Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          vpKwcF0heP5ajbpxSyUh76R5romXDUwSuKh3BHDneEY=
Subject key identifier:   AB:B8:03:AF:AF:1D:10:18:8A:71:2E:A3:49:87:84:7F:BE:79:CC:B5
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       0DED9B81098E28B3D7B640FD38564AD326FBB93C
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:20:50 +0000
ROA not before:           Thu 26 Oct 2023 01:15:50 +0000
ROA not after:            Thu 24 Oct 2024 01:20:50 +0000
asID:                     266506
IP address blocks:        170.244.181.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:9b:81:09:8e:28:b3:d7:b6:40:fd:38:56:4a:d3:26:fb:b9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:15:50 2023 GMT
            Not After : Oct 24 01:20:50 2024 GMT
        Subject: CN=ABB803AFAF1D10188A712EA34987847FBE79CCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:83:9b:cc:f6:d0:ed:a9:71:17:76:ae:1b:
                    63:76:d9:fd:48:00:3e:d4:42:b7:a4:70:56:e9:e5:
                    c5:78:b2:4f:fe:30:0c:75:2f:b3:02:b8:94:9b:a9:
                    39:61:e3:08:50:b8:61:47:f6:39:be:98:ad:e9:00:
                    02:1e:96:06:fd:69:77:4d:53:c5:7f:76:0f:62:73:
                    0a:e5:14:ff:a9:af:6a:40:bf:b2:fc:50:95:a9:0a:
                    32:7a:58:f1:90:f2:64:4c:14:fa:a3:f2:ed:ca:bd:
                    a1:3f:fa:f9:60:b0:ff:35:31:af:c0:a4:1a:f4:95:
                    e1:cf:a9:f1:57:b8:0d:d0:a3:88:71:12:c1:39:97:
                    75:b7:95:ca:b4:a7:74:5d:10:9a:74:b9:73:fc:7b:
                    76:dd:54:70:27:35:18:8a:cb:f1:9a:d8:a2:2c:a6:
                    e8:04:77:c4:dd:76:8f:f4:15:97:3d:87:03:33:cf:
                    51:8b:d8:c3:6c:c9:7e:23:be:ca:49:0c:23:2b:08:
                    19:0e:5c:5f:25:8f:c3:58:56:92:4a:ef:fb:6b:34:
                    e4:d4:71:4b:94:4a:70:99:b4:32:34:6c:e3:de:42:
                    fd:a7:dd:3b:08:38:92:28:21:1d:08:fd:12:c7:87:
                    40:35:70:85:8d:a6:ea:c9:99:b9:57:f6:8b:b9:c4:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B8:03:AF:AF:1D:10:18:8A:71:2E:A3:49:87:84:7F:BE:79:CC:B5
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.0/25

    Signature Algorithm: sha256WithRSAEncryption
         26:69:aa:ab:0d:6f:6c:ea:0d:4a:9e:c6:97:c1:92:9e:78:7b:
         85:a9:43:cf:b2:fd:51:b3:53:8e:bc:73:d4:a7:36:d3:1f:ae:
         8d:70:63:6a:43:18:1b:c7:7b:d7:35:ad:ac:03:a0:53:42:f0:
         b3:b8:8f:91:b4:0d:e3:bb:bd:2e:96:23:84:15:b3:cd:9f:5f:
         d7:8e:56:25:70:59:1b:2e:49:ec:c2:1b:5c:ff:aa:d2:5b:a9:
         86:1a:a6:28:0f:8b:19:33:e4:ed:27:82:fb:f0:fa:03:1b:57:
         33:65:ad:4c:86:b0:a8:9b:47:6f:94:8a:db:8a:c6:01:b3:77:
         63:04:ac:db:09:c3:ff:cd:de:2d:6a:f5:7e:a2:32:32:59:48:
         89:8f:a7:26:45:7d:b9:5d:ab:43:15:8d:a5:c1:e8:8e:10:26:
         9a:bc:3d:bd:56:1c:3d:17:da:2f:1a:81:c8:25:aa:ca:bf:ba:
         94:e1:2a:f7:c6:f9:e7:77:71:64:6d:bf:f8:25:e6:4d:6e:28:
         c9:25:90:a2:1e:3a:11:5e:83:29:12:16:1f:e3:f6:1b:ac:be:
         6c:95:b4:55:c3:df:97:cb:d3:3f:42:bc:56:2c:b1:50:5d:c8:
         f5:53:11:43:23:ee:3b:30:d1:42:78:72:6d:29:56:6f:a9:ba:
         87:10:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org