Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa
File:                     3137302e302e3230342e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          +N5cpIKVWiZW0KR4sJkoklDVXyTxJhKHjHqmLF61f9I=
Subject key identifier:   21:00:9E:AC:89:D3:24:D4:53:45:02:01:9B:4E:60:A3:4A:4A:29:DD
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       56E08FE1A5FC1C5C83FEB2F04A74CFD8E4DBFBA2
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:42:40 +0000
ROA not before:           Tue 28 Feb 2023 12:37:40 +0000
ROA not after:            Tue 27 Feb 2024 12:42:40 +0000
asID:                     271724
IP address blocks:        170.0.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:8f:e1:a5:fc:1c:5c:83:fe:b2:f0:4a:74:cf:d8:e4:db:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:37:40 2023 GMT
            Not After : Feb 27 12:42:40 2024 GMT
        Subject: CN=21009EAC89D324D4534502019B4E60A34A4A29DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:5e:bd:e1:f4:c7:e9:1c:15:50:1c:45:7f:
                    20:ff:78:ff:7a:38:35:71:6e:e8:72:1c:bd:36:b3:
                    64:60:40:44:00:af:47:37:9a:4a:bd:f6:58:00:7b:
                    20:3a:26:ae:8b:66:43:aa:5d:36:ee:e2:87:37:3f:
                    35:c6:a8:c1:38:bb:c1:cd:a9:8f:32:15:c9:ab:19:
                    54:34:57:10:d7:30:8e:aa:03:c9:dd:77:eb:e3:4d:
                    ec:6e:21:73:bb:d9:dd:76:0e:5e:b4:97:88:2d:eb:
                    87:5b:9e:57:9e:6a:5b:1f:03:85:ba:73:d3:63:a5:
                    7b:e2:d4:b6:c2:92:80:1e:0a:84:5b:f5:3f:c3:b2:
                    36:e5:bc:9a:26:eb:23:59:57:21:dd:b5:93:b7:f7:
                    08:04:f5:eb:84:9a:9d:9c:91:22:ff:74:e6:2d:e0:
                    25:f5:8c:5f:a3:aa:b8:aa:13:2e:59:17:14:20:b9:
                    af:90:78:93:c8:b3:91:50:95:76:c4:b6:b3:2c:e8:
                    6a:57:64:29:ca:7e:bf:94:a9:f0:b6:3e:32:4c:40:
                    17:e1:85:51:17:01:6d:7d:6d:78:95:29:fa:d5:23:
                    4a:2f:b2:57:3e:1c:8c:23:7e:53:35:56:6e:31:a0:
                    9e:c0:ad:d2:e9:12:d2:d7:c8:b8:73:e0:ac:83:44:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:9E:AC:89:D3:24:D4:53:45:02:01:9B:4E:60:A3:4A:4A:29:DD
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:b2:ca:51:dc:05:f4:08:32:34:15:8a:87:ae:48:4f:ed:
         f3:4f:c6:b6:4c:c7:04:c0:22:da:0f:65:5f:4d:8d:ca:1e:dc:
         78:fc:7b:da:64:f3:d7:51:d0:6b:b0:60:e7:a6:58:75:a6:d5:
         af:9e:10:4d:7d:37:7e:9f:ce:ea:04:ac:a8:ee:b3:bf:11:9d:
         b6:12:65:8c:73:f0:15:f1:8a:d3:75:1d:7a:32:c7:40:9a:29:
         64:54:9f:ed:1a:a1:12:98:b1:b7:b6:2e:32:66:26:dd:b3:c7:
         0e:53:e3:b1:ba:d0:20:90:50:e4:86:2d:a7:a7:28:e6:26:a5:
         64:e5:8d:1c:ec:9d:80:a5:a6:92:9b:35:75:b8:39:45:96:82:
         f0:f0:b9:d7:55:5f:79:bc:7e:2e:4d:53:a3:f4:aa:57:00:69:
         07:18:5c:66:da:99:1d:62:b3:ec:26:1f:3d:f0:59:93:05:0c:
         c5:64:68:85:ec:a4:a6:e3:8a:c5:aa:85:11:05:01:71:54:e8:
         d6:f6:67:8b:1a:9b:27:a4:cd:61:1c:fa:bf:e9:01:f0:f1:83:
         ea:5b:bc:31:19:d2:8f:84:57:6a:bd:6e:1a:70:47:d1:40:ca:
         04:48:fd:16:cc:92:c0:e9:19:29:81:40:24:b9:c7:07:14:3f:
         fb:1d:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org