Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          V1GJAjmvkZsPrbZI1QysdUn5BJydsXVIobkUNL0VqLI=
Subject key identifier:   5A:37:F2:0D:49:7B:8D:37:8F:B4:6F:FD:A1:75:56:30:F2:57:81:95
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       08342FA9E93434CB9F2F22CE2A68FFDD0E1A2956
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
Signing time:             Fri 19 Jan 2024 15:21:03 +0000
ROA not before:           Fri 19 Jan 2024 15:16:03 +0000
ROA not after:            Fri 17 Jan 2025 15:21:03 +0000
asID:                     266348
IP address blocks:        170.239.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:34:2f:a9:e9:34:34:cb:9f:2f:22:ce:2a:68:ff:dd:0e:1a:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Jan 19 15:16:03 2024 GMT
            Not After : Jan 17 15:21:03 2025 GMT
        Subject: CN=5A37F20D497B8D378FB46FFDA1755630F2578195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:4b:86:d5:06:70:e7:11:18:25:ff:3a:ef:
                    46:56:05:b4:a0:60:bd:da:c8:d1:a1:c8:54:c2:7f:
                    ca:06:1c:4a:4e:f9:f9:d5:c1:4a:8b:c4:07:62:e0:
                    f3:93:18:9c:f7:14:49:30:95:15:7a:56:0d:d5:50:
                    a8:82:f1:51:57:f1:b0:fc:98:ba:20:98:55:ec:60:
                    1a:51:7f:e6:73:87:1a:c5:7f:2c:14:29:cd:19:fe:
                    ad:b2:cc:5a:bd:51:c8:b3:49:18:93:02:86:8f:44:
                    a7:7a:55:dc:21:44:0b:49:13:05:8c:13:4c:73:ad:
                    d4:14:cb:f1:96:99:2c:0e:d2:0a:2b:e6:82:18:cf:
                    7c:f0:0c:55:bf:40:48:94:97:0a:20:91:fd:98:fa:
                    be:77:42:c4:7e:fa:ee:b5:8e:90:8e:5c:5a:83:8b:
                    c8:83:37:2e:57:cb:f5:70:74:21:96:66:02:8a:3d:
                    26:79:64:9c:ea:4a:ac:13:8f:ea:5c:94:53:5f:45:
                    0b:f9:d4:9d:4e:13:6a:22:d2:c1:b0:32:90:bd:62:
                    7c:db:1b:00:b3:33:eb:15:f6:fb:81:2e:69:57:eb:
                    d3:e2:30:bb:d0:92:0f:6e:aa:d2:63:6d:98:b6:2c:
                    8d:3e:41:c9:3e:ee:41:fd:a1:79:6f:d6:7f:70:c7:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:F2:0D:49:7B:8D:37:8F:B4:6F:FD:A1:75:56:30:F2:57:81:95
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:60:c7:eb:3a:6e:7f:8d:7a:80:51:fd:05:66:5a:04:4e:00:
         30:8c:17:06:ea:0c:43:56:05:45:d9:ab:93:46:96:ac:e3:8a:
         44:2c:a6:49:6c:60:d3:97:c0:8c:c9:e1:a2:ac:fd:5d:3e:62:
         f1:b6:4d:bd:f6:19:ce:5d:0f:73:cb:f1:22:7c:8e:be:ae:f4:
         fd:36:f6:a9:fa:e0:2c:ca:ec:0c:f5:6e:b0:f0:58:b6:bf:ff:
         cd:b1:b5:8c:40:bf:1f:d9:1c:cb:b0:b8:b1:8c:32:cf:13:8e:
         06:5a:b7:dc:d4:2a:30:59:34:23:10:3e:5d:ca:40:f2:b5:29:
         bf:9c:8e:e5:97:0d:e8:63:26:a0:3d:03:70:59:0c:c4:33:aa:
         e5:21:5a:ee:58:dd:77:d7:0b:04:30:92:9e:bb:d6:f1:49:f8:
         bd:6b:bf:1e:af:65:b3:c3:0e:60:d5:5d:53:69:8b:f2:65:8f:
         d9:77:fd:2a:07:fc:e0:87:b3:8b:b5:96:60:2f:6c:04:5b:19:
         7d:2f:23:1f:db:89:82:60:d5:8b:b7:d2:7a:83:0b:0c:5f:0a:
         00:af:dd:e0:d9:34:ef:83:4c:59:4a:29:58:98:62:ba:23:11:
         83:3e:81:37:87:9e:81:4e:01:01:7c:6d:79:e2:76:07:e9:9e:
         d8:56:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org