Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138332e302f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          PmH3yEdeO/HJnPgwSvsjj8MuNazD4KUCUPu8O56uFu8=
Subject key identifier:   AF:1F:A3:6C:49:9D:19:90:07:B2:48:DF:23:2C:BC:39:4D:0E:B9:3F
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       253DB2BC75FE72DF741E3C967FBF01D8F0BF9DA9
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:21:44 +0000
ROA not before:           Thu 26 Oct 2023 01:16:44 +0000
ROA not after:            Thu 24 Oct 2024 01:21:44 +0000
asID:                     266506
IP address blocks:        170.244.183.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3d:b2:bc:75:fe:72:df:74:1e:3c:96:7f:bf:01:d8:f0:bf:9d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:16:44 2023 GMT
            Not After : Oct 24 01:21:44 2024 GMT
        Subject: CN=AF1FA36C499D199007B248DF232CBC394D0EB93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:7d:f9:9b:ac:04:48:66:7a:b8:ff:c8:7e:
                    f8:53:1a:ab:a5:5a:4c:e9:e7:be:db:bc:00:f6:c8:
                    88:bc:32:04:cb:98:10:dd:cf:69:18:d7:f4:49:72:
                    2b:89:3f:37:a6:4d:19:8e:85:18:e6:4b:7a:68:d3:
                    7b:b6:a7:56:e0:5e:54:85:aa:45:5f:13:3b:20:d3:
                    66:20:a9:d3:a8:9d:cb:ad:c7:eb:69:bf:40:6c:81:
                    d6:1b:72:89:dc:27:23:dc:f1:fd:66:ac:b8:b4:2d:
                    a9:c4:43:5a:6b:39:45:3a:63:de:18:23:77:04:2c:
                    61:7f:65:35:26:48:bb:17:30:65:a3:67:71:3c:d7:
                    b9:ee:ab:aa:b2:a4:3e:aa:be:25:5c:89:17:57:d2:
                    ec:4a:3f:de:4c:05:56:5a:b0:a9:51:89:39:b2:07:
                    02:18:2d:f5:24:58:26:09:dc:fa:d7:ed:50:fe:0e:
                    03:b2:d0:22:ec:66:a8:a2:68:24:c9:6f:41:ff:32:
                    8f:9f:10:b5:7e:02:8c:ef:c7:6c:06:55:54:9a:23:
                    13:0d:d4:94:56:7f:f3:62:61:45:76:f5:d3:64:51:
                    5a:08:f5:e2:78:60:8f:5d:44:4b:a5:97:d3:60:81:
                    f2:ce:5a:e7:71:25:3c:19:eb:08:5f:6f:76:8b:fa:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:A3:6C:49:9D:19:90:07:B2:48:DF:23:2C:BC:39:4D:0E:B9:3F
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e302f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.183.0/25

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:ca:54:87:1c:50:06:b4:99:c7:e8:4d:05:fd:e8:43:7e:
         8c:10:8a:02:46:2d:bb:a7:6b:7b:48:5b:dd:b4:da:99:ac:ee:
         77:d5:ed:bf:03:4b:6e:0e:ae:f1:25:72:10:4b:40:f5:34:17:
         84:cb:e3:20:53:2b:e1:fa:cb:64:39:a9:1b:c3:7c:d4:68:52:
         54:4b:f2:ef:a4:dd:46:ca:66:24:5e:02:1f:39:eb:c2:c1:9c:
         33:66:0c:45:f9:73:55:fd:fe:ea:d7:06:06:ff:c1:3f:e4:fb:
         3f:d8:c4:0c:ee:89:61:7b:b1:d6:7d:33:d3:9c:59:ec:75:51:
         03:7e:9b:0d:4b:ec:0d:8f:a9:b7:f0:8e:ee:21:07:a2:9d:6c:
         5c:f0:84:33:2c:0f:ef:da:5f:e2:c9:93:5d:6a:9d:c5:b8:04:
         f2:b6:13:74:bf:68:c8:12:78:0f:f6:72:89:b5:f1:e8:1d:9b:
         06:53:4c:b5:b8:bc:7e:a3:1b:f4:df:18:f1:9e:2e:01:ad:29:
         bc:a2:de:e2:e7:fe:9c:32:f2:bf:25:fc:59:c7:11:35:e9:fb:
         35:f4:3d:78:bf:3d:cc:40:9e:99:dd:28:b9:a0:e9:00:b5:fa:
         5d:17:a4:e4:f0:69:87:7d:02:63:69:1d:28:ec:c8:cb:9b:24:
         ca:c9:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org