Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          OwJsIc0/Svc6wRQvucLDYdJ0PPaU9/CeuB+stSBn07s=
Subject key identifier:   94:2D:54:15:A5:5C:76:6B:1C:44:28:8B:0D:0F:22:7D:51:84:9F:CE
Certificate issuer:       /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial:       229655F4F431B69A9663D0188F5CA17B45C7EDE8
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa
Signing time:             Wed 03 Jan 2024 12:10:33 +0000
ROA not before:           Wed 03 Jan 2024 12:05:33 +0000
ROA not after:            Wed 01 Jan 2025 12:10:33 +0000
asID:                     264022
IP address blocks:        170.245.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:96:55:f4:f4:31:b6:9a:96:63:d0:18:8f:5c:a1:7b:45:c7:ed:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
        Validity
            Not Before: Jan  3 12:05:33 2024 GMT
            Not After : Jan  1 12:10:33 2025 GMT
        Subject: CN=942D5415A55C766B1C44288B0D0F227D51849FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:dc:cf:af:3b:d9:13:ec:cf:79:b5:e8:22:
                    e1:69:8d:27:02:30:cc:79:3c:cc:66:5b:de:cd:28:
                    21:ba:e0:dd:5c:66:94:a0:ab:df:ed:f9:f8:f2:2c:
                    0b:7e:af:ad:09:77:b3:f9:a0:f4:7e:57:36:54:2f:
                    2e:23:41:4a:61:af:7b:18:a7:cb:08:c8:62:17:9d:
                    48:6f:17:7a:5f:b1:be:bd:2a:87:b2:5f:65:25:81:
                    3d:ff:99:e1:bd:6c:9f:0b:60:4a:14:c1:55:7e:d1:
                    ba:85:47:f5:b0:d7:86:78:4f:6a:cd:af:b8:47:36:
                    d5:5b:2c:b9:95:8e:da:39:79:ba:be:9f:e9:36:ff:
                    1e:2d:c6:ab:36:c0:40:0a:a0:d8:65:22:ff:5f:5a:
                    1a:93:5e:6b:3a:ef:4f:a4:d2:22:e9:95:9f:66:9e:
                    30:b1:ca:82:2d:d6:aa:f5:d8:98:a4:ee:cf:e4:f5:
                    ac:79:86:9c:70:3c:f9:d0:32:61:be:84:8c:c7:7f:
                    76:2f:f4:0b:92:5c:37:9e:49:f8:cc:6e:5d:24:81:
                    82:a1:4f:6a:b0:f4:6b:e8:2b:33:0e:0f:34:a3:52:
                    f2:1d:30:13:99:2e:b8:27:d8:01:34:bb:b8:5a:e4:
                    43:5b:83:55:e6:5c:e4:2b:6e:d3:cd:dd:4d:73:b5:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:54:15:A5:5C:76:6B:1C:44:28:8B:0D:0F:22:7D:51:84:9F:CE
            X509v3 Authority Key Identifier:
                keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137352e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:24:cf:21:92:6c:95:d9:1b:b3:51:7b:4c:68:2b:c5:d3:b1:
         22:24:b2:10:67:2c:e6:0a:d5:fe:a0:71:c4:fb:21:fd:90:7d:
         6f:cd:ec:d2:0f:cf:54:2e:14:78:e4:32:6f:ce:76:68:ae:03:
         cb:2c:a3:77:7d:64:ab:09:0d:9e:95:3e:31:a5:8f:2a:03:26:
         25:a2:f6:ba:b7:5c:47:b3:bd:ce:2d:50:98:91:64:ca:e1:ce:
         1a:dc:a0:ba:8b:00:c6:a6:ca:f6:6c:f7:42:bd:c6:2b:51:5f:
         ab:70:14:f3:be:d2:9f:28:50:90:de:fb:3a:f2:2c:cf:9e:51:
         ac:1a:fd:b1:1b:b1:fc:e2:65:95:2b:df:f1:13:cd:93:84:30:
         a1:9a:61:3b:7c:2d:a3:8c:9f:25:dd:99:32:f1:74:f4:94:65:
         98:7d:49:99:e7:31:d0:e4:87:00:ff:ef:f5:64:b6:29:be:cb:
         bd:84:ca:9f:81:74:16:bc:90:45:70:ae:7f:57:e7:3b:af:e5:
         59:10:47:f2:17:ca:78:e0:21:4b:ca:c6:f0:5e:a4:ba:c3:78:
         e2:e6:c8:00:bf:8a:2e:69:9f:d0:5d:0e:7a:cd:2b:f5:c3:96:
         1f:3a:f4:23:5b:f9:89:b6:a0:2d:43:63:ab:1b:a8:6e:fa:be:
         95:7d:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org