Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa
File:                     3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa (raw, json)
Hash identifier:          9U1WyHs86jW7mPdVXT16ycQPIe3EUa/KP0wfAVX6lYs=
Subject key identifier:   3B:BD:D2:5E:57:68:EB:17:B4:4B:39:41:D3:9F:28:77:27:3C:31:D6
Certificate issuer:       /CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
Certificate serial:       429FB299BBB9C2432A4767141C58CCC1EBF4B7B0
Authority key identifier: E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa
Signing time:             Tue 02 Jan 2024 21:14:39 +0000
ROA not before:           Tue 02 Jan 2024 21:09:39 +0000
ROA not after:            Tue 31 Dec 2024 21:14:39 +0000
asID:                     266029
IP address blocks:        170.246.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9f:b2:99:bb:b9:c2:43:2a:47:67:14:1c:58:cc:c1:eb:f4:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
        Validity
            Not Before: Jan  2 21:09:39 2024 GMT
            Not After : Dec 31 21:14:39 2024 GMT
        Subject: CN=3BBDD25E5768EB17B44B3941D39F2877273C31D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:94:25:c8:dd:07:66:57:40:aa:37:42:c9:98:
                    59:f8:1e:03:1f:a8:0d:db:e7:5a:56:cc:e8:3b:f7:
                    15:8d:bc:08:b8:e0:0e:98:19:f5:41:73:74:8f:46:
                    85:03:e3:46:76:78:75:33:d8:51:6d:50:4b:36:d0:
                    68:87:ad:67:b1:2c:8d:0b:30:29:d6:c1:63:ca:57:
                    4d:20:66:56:3b:69:08:19:ea:bf:18:56:45:68:5f:
                    ab:ba:01:da:2f:66:22:f2:32:7e:48:9f:d7:b7:a0:
                    db:88:78:8a:96:e1:81:6a:9c:c7:e0:fc:16:75:bb:
                    be:e0:a1:f2:33:3a:cd:e7:45:aa:98:be:db:60:34:
                    07:5d:d3:b1:8c:0a:54:23:6f:72:96:e1:00:af:c1:
                    16:db:e2:6c:39:55:f1:2e:59:dd:97:7c:3b:23:68:
                    eb:35:8d:ef:6a:39:0c:b5:93:f5:60:58:c2:bf:fb:
                    cb:aa:5d:98:eb:3a:9f:b4:d7:ff:2c:08:33:5e:d6:
                    91:18:49:91:2e:4a:83:07:8a:7c:d6:13:f1:86:fd:
                    83:7e:a4:4e:dd:b4:bb:31:f7:7e:c9:fa:4a:f0:c9:
                    0a:00:18:fc:a1:6c:dc:75:59:8b:d4:69:a0:29:66:
                    fd:8c:e1:fd:2d:4c:96:4c:d7:5a:6a:f7:a6:07:f6:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BD:D2:5E:57:68:EB:17:B4:4B:39:41:D3:9F:28:77:27:3C:31:D6
            X509v3 Authority Key Identifier:
                keyid:E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:b5:a7:71:a0:eb:28:e1:ac:a1:50:61:be:d0:88:bc:22:
         5a:71:84:19:9f:6f:33:89:46:26:c5:56:ee:58:5b:75:fc:cd:
         de:08:6f:6b:47:06:a3:3a:31:4d:ee:02:94:00:a9:bc:a0:f8:
         74:13:0b:f5:e9:8d:cf:4b:7c:2b:e1:02:6c:4a:d7:75:dd:79:
         f6:30:3c:9f:82:4a:c2:86:8f:0d:f0:de:d4:34:0a:e6:31:01:
         fa:40:e4:d0:73:05:aa:59:02:32:3e:7e:c6:8d:3c:e1:fe:a5:
         31:16:25:49:06:5d:37:ab:61:fa:9b:82:5a:9c:e4:67:ca:15:
         f8:35:51:76:4c:de:c6:b6:63:3e:72:83:5c:30:76:0e:32:ab:
         7a:30:92:a6:93:29:2b:97:e7:e8:89:68:56:bb:2e:76:5d:4d:
         ab:e3:6d:e3:de:d1:94:cf:6e:12:00:df:cf:10:26:4d:ec:c8:
         88:8d:5c:f4:5a:4c:fc:b8:21:d8:ac:9a:79:88:51:b0:05:87:
         28:07:54:0a:a2:68:69:82:da:c4:b3:22:5e:ed:8a:c8:37:ed:
         6f:a0:75:dc:72:a6:07:7d:e0:c5:a5:62:25:ad:52:bf:1f:c7:
         35:aa:8e:11:75:de:fb:d9:40:79:71:62:2c:a6:4f:cb:d9:73:
         aa:12:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org