Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa
File:                     3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          Hlw4nOtwolL2om2fi1Ob0ChJrNpdOq5VWLQdyjiRUb8=
Subject key identifier:   6C:F9:7C:06:E8:C0:FC:A0:2E:F2:89:FF:92:BE:0F:27:88:2A:33:74
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       2247F9487FA5B44F7777DC05A88F1F2D7FC05DC9
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        170.233.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:47:f9:48:7f:a5:b4:4f:77:77:dc:05:a8:8f:1f:2d:7f:c0:5d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=6CF97C06E8C0FCA02EF289FF92BE0F27882A3374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:f8:fe:61:19:f2:b7:51:c1:4d:d7:a4:7c:
                    9a:2f:d4:8c:b8:de:71:b1:15:b9:ea:22:5d:88:75:
                    ed:28:4c:89:aa:da:52:59:54:3f:0c:8b:c4:a1:81:
                    69:30:6c:0f:4c:e5:e5:b7:4c:ac:25:0f:cb:51:22:
                    8b:c2:31:e4:1c:29:38:32:05:db:54:f1:43:22:d1:
                    21:40:b8:c5:44:ed:77:26:1f:8e:27:10:0c:d6:24:
                    0a:c0:cd:b0:3d:bd:77:e9:22:af:3d:66:fe:4b:7d:
                    8d:5f:33:5a:59:eb:b4:d4:cf:9f:49:b9:20:7e:ef:
                    1f:21:39:09:f7:72:3d:3f:e8:b7:47:75:3d:f4:8b:
                    dd:22:0f:ff:96:74:3b:4e:d4:5d:34:31:02:1f:e5:
                    e9:76:86:8a:b1:ad:8a:7a:4e:6d:61:23:4b:2c:99:
                    7b:cb:94:d9:94:0e:83:84:f3:04:82:08:f8:6d:3e:
                    d0:a4:de:79:fe:b0:98:91:07:fe:3b:03:15:ed:fa:
                    f0:ab:41:a2:84:e9:f5:42:35:1c:30:49:67:c7:3c:
                    2a:c5:40:01:45:c6:d8:c7:03:64:95:d6:ae:2b:76:
                    49:a8:fd:f7:59:90:23:f9:16:b2:50:aa:9a:25:14:
                    f7:f3:8d:8f:11:dc:08:72:6a:43:b7:85:f4:7c:f9:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:7C:06:E8:C0:FC:A0:2E:F2:89:FF:92:BE:0F:27:88:2A:33:74
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:04:3a:4c:5b:8c:3d:5b:c7:06:10:2e:fc:03:d3:70:ae:44:
         4c:0e:b6:7d:db:1e:3c:da:72:f3:90:20:84:d7:49:0d:97:cb:
         14:22:f4:1a:ee:39:ab:02:6f:2f:d0:81:be:53:f1:05:d6:27:
         e2:b2:5e:11:14:8a:c2:12:f4:ee:86:54:83:14:8b:ae:32:3d:
         4b:0a:c0:7b:da:49:68:9f:0b:93:9b:ff:aa:93:a2:35:c5:7f:
         2c:5f:a7:e0:fd:9b:62:2a:e0:e6:2b:7a:4e:54:aa:6f:72:1d:
         f0:b7:07:c7:7c:c0:46:61:32:8c:13:34:bd:db:1b:37:02:8a:
         2c:37:a2:8a:90:f5:e0:8e:52:ac:8a:8d:81:dd:c4:8e:5b:97:
         2a:7f:a8:2e:79:6d:b1:2b:9d:0f:70:ba:95:47:d1:b4:01:18:
         12:c4:7f:47:25:dc:74:ab:75:70:55:cb:15:f6:53:e4:6d:c2:
         73:75:3d:12:ba:19:bf:e3:f7:1c:49:2c:1b:59:db:62:a0:aa:
         e9:65:dc:34:f5:69:dc:c1:1e:fd:ec:b8:50:bf:23:e9:26:80:
         88:21:96:a2:d4:a3:83:de:cb:0a:74:2d:e0:18:b6:ea:c5:73:
         10:33:4a:ed:f4:54:95:52:78:db:d2:f5:d9:f2:0f:8f:14:70:
         db:8a:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org