Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32332d3233203d3e20323633333238.roa
File:                     3137302e302e35362e302f32332d3233203d3e20323633333238.roa (raw, json)
Hash identifier:          2AFbZGrLaz3RvZZmVABHA7jGM8NERcoFP80qJmI30NM=
Subject key identifier:   87:AA:49:16:A2:41:33:7A:6E:5E:70:E3:B4:3A:87:FB:83:BD:0C:CC
Certificate issuer:       /CN=E449505565A4093BA0371B92F0139707DF957D35
Certificate serial:       7D1F49D525F5E4641A479096F5250847BA2249B2
Authority key identifier: E4:49:50:55:65:A4:09:3B:A0:37:1B:92:F0:13:97:07:DF:95:7D:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E449505565A4093BA0371B92F0139707DF957D35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32332d3233203d3e20323633333238.roa
Signing time:             Wed 14 Jun 2023 21:20:19 +0000
ROA not before:           Wed 14 Jun 2023 21:15:19 +0000
ROA not after:            Wed 12 Jun 2024 21:20:19 +0000
asID:                     263328
IP address blocks:        170.0.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1f:49:d5:25:f5:e4:64:1a:47:90:96:f5:25:08:47:ba:22:49:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E449505565A4093BA0371B92F0139707DF957D35
        Validity
            Not Before: Jun 14 21:15:19 2023 GMT
            Not After : Jun 12 21:20:19 2024 GMT
        Subject: CN=87AA4916A241337A6E5E70E3B43A87FB83BD0CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:88:5c:2a:11:17:ea:7e:4e:bc:ff:38:6d:
                    4b:39:8d:5d:15:ec:1b:9b:46:85:c3:87:af:fc:8e:
                    eb:2f:e7:63:87:48:80:fe:cd:ea:73:c8:88:55:67:
                    5e:3c:a3:4b:58:c0:fa:c4:89:b6:63:5f:70:22:cb:
                    53:a9:45:06:d6:2d:1a:9d:14:24:78:9f:be:7c:15:
                    4e:92:b6:19:9a:10:fd:e2:c6:9b:cf:c4:30:05:6c:
                    66:f2:92:6a:37:b0:16:2e:bf:2f:0e:81:ca:5a:7e:
                    81:97:35:62:77:f9:c0:fc:d5:ac:20:28:b2:66:1b:
                    6a:e7:02:f3:f2:30:8b:cf:3b:42:46:8e:6b:f5:d5:
                    72:7a:2e:cb:60:6a:9b:f4:05:a2:c3:46:71:28:ec:
                    2c:da:23:74:4c:30:2c:8d:a8:4b:37:6d:7c:41:5d:
                    92:57:37:77:30:cf:6c:f1:35:a7:72:17:f0:ff:88:
                    97:10:7d:cf:c0:b2:f2:0a:2e:fa:c9:69:d5:38:58:
                    73:9b:18:2a:c9:79:d0:16:d4:22:62:bb:74:3d:8c:
                    3f:4c:49:d4:72:c8:80:91:2b:c8:d4:67:36:eb:a1:
                    cb:86:98:34:a4:64:2e:9a:a4:04:64:43:a9:1d:ab:
                    a9:40:fa:b0:6a:4a:2c:b4:85:03:bc:e2:86:c0:fa:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:49:16:A2:41:33:7A:6E:5E:70:E3:B4:3A:87:FB:83:BD:0C:CC
            X509v3 Authority Key Identifier:
                keyid:E4:49:50:55:65:A4:09:3B:A0:37:1B:92:F0:13:97:07:DF:95:7D:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/E449505565A4093BA0371B92F0139707DF957D35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E449505565A4093BA0371B92F0139707DF957D35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32332d3233203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:79:db:db:8c:91:f9:fa:73:96:49:22:ab:ce:83:47:47:
         d7:50:85:32:99:8f:f7:c2:8c:58:51:51:03:0d:8d:5a:11:3b:
         b9:26:7c:9b:8f:8d:5a:99:cb:04:45:82:d8:4f:91:02:03:fd:
         d8:b1:33:d5:b0:6d:34:e8:63:93:1a:24:a9:92:8a:77:ee:36:
         e4:da:eb:6b:09:57:48:c3:d8:a1:2a:95:51:f4:a8:0d:ad:b3:
         38:50:73:8c:b8:12:c1:40:e4:aa:b1:2a:34:76:2d:34:63:12:
         06:5a:a9:07:2d:03:7f:de:d0:07:e0:6b:11:4e:22:cf:19:90:
         22:05:9a:0c:0d:0c:fd:8d:59:d2:e1:dd:f0:19:33:53:4c:fe:
         9d:dc:8c:f6:c3:d2:f9:5a:72:69:09:32:00:57:94:06:04:0a:
         6d:87:97:82:92:ee:4a:2e:fb:90:3b:04:f2:47:76:97:97:df:
         8b:a6:40:99:13:90:ce:a6:0c:f6:a4:21:13:2f:c6:a1:4b:41:
         c9:e9:d6:62:c6:2e:6f:e2:88:e3:6a:98:38:9a:a5:b1:e7:ae:
         e6:c1:d7:2d:46:4a:e6:5f:b4:1b:8f:91:d4:b9:a0:a3:50:9a:
         a2:eb:99:fa:fe:41:2f:b9:da:c7:dd:95:a3:6f:ad:92:fd:b3:
         4d:56:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org