Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa
File:                     3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          YwV2YcD+tEb6wN1gj0rEeAi4ryKlQ6P0a4hJgWX+cx4=
Subject key identifier:   53:BC:40:84:5F:EF:ED:E8:08:3B:AA:4E:81:D8:08:8C:5F:53:9E:87
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       4B5BADCCB39909E37A2BDBE6E63BDEA9F3604473
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:40 +0000
ROA not before:           Tue 24 Oct 2023 12:40:40 +0000
ROA not after:            Tue 22 Oct 2024 12:45:40 +0000
asID:                     61678
IP address blocks:        170.246.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5b:ad:cc:b3:99:09:e3:7a:2b:db:e6:e6:3b:de:a9:f3:60:44:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:40 2023 GMT
            Not After : Oct 22 12:45:40 2024 GMT
        Subject: CN=53BC40845FEFEDE8083BAA4E81D8088C5F539E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:70:73:7a:fc:86:1d:4b:e9:7f:5d:a4:ab:
                    b2:26:0c:5b:97:ef:dc:e5:73:52:e3:fb:41:81:25:
                    49:ea:8b:e3:a4:3d:82:6f:bc:7a:56:94:e1:5a:f2:
                    d1:4e:41:72:d6:0e:3f:a4:ed:7b:25:01:91:45:da:
                    e4:d1:7f:1f:bd:72:9e:f2:8a:a4:0a:25:77:43:e6:
                    ae:7d:f1:35:fe:6f:95:eb:36:bb:fe:11:4b:9f:2c:
                    1e:a4:33:80:a1:07:2c:1b:e8:22:f2:58:aa:1d:49:
                    25:8a:8c:e0:b9:c8:77:7a:0f:74:3b:e0:52:a3:9a:
                    69:e3:2b:0e:11:9e:2b:d4:5d:7c:5d:78:38:79:38:
                    51:85:26:81:5c:b3:a0:81:ac:00:5d:e0:6a:4b:2d:
                    7e:60:27:fc:28:ba:a2:ba:1a:4b:b6:7e:53:45:dc:
                    b0:14:6f:89:75:25:dc:b1:33:16:54:c1:51:ae:4e:
                    a4:05:75:70:3f:67:f9:1e:2f:b9:79:8e:b7:e5:c6:
                    11:90:69:e0:c2:f3:de:48:61:1c:5f:73:1a:78:96:
                    a9:15:bc:26:18:78:cf:bf:66:75:36:a5:d2:9e:c7:
                    fa:30:51:7e:b7:d6:af:38:19:3c:a6:cd:a1:0c:ef:
                    24:01:a8:89:cd:b0:e0:4d:13:f1:2f:85:5b:b3:d9:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:40:84:5F:EF:ED:E8:08:3B:AA:4E:81:D8:08:8C:5F:53:9E:87
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:a6:37:11:ab:c8:83:d8:72:68:32:38:25:b3:c0:b7:78:
         53:c4:9e:b8:9b:8c:4f:7f:d9:fa:72:12:35:14:95:2d:47:12:
         87:0a:2b:42:cd:7a:d2:ec:02:37:a6:35:3e:e1:57:f9:2d:b2:
         3d:6c:89:e0:59:4c:b3:59:23:19:d0:ad:d6:24:29:b6:3b:79:
         96:71:2c:5a:08:59:09:c9:7b:2e:8e:f8:e8:d5:67:8c:ba:88:
         c4:cc:7b:72:57:e4:c6:3c:be:ac:9e:a2:46:08:3b:df:48:00:
         d2:94:38:6d:60:3c:31:68:61:9d:42:97:28:92:3a:aa:f4:bb:
         43:04:32:f0:2d:f0:25:0e:aa:8c:f0:43:95:35:a8:59:84:a9:
         26:fb:b2:e3:d9:8f:ee:8c:db:17:60:83:9f:02:1e:9d:90:c4:
         02:60:00:3e:56:4f:06:ab:d1:a7:ce:dd:30:1c:b6:e0:bd:de:
         90:f0:a9:d2:86:d1:c8:5b:1e:9b:40:84:5b:09:0f:58:91:81:
         56:56:36:89:4f:ca:07:cf:c6:c5:8f:a3:cb:1d:2e:45:03:21:
         7f:a0:9b:54:de:f2:93:f0:7e:4d:53:58:3c:67:11:08:95:94:
         d5:a7:05:0d:fa:1f:a6:ca:06:22:9c:55:2b:cf:e8:ae:2d:c2:
         d3:46:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org