Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
File:                     3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          v8rh+0WUZ6uoAvaw1l5HiV9nX+r1iHiJDSpnkLakwRk=
Subject key identifier:   D2:D5:37:1B:1A:59:82:C3:E7:96:B1:12:5D:0D:3F:31:26:13:8D:7D
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       045028E2490365669F25EB8E7004366BD0E3854D
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:45:06 +0000
ROA not before:           Mon 16 Oct 2023 20:40:06 +0000
ROA not after:            Mon 14 Oct 2024 20:45:06 +0000
asID:                     28131
IP address blocks:        170.81.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:28:e2:49:03:65:66:9f:25:eb:8e:70:04:36:6b:d0:e3:85:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:40:06 2023 GMT
            Not After : Oct 14 20:45:06 2024 GMT
        Subject: CN=D2D5371B1A5982C3E796B1125D0D3F3126138D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:b2:86:14:a8:80:bf:66:84:69:c3:ee:32:
                    74:ec:e7:b9:fc:cc:be:45:7f:25:57:78:ad:51:88:
                    03:6b:15:35:99:5b:60:43:24:8d:35:0d:47:83:26:
                    9e:46:37:71:c1:53:2d:0a:3a:2d:a8:8b:e3:e2:4e:
                    78:4a:86:bf:91:b2:d2:1b:af:04:d4:1c:61:f4:6f:
                    12:76:bd:9d:25:22:a2:0d:bd:3b:ac:02:e0:27:f1:
                    f8:b7:87:a4:4f:5f:6c:05:7b:80:03:36:c9:25:88:
                    76:b8:29:8c:f6:a1:0b:3a:3d:3a:8e:7b:98:74:fe:
                    8a:af:96:86:0b:9e:5f:53:00:11:5d:c4:1d:13:df:
                    f9:04:1d:95:44:d6:cb:b2:a3:aa:94:cf:8b:71:0e:
                    5b:32:c6:b2:86:00:49:7b:bb:1b:3d:db:18:df:fe:
                    9a:d7:36:63:7e:d3:5d:ee:2d:69:05:0f:40:c6:2b:
                    56:e2:31:42:c1:ba:59:a8:b6:99:a7:eb:c5:c3:3d:
                    e9:96:bc:66:89:78:59:09:3a:d4:aa:b7:8a:ab:06:
                    57:ed:89:65:94:e7:cd:da:f7:44:79:ee:ea:7e:f2:
                    c8:46:5e:bf:64:3a:d8:58:6f:8f:c9:ff:c8:f2:e6:
                    73:50:a0:43:70:82:6b:9c:cf:52:5f:2f:e2:03:e1:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:37:1B:1A:59:82:C3:E7:96:B1:12:5D:0D:3F:31:26:13:8D:7D
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:c2:0e:95:80:dd:3f:ef:e7:16:a0:f9:30:19:e0:1a:48:
         70:0b:72:84:fe:75:5b:c2:67:b4:55:16:15:bf:dc:f2:d5:7e:
         91:14:7b:89:03:28:c4:e7:a3:81:d7:ce:06:0e:71:92:eb:7d:
         da:47:88:2d:02:2d:07:34:e5:2e:ea:da:78:52:d7:78:fb:55:
         b1:e2:06:95:bb:45:dd:69:9c:50:ae:49:80:dd:73:a4:46:b7:
         fa:21:34:10:f3:0c:d7:ea:5c:85:2e:50:44:a9:43:fe:f0:4b:
         e3:ab:17:f2:50:cb:fa:88:95:3a:fa:73:36:1c:1e:a1:12:30:
         d6:f7:32:a5:ac:5c:b1:c3:83:b2:39:75:f5:69:50:52:b7:ff:
         de:2d:c2:f2:e5:91:c7:c6:22:cc:2b:8a:6c:6b:4e:44:a2:89:
         e2:45:56:4f:7e:23:30:fb:35:8d:49:33:19:65:a6:35:d1:c4:
         cf:89:98:a9:ed:cf:73:07:d8:98:c1:e3:bd:8a:9a:dd:a7:f7:
         63:84:ab:37:95:87:81:40:4e:4c:10:8f:a8:cc:33:46:8b:cb:
         30:a8:9f:00:7a:f9:74:e8:02:f3:1e:32:42:74:c8:2a:8c:ce:
         ae:57:86:40:9c:d7:75:19:f1:7f:99:77:67:32:9a:8e:fe:c7:
         24:8c:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org