:6a:f9:5d:d1:77:11:c5:1b:9e:5d:b1:
                    74:58:79:0a:7b:9a:9e:99:41:8c:c6:31:a8:e0:8d:
                    7f:ed:24:fa:63:3d:dc:c1:ed:d3:3c:7a:5c:61:0e:
                    e5:32:c7:22:1b:8f:84:45:5b:55:3e:0e:5e:5c:8f:
                    2b:c8:1d:ba:e1:ba:9b:5d:94:90:54:ac:99:5d:18:
                    03:bd:dc:1c:aa:41:9f:27:6c:bd:34:cd:cc:9a:6c:
                    5f:7b:88:67:4d:5f:b7:ef:71:c7:3c:5d:dc:03:2f:
                    54:01:83:81:89:a5:0d:42:a4:e2:e8:5d:41:10:b9:
                    e9:6f:73:e7:53:76:43:c3:ad:64:69:94:47:1c:40:
                    22:ee:62:46:67:63:8f:fe:74:de:67:00:2a:d9:ad:
                    7d:89:c9:a4:d3:e9:f5:29:9b:ea:70:a6:a1:50:c6:
                    73:3b:64:ec:6b:b9:87:51:73:98:ee:ac:c1:86:d0:
                    8b:b4:63:cc:c5:d3:30:dd:b0:5c:db:37:55:08:c4:
                    54:f3:d6:8f:ea:6c:0e:b3:58:72:16:fd:8d:28:e6:
                    a4:30:70:2f:36:18:37:62:d3:d0:2a:bc:7b:db:b0:
                    18:82:f6:8d:bc:6e:e6:5a:d4:a1:04:dd:36:99:1c:
                    64:18:8f:54:83:2f:2e:05:46:71:df:3d:8d:1c:0e:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E2:05:5A:72:3F:AD:04:1F:91:C3:9B:5D:49:F8:D5:C3:67:E9:DD
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33342e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:bd:01:d8:52:fd:63:55:ed:36:65:7b:cc:68:3d:df:0b:9b:
         90:16:8b:94:c3:4c:f6:5f:3e:0f:8f:f4:a5:57:b8:f1:9b:38:
         4e:ea:27:19:28:92:a5:de:41:b1:b6:47:d1:b8:10:c3:e8:10:
         85:e1:05:4a:50:5d:1a:55:9d:21:79:29:38:52:fd:19:66:8e:
         3f:93:1b:e1:fa:14:8b:6b:bb:65:05:0b:6b:55:3c:15:90:73:
         f7:fc:14:96:0c:ca:8a:a2:b3:bb:41:5d:e6:e3:ef:49:01:64:
         97:52:52:21:ab:1f:95:bf:3d:e7:1d:d1:52:d4:34:96:8b:54:
         d8:80:ce:6b:de:a7:b4:2a:a7:bb:08:5d:8e:be:14:1f:cb:e5:
         b2:f2:c1:80:df:cd:de:5d:9d:2c:97:c2:4b:59:bc:01:05:e3:
         f2:14:e0:a4:db:8a:a1:cd:49:4e:5b:72:26:b7:6e:85:32:ea:
         f0:cf:76:14:ae:d1:be:4e:17:c4:7d:00:70:01:be:f4:47:97:
         b0:6c:3e:19:dd:70:aa:d3:e0:c6:e1:83:77:de:d7:01:7b:5b:
         3e:f7:b7:79:71:1a:9d:34:12:5c:7b:9b:3e:ad:2b:d0:97:bc:
         c8:db:50:24:16:d2:f0:13:c2:36:31:c4:a9:12:04:a2:b1:9c:
         43:f6:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org