Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          P+ekZ+y/tlabd5eDDYidyQtoouQOd+VlP67OBCqsTkE=
Subject key identifier:   45:3D:BC:83:F2:1B:9A:AF:CF:91:18:E0:80:A5:3A:6C:66:34:2F:FA
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       0BA2A6F0880A2C5ED239E455FD50709491651B8D
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:21:54 +0000
ROA not before:           Thu 26 Oct 2023 01:16:54 +0000
ROA not after:            Thu 24 Oct 2024 01:21:54 +0000
asID:                     266506
IP address blocks:        170.244.183.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a2:a6:f0:88:0a:2c:5e:d2:39:e4:55:fd:50:70:94:91:65:1b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:16:54 2023 GMT
            Not After : Oct 24 01:21:54 2024 GMT
        Subject: CN=453DBC83F21B9AAFCF9118E080A53A6C66342FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:60:28:9f:60:ce:6b:79:ea:db:06:94:fe:
                    73:1d:12:55:ea:b1:df:a0:bc:4a:b0:17:71:f0:88:
                    0e:af:59:32:fd:12:8b:e8:a9:8a:8e:e2:b5:10:a9:
                    b8:b4:5c:c7:67:2f:8c:87:85:6c:ca:8f:5b:7d:22:
                    71:6c:2a:80:d8:27:97:fc:b5:02:6f:20:dd:18:ce:
                    3f:fa:16:ba:e6:f0:1b:b3:a7:e2:5c:e7:87:d8:89:
                    ba:c9:25:2f:13:49:1e:b6:50:a7:09:4b:15:37:80:
                    20:94:7a:d4:ce:76:ee:6c:95:76:6c:38:80:95:e5:
                    e9:6d:59:9e:3b:6d:f0:96:2e:3e:30:82:b9:50:a0:
                    0a:da:90:b3:36:4e:12:79:04:e1:d5:6e:b4:d0:94:
                    86:2b:8e:db:5b:93:c7:f2:66:52:fe:28:2f:1f:96:
                    ae:10:eb:ad:92:09:79:e9:17:3c:d3:aa:7c:ef:c0:
                    d6:01:1b:b5:31:f6:90:b7:28:d5:72:79:7b:01:8e:
                    54:fa:2f:08:4a:5c:78:a4:a7:b1:ab:f8:96:b2:b3:
                    e5:7b:56:89:66:01:ef:ea:9e:ce:8b:0a:39:49:fa:
                    b4:b9:ee:1b:af:c3:30:f3:92:3e:2f:e1:17:01:04:
                    da:4d:0d:82:91:ed:5a:e3:b3:1e:50:82:d9:4c:e5:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:BC:83:F2:1B:9A:AF:CF:91:18:E0:80:A5:3A:6C:66:34:2F:FA
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.183.128/25

    Signature Algorithm: sha256WithRSAEncryption
         43:52:9c:21:d0:4e:a0:3a:c8:66:f3:34:fe:c8:d5:a5:83:47:
         b8:f5:22:6d:03:61:c2:fa:d0:51:2b:f8:51:81:10:e1:58:03:
         fd:c3:17:34:28:88:07:9e:e5:0a:9d:6a:37:81:16:ba:82:b0:
         60:bf:e2:97:88:c3:13:b8:a0:f2:c5:18:e2:e2:e5:08:0f:45:
         08:e7:22:37:aa:05:6f:99:d7:4a:1a:48:35:3c:64:4f:55:5c:
         ce:6c:a3:0c:5a:b3:4e:d8:9f:d5:09:ea:9d:7f:69:c3:c2:6c:
         71:b3:38:b4:ce:cf:1c:f2:42:29:33:84:f9:0c:f3:97:9f:de:
         1d:f0:5d:8b:a2:f4:6a:ef:e0:3c:f0:59:d2:8f:a4:59:66:1e:
         41:c0:b2:31:67:14:5d:f7:19:41:db:a2:0b:19:99:92:41:52:
         9a:00:b1:a4:60:cc:98:f8:b0:1a:2d:ae:b2:a7:c2:92:f9:69:
         9f:bd:63:f7:df:81:3f:6b:6e:28:f0:06:16:4d:bc:6a:fb:59:
         23:ac:5e:b4:37:c0:8a:f5:25:35:3c:a1:34:c6:76:c5:0c:bf:
         c5:ac:e9:f0:ef:92:ce:f2:34:84:fc:5d:34:0a:24:d4:d1:5f:
         41:ac:bd:fa:c9:3c:d5:97:37:ed:25:92:14:d3:6d:9f:d3:02:
         63:99:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org