Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa
File:                     3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          jnpweFFytvhv18+pUkPffeY3qu1CU4C6Sp0DqAqIueA=
Subject key identifier:   5E:03:36:C3:7D:9A:AE:E6:1F:C2:B4:ED:82:46:B5:A1:69:C6:E9:2B
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       18DC57EC189FD8341390ACE383A3AC677A343465
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa
Signing time:             Fri 19 Jan 2024 15:21:16 +0000
ROA not before:           Fri 19 Jan 2024 15:16:16 +0000
ROA not after:            Fri 17 Jan 2025 15:21:16 +0000
asID:                     266448
IP address blocks:        170.239.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dc:57:ec:18:9f:d8:34:13:90:ac:e3:83:a3:ac:67:7a:34:34:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: Jan 19 15:16:16 2024 GMT
            Not After : Jan 17 15:21:16 2025 GMT
        Subject: CN=5E0336C37D9AAEE61FC2B4ED8246B5A169C6E92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:0f:84:77:b5:59:a1:d3:44:85:21:3a:86:
                    2e:2b:20:b0:5e:26:d6:45:40:c2:ab:0d:cc:ed:8f:
                    49:bf:3b:8f:ab:04:fe:f8:eb:f0:e9:ca:d2:59:f7:
                    32:1f:e2:32:94:b1:dc:78:fc:1d:d6:57:67:62:86:
                    49:9a:67:6f:ac:17:e5:83:0a:d8:20:9b:5c:3a:13:
                    28:1a:dc:00:83:17:38:bc:c5:b0:bd:7f:49:97:ab:
                    f8:a7:a5:ce:2d:5c:c3:85:ad:03:01:90:af:03:ab:
                    5a:94:51:59:72:2e:c6:5e:dd:1b:5a:01:76:86:ad:
                    da:f4:4d:58:25:e7:a0:20:d9:5a:55:fd:3a:ac:91:
                    c7:c4:86:d1:13:a4:8a:10:89:b7:e4:3f:cd:3f:86:
                    ff:5b:07:a1:9d:d2:1b:e6:e9:17:ed:95:fa:f1:ac:
                    04:8d:44:82:c8:b8:d9:1d:2a:58:2b:95:b9:7a:32:
                    07:62:b0:dd:52:8b:ec:2b:e5:cd:b3:4f:f7:6e:2f:
                    1d:19:a3:11:1f:2f:d1:a6:51:42:d5:32:ec:75:f4:
                    01:20:48:db:e4:2e:e4:ed:62:51:22:99:14:19:1e:
                    e4:aa:50:94:2d:d9:bf:f1:a5:c1:53:52:da:4d:15:
                    9f:40:38:56:ed:11:ab:1e:c7:25:66:91:34:ea:3b:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:03:36:C3:7D:9A:AE:E6:1F:C2:B4:ED:82:46:B5:A1:69:C6:E9:2B
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:ff:9c:2a:19:ce:26:8e:eb:e9:88:1b:eb:8e:e2:a4:2d:
         fb:38:f5:20:eb:fc:4a:b9:3e:d5:7a:52:93:82:a3:d8:ee:fb:
         67:3a:c7:cc:20:ed:f5:5e:a8:ea:99:30:ee:a4:0a:32:d0:82:
         b2:c9:9c:75:7c:15:a0:35:df:78:f6:a3:f4:6a:72:67:65:e6:
         9f:2f:55:b3:23:24:0d:84:91:b0:a1:ec:9f:eb:8f:4e:d5:bd:
         df:8f:d2:3e:bb:12:b2:1d:99:0f:b6:bd:77:c9:d1:84:58:f2:
         cf:4d:98:92:28:fc:ca:82:e0:14:16:ca:88:db:29:b9:c3:9e:
         65:42:6c:a7:76:c8:96:aa:71:2a:f1:1c:a9:d4:3c:a2:ea:a3:
         12:e3:df:10:4f:31:d8:88:a2:3c:bc:e4:fb:b1:e9:b8:3b:b4:
         01:99:e6:a3:e5:67:18:45:2c:81:a6:1b:20:06:05:c8:31:f6:
         e5:57:d0:37:bf:30:2a:cb:7a:48:ac:ff:20:28:0b:2a:81:77:
         90:7c:0b:0b:c9:b3:48:4c:3b:69:82:73:ea:a9:cf:cf:ea:93:
         fd:1e:fc:3f:ff:b1:0b:50:6d:17:4a:ee:b2:c1:76:22:be:b6:
         9c:1d:6c:85:6e:f0:92:cf:9d:a7:8b:a3:b6:2a:fd:91:01:04:
         6b:8d:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org