Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e302f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138322e302f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          wTyFoXFrEWPdI/SFfE/rRlb6POIbuaLcddQsnDpBBhc=
Subject key identifier:   BA:30:84:D4:49:91:C8:AA:BE:17:13:AA:4A:A4:F6:2A:FC:E2:0D:2C
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       04B39AD916BC3782864ABFD69511D111322206C3
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e302f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:21:19 +0000
ROA not before:           Thu 26 Oct 2023 01:16:19 +0000
ROA not after:            Thu 24 Oct 2024 01:21:19 +0000
asID:                     266506
IP address blocks:        170.244.182.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:9a:d9:16:bc:37:82:86:4a:bf:d6:95:11:d1:11:32:22:06:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:16:19 2023 GMT
            Not After : Oct 24 01:21:19 2024 GMT
        Subject: CN=BA3084D44991C8AABE1713AA4AA4F62AFCE20D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:37:6a:e9:3a:a8:f1:5d:38:9b:3b:23:00:aa:
                    ff:49:e2:c3:51:2f:ee:5a:42:aa:1b:d8:a7:3b:09:
                    2a:bd:51:47:82:51:b7:0f:3f:bd:12:46:8c:09:d1:
                    ad:6d:b2:d1:e9:1f:20:ef:7e:e3:c3:b4:eb:34:73:
                    78:a6:6d:cc:df:21:7e:b9:c2:0d:d8:72:bf:38:c9:
                    09:fd:1a:3b:49:f8:53:ac:a0:d2:70:e5:32:10:16:
                    53:fa:c5:93:bf:01:49:4b:21:a6:15:f8:1c:55:cc:
                    f3:1e:95:fc:c5:a2:68:53:47:8c:1d:81:15:3e:7b:
                    d1:dc:69:db:b1:5a:4a:0b:55:e0:4c:e8:b2:12:1f:
                    d4:05:d0:5a:80:6e:37:11:b6:6c:f7:c1:03:a2:27:
                    aa:74:73:01:81:b3:89:d0:66:2d:e3:4d:58:98:f8:
                    ec:71:2c:a0:08:bd:15:9f:a8:dd:7b:82:a8:99:65:
                    bb:7a:0a:3b:86:a1:9c:a6:18:86:fb:94:91:c4:0c:
                    c0:84:d7:bb:0a:dc:3c:f7:0f:53:89:d1:89:95:1d:
                    67:13:31:46:02:f8:45:ed:81:a2:89:56:63:c7:f4:
                    e0:8a:b7:d5:a7:f3:1c:c4:18:32:d4:00:e7:8a:b3:
                    35:f0:ac:bd:dc:90:89:18:34:96:32:43:a5:76:70:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:84:D4:49:91:C8:AA:BE:17:13:AA:4A:A4:F6:2A:FC:E2:0D:2C
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138322e302f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.182.0/25

    Signature Algorithm: sha256WithRSAEncryption
         22:86:b5:d8:84:c4:3a:b1:55:22:d1:72:2a:7e:74:07:5d:a2:
         3b:d3:8a:97:a8:0c:e5:56:eb:d2:0b:aa:1a:34:c0:ac:77:8c:
         a9:93:1c:19:ae:12:c0:a4:96:11:72:f0:90:53:77:e2:85:93:
         35:7a:71:7a:34:d2:77:80:7b:c8:cd:32:21:d0:30:1f:70:69:
         94:75:f9:83:d3:a1:65:d5:6b:7b:f9:21:04:ad:ef:f5:de:c5:
         a6:d5:46:11:64:d1:f5:8f:7c:cf:dd:13:f0:be:fe:a8:6c:43:
         08:54:3d:ee:36:ee:6f:c4:ca:09:11:7e:71:87:5c:d1:01:3d:
         2e:89:23:40:03:e3:79:04:8a:18:b8:9f:b1:c3:9b:58:0c:bc:
         98:4a:3d:7c:40:60:73:3d:51:ed:5d:59:ba:c1:7f:5b:34:9b:
         c0:f2:8f:e7:3d:47:b5:16:d9:18:22:8b:c1:fc:ce:ba:39:50:
         1c:9c:1d:99:98:2d:32:cc:ff:c4:e3:03:04:3b:eb:88:24:b6:
         cc:5a:c8:d5:e9:fe:82:2e:c5:ef:24:43:15:76:72:62:2d:05:
         e1:d8:07:41:b5:fa:dc:ea:8a:95:2e:76:2b:dc:0d:af:79:0e:
         cf:17:f2:51:e0:a7:c2:b4:3f:58:3c:f5:bf:aa:63:9e:d0:45:
         67:76:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org