Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31382e302f32332d3233203d3e203631373332.roa
File:                     3137302e3234372e31382e302f32332d3233203d3e203631373332.roa (raw, json)
Hash identifier:          eqnQTpmJ/lahcqeOdGluQ/rg1hIilhXMeWkk1qCh1J0=
Subject key identifier:   FB:50:6C:22:E5:0D:28:5C:CE:5E:52:C7:BA:9D:E3:F8:53:DF:7A:BD
Certificate issuer:       /CN=4FAD91E56F0594990903F5CFDF1A51C367F178C1
Certificate serial:       134944A65B8B23F24EAC128EE1ABE8FDFA9C34BF
Authority key identifier: 4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31382e302f32332d3233203d3e203631373332.roa
Signing time:             Thu 05 May 2022 21:41:04 +0000
ROA not before:           Thu 05 May 2022 21:36:04 +0000
ROA not after:            Thu 04 May 2023 21:41:04 +0000
asID:                     61732
IP address blocks:        170.247.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:44:a6:5b:8b:23:f2:4e:ac:12:8e:e1:ab:e8:fd:fa:9c:34:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FAD91E56F0594990903F5CFDF1A51C367F178C1
        Validity
            Not Before: May  5 21:36:04 2022 GMT
            Not After : May  4 21:41:04 2023 GMT
        Subject: CN=FB506C22E50D285CCE5E52C7BA9DE3F853DF7ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:93:80:ed:79:8d:ad:37:9f:8d:e9:a0:8b:
                    08:95:17:06:e3:2e:4b:17:a7:e3:f2:f6:19:53:6e:
                    f9:f3:c4:83:ec:26:6e:38:f1:55:95:14:80:27:3b:
                    7c:98:c1:b1:ae:f8:03:00:3d:44:7a:a8:7b:09:a1:
                    4b:d4:cf:59:02:ba:e3:73:bd:09:03:9f:37:ee:68:
                    14:f0:7a:8c:7f:69:51:57:ce:57:b0:6b:fe:d9:09:
                    f7:80:ab:04:05:72:e5:06:36:40:ed:07:2e:9d:fd:
                    9e:43:9f:56:ed:ca:87:e1:a9:c7:72:45:06:08:87:
                    a4:18:d8:d3:6d:73:fc:39:86:6f:01:fe:cb:8f:a6:
                    1b:8a:e2:a6:f2:af:bd:54:a6:5e:29:8c:94:80:0e:
                    c6:23:77:1e:46:83:42:96:02:28:f1:58:46:6a:90:
                    49:0f:31:fd:66:9b:59:83:70:01:e6:97:cf:0f:37:
                    61:3c:3c:a4:c9:55:f9:fd:58:6f:24:0c:74:4c:50:
                    e0:e6:47:be:ac:65:52:b3:78:1a:9f:e9:e0:31:3e:
                    66:43:76:d2:73:dd:08:cf:c3:5e:e3:e9:07:bc:8c:
                    e4:b0:b9:84:a1:ab:1b:6d:ba:cb:95:3e:c2:25:ec:
                    04:b7:5a:2c:f3:6f:a4:94:f3:85:0d:72:cd:a6:50:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:6C:22:E5:0D:28:5C:CE:5E:52:C7:BA:9D:E3:F8:53:DF:7A:BD
            X509v3 Authority Key Identifier:
                keyid:4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31382e302f32332d3233203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:9a:19:af:43:63:1c:59:0f:8a:b6:66:c8:31:34:31:1c:
         73:ee:53:05:5d:27:a9:82:48:e9:4a:65:cd:bd:46:f9:de:1a:
         d2:fa:ba:26:69:94:55:00:e0:0b:7a:ee:9f:89:91:e8:22:45:
         14:54:c6:01:43:3c:10:e7:02:d2:23:bd:ba:2f:64:76:54:b5:
         fa:82:22:79:fa:3d:9d:21:1f:5a:c8:9a:c5:9c:c2:08:da:b9:
         5e:e2:eb:5b:f3:7a:f8:8f:68:9d:b9:cd:68:1e:87:1b:ef:7e:
         fa:92:d8:90:d2:7c:1f:4d:77:d6:f1:25:62:55:ac:2e:c0:d0:
         d8:a9:5e:59:32:81:22:f7:6c:00:2d:ff:dd:0c:58:e9:b1:17:
         3b:48:98:ef:18:a2:1c:3e:fa:4c:9f:c9:5d:69:64:2f:56:5e:
         5a:e9:9e:33:69:f7:a7:45:cf:c1:3f:a3:d6:26:6c:f4:bf:b6:
         19:02:ab:0b:4a:65:a7:c3:a4:8b:e1:65:a6:5c:c0:a1:0b:a3:
         27:78:7d:ed:2a:88:12:c1:2b:f0:2b:57:bc:af:c3:e0:6c:52:
         99:6b:04:a5:09:38:29:83:ef:6a:81:52:1e:bd:f7:7a:55:68:
         67:2c:ce:44:b1:f4:14:f9:f8:c6:45:68:9a:3a:81:e9:ae:ca:
         44:7d:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:04 2023 by rpki-client on console-ams.rpki-client.org