Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3234203d3e203532383037.roa
File:                     3137302e37392e32342e302f32322d3234203d3e203532383037.roa (raw, json)
Hash identifier:          w0sAGyIh4hs9646OuOiDseWTKVriKh36NLaxtk7NjY4=
Subject key identifier:   B9:11:E5:40:77:DF:8C:84:08:C2:79:B7:E1:3B:43:65:9E:FD:25:DD
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       4FA5209008B2C9A6D73EB8D6C5FC416A5AD2D1E4
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3234203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:37 +0000
ROA not before:           Wed 10 Apr 2024 13:24:37 +0000
ROA not after:            Wed 09 Apr 2025 13:29:37 +0000
asID:                     52807
IP address blocks:        170.79.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a5:20:90:08:b2:c9:a6:d7:3e:b8:d6:c5:fc:41:6a:5a:d2:d1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Apr 10 13:24:37 2024 GMT
            Not After : Apr  9 13:29:37 2025 GMT
        Subject: CN=B911E54077DF8C8408C279B7E13B43659EFD25DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:4d:06:ed:8a:b0:74:e7:20:c7:a8:93:33:
                    f5:ad:c8:cf:77:5a:90:e6:1c:41:ce:2e:eb:84:45:
                    36:07:8a:00:94:2a:ae:9d:88:c6:2f:f9:a8:bb:dd:
                    a8:64:16:4b:a0:5c:ed:bf:c7:86:31:a3:84:50:e6:
                    1f:90:19:ed:3d:44:49:92:8e:d7:38:bc:8d:d1:a3:
                    c6:3d:9a:d1:d9:8b:0b:dd:3e:68:2a:33:a4:ac:23:
                    14:69:ca:be:06:9e:82:f7:34:4d:b0:cd:90:dc:fc:
                    b9:19:f5:4a:11:66:a1:4e:34:15:f0:be:f7:e9:f8:
                    91:66:41:cf:a7:10:cf:d7:a6:a8:9d:34:73:bd:f3:
                    79:fe:b2:00:5f:e3:ec:a0:80:a5:79:8d:66:f0:c3:
                    43:cc:ec:96:40:09:29:04:7c:f5:73:e5:4b:0c:3e:
                    c7:48:9a:de:fb:f9:50:38:52:28:32:70:72:fc:ec:
                    f1:fe:71:ab:aa:07:76:9a:e4:5e:6a:7a:cc:8d:38:
                    b6:ab:67:4e:fd:9a:61:79:82:06:c1:6a:32:3a:5f:
                    88:56:1c:5c:25:1a:c2:00:74:6c:b9:7e:65:c7:d3:
                    64:03:43:a0:2f:58:06:0c:27:ec:d5:00:dc:3c:ac:
                    f8:86:49:1f:cd:8c:0e:8a:cc:24:44:b8:80:ce:04:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:E5:40:77:DF:8C:84:08:C2:79:B7:E1:3B:43:65:9E:FD:25:DD
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3234203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:3e:2c:36:d9:c7:8e:6f:12:b5:70:56:b5:75:c4:91:10:
         f6:d9:f2:32:60:f4:da:30:f9:0b:c8:e7:be:09:e5:00:05:cd:
         01:ed:f9:c5:d1:57:0b:a9:3e:9c:d6:25:0a:b2:33:35:31:a5:
         c0:cc:ba:36:a6:e9:c2:44:01:f0:73:6c:1f:5c:97:95:42:87:
         e8:8f:5a:85:dd:2f:ec:20:0a:e0:4a:15:92:ca:f4:16:20:20:
         88:62:bf:13:1d:c3:92:63:54:ec:8b:f8:c0:c5:01:b6:f9:8e:
         e6:8a:3c:3f:80:93:07:e4:8d:86:04:db:11:ad:c9:19:52:c1:
         92:16:1f:fe:a4:e4:94:a5:93:42:d9:6c:7b:57:a3:a2:0c:55:
         4a:82:61:20:27:2c:b0:22:e9:47:c4:2a:c6:ca:6b:9f:be:af:
         97:36:4c:e4:5f:11:b1:ae:59:6f:a9:ab:5b:43:c9:6b:a3:43:
         97:56:e0:3c:09:4b:87:93:82:fe:58:44:74:31:1d:d0:0e:ed:
         05:04:cc:89:f9:15:9e:35:fb:3b:48:1d:c5:15:d1:e2:e2:6c:
         da:a3:b3:c4:e1:d1:16:df:31:cd:18:a7:8d:fc:fe:a3:95:ab:
         73:34:f2:d4:50:7f:3f:37:69:a1:8e:ff:67:c5:f0:90:d9:87:
         d7:36:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org