Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          oPcZz2xOrqOkel6xyNBJqlmszliWas7T7FgsvWL7s2E=
Subject key identifier:   33:C0:9C:A5:53:72:1D:1A:CD:0B:38:65:F1:4C:1C:99:3B:4D:DF:25
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       5C809E8FA0D822867D3BA22216D5288BEFDA51BF
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
Signing time:             Mon 19 Dec 2022 18:26:33 +0000
ROA not before:           Mon 19 Dec 2022 18:21:33 +0000
ROA not after:            Mon 18 Dec 2023 18:26:33 +0000
asID:                     52706
IP address blocks:        170.233.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:9e:8f:a0:d8:22:86:7d:3b:a2:22:16:d5:28:8b:ef:da:51:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Dec 19 18:21:33 2022 GMT
            Not After : Dec 18 18:26:33 2023 GMT
        Subject: CN=33C09CA553721D1ACD0B3865F14C1C993B4DDF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:84:7b:a8:60:2a:57:b5:b7:20:e9:c1:78:
                    92:06:cd:33:ab:55:55:2d:ef:98:57:08:0e:70:b0:
                    83:13:97:3f:6a:0d:61:31:b8:69:cc:64:d3:c3:f3:
                    ad:67:b2:38:ef:6f:7a:63:ee:21:bc:25:f4:0d:bb:
                    66:3e:39:e5:27:a7:b3:b6:50:8c:e3:91:c4:16:cf:
                    1d:a1:1d:8e:d7:d0:3c:98:40:53:2b:81:b9:7e:10:
                    ae:e7:70:4c:e4:92:3b:e0:da:f2:97:50:42:d9:c2:
                    8e:77:af:1a:17:f9:95:bd:bb:cd:b5:0f:78:0b:f2:
                    f6:60:e3:0e:59:42:a5:b1:55:b3:23:97:bc:26:bc:
                    57:36:f3:d5:91:2f:e0:df:89:b4:27:ee:bd:6a:c0:
                    59:89:a8:07:2d:d8:00:f3:c4:19:6c:09:7f:f1:cf:
                    eb:9a:0d:bd:e6:04:ba:22:83:e3:bb:c5:96:02:38:
                    71:3c:e8:31:88:59:a5:8b:37:04:17:e8:94:84:cf:
                    e5:19:ae:a6:81:fb:a9:14:9a:52:83:2c:d9:e8:31:
                    3f:89:e0:90:40:ec:13:33:b3:78:25:9b:3d:ca:dd:
                    e9:49:c0:02:00:72:85:f6:c7:db:90:54:28:9a:80:
                    11:a5:d4:58:69:81:33:72:59:40:bc:cd:c5:6d:e5:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:9C:A5:53:72:1D:1A:CD:0B:38:65:F1:4C:1C:99:3B:4D:DF:25
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:52:09:54:fd:67:fe:7e:6e:0b:2b:cc:b4:fd:6f:c3:7e:
         2b:61:98:18:49:46:60:b8:ec:01:ef:e2:cf:3a:4c:62:60:85:
         55:a6:e5:d8:22:a1:87:eb:79:4b:51:0f:d5:f7:44:6e:21:cc:
         68:d0:fb:c4:f6:fa:3b:0c:6f:72:06:63:1d:7d:30:ce:d8:25:
         b3:97:05:39:15:2d:2e:b1:76:b8:a0:f4:bc:cf:8b:8a:b3:5f:
         ea:b0:8a:3a:7d:8d:89:6e:47:3d:e3:46:3a:3a:bf:86:08:79:
         f5:8e:b4:d5:93:3f:2b:1e:5b:23:99:5e:55:9b:f7:35:27:ac:
         ef:26:69:63:a8:36:d5:24:d2:7f:32:22:1c:ec:89:70:da:0b:
         e5:34:1e:6b:e3:61:68:4e:32:24:83:b3:66:b4:93:46:81:0c:
         b5:5b:96:14:dd:ed:98:7e:cd:e2:ea:15:5d:75:7d:3b:17:af:
         4d:ca:19:7c:9c:39:d8:0e:db:30:b8:04:0f:24:83:da:0f:54:
         d2:14:af:c4:1d:2c:5d:f6:64:6f:1a:8f:99:fe:9d:51:3e:2a:
         55:e7:7c:e9:44:ab:7d:38:49:7e:88:a9:d2:cc:aa:c5:db:81:
         f0:c3:ab:72:3c:8c:31:67:b1:a8:08:0b:74:89:ba:c1:58:00:
         df:80:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org