Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3232203d3e20323634313132.roa
File:                     3137302e38332e3136302e302f32322d3232203d3e20323634313132.roa (raw, json)
Hash identifier:          3pSi/Q/zW5p53BjFafBjsJwzo5ECHKB9P8H3cHxaui4=
Subject key identifier:   45:B4:F7:9A:9E:F0:B4:BD:D6:64:10:38:5A:EF:96:88:32:2F:6D:0A
Certificate issuer:       /CN=F4A538D51018B64785720A1F4F2377DE184D1023
Certificate serial:       2B5AADB68C2F872C16166C5233980878295265DE
Authority key identifier: F4:A5:38:D5:10:18:B6:47:85:72:0A:1F:4F:23:77:DE:18:4D:10:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A538D51018B64785720A1F4F2377DE184D1023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3232203d3e20323634313132.roa
Signing time:             Fri 26 Jan 2024 11:42:10 +0000
ROA not before:           Fri 26 Jan 2024 11:37:10 +0000
ROA not after:            Fri 24 Jan 2025 11:42:10 +0000
asID:                     264112
IP address blocks:        170.83.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:ad:b6:8c:2f:87:2c:16:16:6c:52:33:98:08:78:29:52:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A538D51018B64785720A1F4F2377DE184D1023
        Validity
            Not Before: Jan 26 11:37:10 2024 GMT
            Not After : Jan 24 11:42:10 2025 GMT
        Subject: CN=45B4F79A9EF0B4BDD66410385AEF9688322F6D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:b4:8f:2f:38:c1:d6:ef:10:2f:e8:75:81:
                    66:09:fc:b5:0c:1f:83:bc:85:69:d7:a5:fc:e3:bc:
                    3c:fa:ef:6e:35:71:bb:fe:f7:6d:e9:bc:e4:ac:c8:
                    97:64:ab:ff:f5:f9:4e:9c:db:6f:30:dd:61:e4:bc:
                    4e:aa:29:27:64:4c:a5:6f:f5:3b:17:d2:27:10:db:
                    01:0b:ca:4a:37:2f:a3:9b:08:70:da:d5:8f:25:1c:
                    35:8c:47:9d:a1:e5:c2:38:09:f0:b5:80:47:b3:1a:
                    1b:8f:f9:6e:0b:9a:96:b3:da:e2:b7:81:17:ae:51:
                    56:08:cc:35:5e:e1:63:a6:57:88:a7:43:a6:a7:ce:
                    fc:e3:79:70:94:69:37:84:de:df:43:cf:7f:aa:5c:
                    ab:61:d6:30:ab:cf:15:a8:41:eb:cf:01:0b:11:57:
                    79:1d:46:32:4f:c2:bb:98:31:ef:8e:9e:21:e7:09:
                    5a:41:0a:64:b2:d9:8f:06:59:d0:cb:43:40:b9:f8:
                    52:8c:77:f2:0a:d9:24:63:40:d3:e4:92:c6:ea:a5:
                    d3:f0:5f:0e:6a:f2:4d:c3:1f:54:96:e2:b9:1b:31:
                    ab:b1:81:21:16:a1:dd:b5:db:6c:58:34:0b:e7:31:
                    98:f0:b7:19:cc:8c:d0:cd:57:e1:b1:03:8f:55:5b:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:F7:9A:9E:F0:B4:BD:D6:64:10:38:5A:EF:96:88:32:2F:6D:0A
            X509v3 Authority Key Identifier:
                keyid:F4:A5:38:D5:10:18:B6:47:85:72:0A:1F:4F:23:77:DE:18:4D:10:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/F4A538D51018B64785720A1F4F2377DE184D1023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A538D51018B64785720A1F4F2377DE184D1023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3232203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:aa:2d:12:74:9c:35:bd:e7:cc:ca:3a:8e:78:60:26:28:
         b2:e4:73:5a:1d:8f:d5:40:6c:2a:f2:e8:0f:8e:58:ee:a5:dd:
         c3:4e:93:79:7e:47:32:6c:a1:a4:d2:3a:33:02:3e:8f:68:5c:
         12:f4:c0:fd:5b:f4:e7:f5:09:a0:59:ed:e5:3c:f8:db:ea:4b:
         b0:db:d6:3f:5d:76:a4:56:f1:95:48:9f:29:47:54:43:ca:de:
         df:90:ee:8b:ac:3b:49:e6:fd:73:79:86:de:37:20:be:5f:d9:
         4c:b8:6f:35:bc:86:55:a7:91:f8:8b:c9:5f:44:8d:ed:6a:2f:
         02:6c:ca:76:90:50:78:56:54:b5:49:83:9d:d2:17:e7:2b:70:
         8a:1e:8e:ff:ac:62:e8:4f:00:bd:77:6b:86:d2:01:67:75:56:
         67:ae:12:e9:a4:a5:01:09:1e:cd:33:0c:27:bf:ac:08:b4:b1:
         6c:c6:bd:25:7f:9a:2a:53:c6:77:4a:b9:e0:ab:e5:ff:8e:ea:
         23:d8:04:c4:74:23:0b:3e:1e:7b:0e:ad:51:12:74:29:94:fc:
         1a:4f:7c:b9:65:2d:4d:5e:c6:7d:e7:c6:42:0c:ce:4a:c8:60:
         7a:1a:5b:08:56:a5:3e:f1:44:b7:ee:0f:8e:26:77:2b:0f:39:
         e5:d1:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org