Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32332d3233203d3e203631353739.roa
File:                     3137302e37392e3234322e302f32332d3233203d3e203631353739.roa (raw, json)
Hash identifier:          yd6++tqZH3ARs6Y4ItUM+A1Grfmto4dpdJ9FxCLKW20=
Subject key identifier:   71:E4:60:B0:D3:E5:08:12:9C:EB:1B:41:FA:6A:FF:2F:90:56:6C:77
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       5995A856DE4F024C96D2FFAA23F733250ABBD919
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32332d3233203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:37 +0000
ROA not before:           Tue 06 Feb 2024 11:56:37 +0000
ROA not after:            Tue 04 Feb 2025 12:01:37 +0000
asID:                     61579
IP address blocks:        170.79.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:95:a8:56:de:4f:02:4c:96:d2:ff:aa:23:f7:33:25:0a:bb:d9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:37 2024 GMT
            Not After : Feb  4 12:01:37 2025 GMT
        Subject: CN=71E460B0D3E508129CEB1B41FA6AFF2F90566C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:91:d8:8a:5c:ee:6b:b1:a0:f1:4e:9c:50:
                    fd:82:8b:7a:f7:d6:c0:fb:d8:85:7e:55:53:b5:f6:
                    cb:7d:7c:8a:16:a6:cf:36:8f:9d:b2:3a:7d:7c:b9:
                    3e:0e:bb:b7:f3:ff:f2:4f:c0:42:07:20:ca:5e:31:
                    a4:07:4e:69:52:35:c8:d6:39:e2:19:ce:cd:ed:7d:
                    a2:9c:e3:9d:63:7a:d7:90:52:19:6e:ed:a1:db:1b:
                    55:61:54:24:58:12:cb:d6:85:ca:2e:0a:30:cf:79:
                    55:e2:75:b8:93:96:50:4b:a0:77:f7:62:bf:62:7d:
                    3c:9c:e4:84:d1:63:d7:5b:3c:83:67:89:46:6f:c1:
                    13:a3:be:48:f5:20:9e:d5:55:90:91:2b:bd:5f:e2:
                    44:8e:ff:7b:29:73:eb:97:a2:48:cc:5e:d8:a2:c7:
                    94:0b:bf:c4:00:2a:de:e2:82:a7:dc:d4:01:52:71:
                    39:15:11:41:79:b7:aa:4f:e1:ea:dc:2f:3e:13:7e:
                    f8:40:e6:83:89:fb:fb:43:9f:4a:d1:ec:4d:ca:57:
                    a3:07:91:20:8e:80:d7:9e:cd:8d:73:33:a2:95:54:
                    9a:0a:88:e7:2d:a8:15:b6:3f:2b:a1:c7:07:e2:cd:
                    58:9a:ed:c0:05:d0:03:62:1e:09:00:5c:90:5e:37:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:60:B0:D3:E5:08:12:9C:EB:1B:41:FA:6A:FF:2F:90:56:6C:77
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32332d3233203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:78:1f:a0:88:fd:67:c8:ff:de:47:3f:2f:4b:b6:fa:86:
         01:f3:d5:1b:06:af:02:bc:92:7e:bf:1a:3b:40:46:bc:db:31:
         14:0c:6f:2d:3f:10:98:c9:f9:3b:0e:ec:f5:2d:40:de:e1:9c:
         7b:b0:2c:16:3a:b2:71:5e:e9:5a:a0:e6:a9:aa:38:bd:5f:4b:
         b3:7e:78:fc:9b:04:fa:c0:87:ae:08:0a:f1:cf:7e:80:a6:c4:
         d8:b1:97:c1:39:7b:20:d2:a6:c8:36:f7:83:30:2b:c4:e7:55:
         49:0a:3e:7c:17:8e:97:c9:18:77:30:08:f9:00:70:48:8f:8e:
         99:e6:04:cd:18:0d:39:56:0a:1f:6c:5c:66:a7:80:38:9d:b6:
         3c:12:86:f9:91:21:52:fe:7a:3f:f6:64:a3:30:c5:6b:cb:1c:
         d7:5c:cd:76:dd:e1:73:10:79:d8:63:7b:9a:2f:a9:9f:9a:e7:
         8f:4c:fb:47:6b:39:fe:5a:dc:97:66:c3:72:b3:f6:55:ef:db:
         80:36:0e:7f:6d:98:44:b8:f3:4b:b1:a7:7e:12:ce:02:9d:c3:
         be:31:03:cb:e2:77:0e:dc:ed:d2:00:77:9c:f4:4a:74:47:5d:
         ee:4f:92:bd:88:1c:59:e2:30:7f:7c:e0:03:00:a5:c7:24:f7:
         d4:b0:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org