Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3234203d3e203631373332.roa
File:                     3137302e3234372e31362e302f32322d3234203d3e203631373332.roa (raw, json)
Hash identifier:          beQ/g76V0ktbNMTsakVhVQST2CcxRofXw0mn4r1DX5s=
Subject key identifier:   D8:9D:C8:F3:29:ED:56:27:13:98:26:6E:C6:17:7D:1F:14:ED:F6:B0
Certificate issuer:       /CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
Certificate serial:       5271C5A7681EA228CCB2B5C79FBCE6554DA0316F
Authority key identifier: 08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3234203d3e203631373332.roa
Signing time:             Fri 22 Sep 2023 21:04:04 +0000
ROA not before:           Fri 22 Sep 2023 20:59:04 +0000
ROA not after:            Fri 20 Sep 2024 21:04:04 +0000
asID:                     61732
IP address blocks:        170.247.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:71:c5:a7:68:1e:a2:28:cc:b2:b5:c7:9f:bc:e6:55:4d:a0:31:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
        Validity
            Not Before: Sep 22 20:59:04 2023 GMT
            Not After : Sep 20 21:04:04 2024 GMT
        Subject: CN=3082010A028201010095FA4BE09A810DB6787CE6F115F6087FF1A87D33F01080A5F24C3189788A9BEC2B99D44D0846DEAD11459A84FD734D7D0772682BA1F00A98F041A7412A2FE47427D01028F407321EC3BE5DCA4780DA9154D038C029ADF0DF9F00532A60EAC36E0124D57F8BCE0C79E9EB3BB167E96FFB6459FC9187205A4D525928FC85B1A14C7D097EB8021AA4E168FDD18C07D81A1540A2132576AB01CD9328790682CB8C3D9AC7E296E5393D8826630FE12C2CD7C20C587E48A9A40C12C7655A5975ED58D2EBD3219DC46B7B544023E8D04192B7D22DBE7E5FF736A44867F2D22E013BA067DDAF241C10B341A3DE80B1791DC74B828FE59FDAA91EA6B33C7EB8F8F8D572B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:4b:e0:9a:81:0d:b6:78:7c:e6:f1:15:f6:
                    08:7f:f1:a8:7d:33:f0:10:80:a5:f2:4c:31:89:78:
                    8a:9b:ec:2b:99:d4:4d:08:46:de:ad:11:45:9a:84:
                    fd:73:4d:7d:07:72:68:2b:a1:f0:0a:98:f0:41:a7:
                    41:2a:2f:e4:74:27:d0:10:28:f4:07:32:1e:c3:be:
                    5d:ca:47:80:da:91:54:d0:38:c0:29:ad:f0:df:9f:
                    00:53:2a:60:ea:c3:6e:01:24:d5:7f:8b:ce:0c:79:
                    e9:eb:3b:b1:67:e9:6f:fb:64:59:fc:91:87:20:5a:
                    4d:52:59:28:fc:85:b1:a1:4c:7d:09:7e:b8:02:1a:
                    a4:e1:68:fd:d1:8c:07:d8:1a:15:40:a2:13:25:76:
                    ab:01:cd:93:28:79:06:82:cb:8c:3d:9a:c7:e2:96:
                    e5:39:3d:88:26:63:0f:e1:2c:2c:d7:c2:0c:58:7e:
                    48:a9:a4:0c:12:c7:65:5a:59:75:ed:58:d2:eb:d3:
                    21:9d:c4:6b:7b:54:40:23:e8:d0:41:92:b7:d2:2d:
                    be:7e:5f:f7:36:a4:48:67:f2:d2:2e:01:3b:a0:67:
                    dd:af:24:1c:10:b3:41:a3:de:80:b1:79:1d:c7:4b:
                    82:8f:e5:9f:da:a9:1e:a6:b3:3c:7e:b8:f8:f8:d5:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:C8:F3:29:ED:56:27:13:98:26:6E:C6:17:7D:1F:14:ED:F6:B0
            X509v3 Authority Key Identifier:
                keyid:08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3234203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:b8:f1:b6:eb:dd:f8:86:f1:13:3b:4a:8b:b1:83:d9:b2:
         ad:c2:7f:77:ac:87:cb:95:1f:40:ff:79:3c:f6:2d:3d:8b:50:
         a8:a5:be:0f:26:09:68:ab:f3:ab:79:52:c4:9d:35:2d:70:d9:
         01:0c:05:94:2c:5b:db:44:22:73:49:c3:f9:53:f4:c8:31:0c:
         dc:e7:ff:45:53:21:54:83:05:35:ce:0b:8a:70:7d:e5:38:1c:
         dd:71:8d:71:7e:3e:35:96:21:9c:f4:c3:5c:ce:89:05:7b:b0:
         19:44:e0:af:56:5b:1e:56:6d:40:d6:e3:94:ba:ff:8a:51:6d:
         a5:4a:17:71:77:a2:d5:64:4f:d1:81:a7:a7:44:f7:ed:6f:ca:
         ed:b9:d2:57:f1:7a:25:00:a4:a3:82:fa:c4:ae:84:02:37:19:
         34:2e:20:d2:ba:c5:cb:ba:88:da:66:8c:4c:0a:c2:97:2b:81:
         07:c7:83:00:35:4e:4f:76:5c:38:94:54:d1:19:3a:a6:57:73:
         ab:20:ec:b6:77:55:70:59:ac:75:01:bc:da:d7:7c:f1:3c:94:
         f0:48:ee:fa:8f:a0:b2:30:aa:1f:6b:15:1b:f3:12:2b:f5:3f:
         cb:fb:44:d7:d5:07:ca:ce:b9:a5:f1:91:3e:4b:88:c0:60:0b:
         6d:3a:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org