Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32322d3232203d3e203631373137.roa
File:                     3137302e3233332e31362e302f32322d3232203d3e203631373137.roa (raw, json)
Hash identifier:          /fwYXGcubFeSbnUrYqkVGFi7V0VldtPfKTAItsH4/80=
Subject key identifier:   FE:CB:B5:55:AD:08:95:02:2D:0A:F0:3F:E2:46:1F:5E:53:4C:C8:1C
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       5E6E72B767F1AEE4B21BFD73B45AA512D2B709CB
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32322d3232203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:55 +0000
ROA not before:           Thu 10 Aug 2023 12:17:55 +0000
ROA not after:            Thu 08 Aug 2024 12:22:55 +0000
asID:                     61717
IP address blocks:        170.233.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6e:72:b7:67:f1:ae:e4:b2:1b:fd:73:b4:5a:a5:12:d2:b7:09:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:55 2023 GMT
            Not After : Aug  8 12:22:55 2024 GMT
        Subject: CN=FECBB555AD0895022D0AF03FE2461F5E534CC81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:83:a6:69:5b:5b:93:c1:79:2b:71:ee:cc:
                    92:01:47:59:fb:56:4d:ab:f9:ad:93:cf:89:cd:18:
                    b0:c8:8f:8e:f8:f5:85:81:4a:b4:a1:d0:1f:f6:c0:
                    ba:28:6f:5a:de:bf:3d:3b:25:a0:e6:f8:e8:5f:11:
                    b2:28:e4:c7:5e:a3:65:5f:14:59:88:53:51:63:5e:
                    46:7c:cd:b4:c5:fd:4e:58:ef:23:65:17:b5:15:cc:
                    81:97:61:29:6d:52:ea:df:a6:d8:76:c5:ac:dc:08:
                    1b:47:03:40:50:f4:ba:b1:4e:6c:9c:c3:44:56:ea:
                    e5:c5:93:0b:67:ad:2a:4b:ea:c6:7a:c4:cf:ee:1d:
                    a0:f4:c7:3f:34:07:e6:e4:84:55:f0:8c:df:91:b1:
                    15:1c:f3:2f:76:cd:1b:02:80:28:b2:e6:e7:a8:f8:
                    87:ec:d5:96:30:07:c3:63:01:1a:ea:89:56:9c:1c:
                    f4:87:d0:54:10:dc:60:4b:f8:50:ab:fb:98:ba:77:
                    a8:5f:88:48:27:a7:58:2b:0a:59:8e:de:e9:be:ac:
                    d1:89:f6:2f:f4:70:52:77:62:02:44:34:d1:86:99:
                    a2:13:11:18:4f:01:44:08:91:4b:f3:48:03:ef:d2:
                    ba:f9:bc:cc:f3:07:c3:6d:88:5f:c3:93:62:41:b9:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CB:B5:55:AD:08:95:02:2D:0A:F0:3F:E2:46:1F:5E:53:4C:C8:1C
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32322d3232203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:1b:43:45:0d:8e:e6:71:a7:6a:98:f6:98:53:e1:ac:db:95:
         74:66:e3:d7:ae:70:dc:da:4f:13:13:10:3c:2c:7e:a5:30:11:
         29:fe:88:97:77:40:81:73:b0:7c:e9:7c:1f:a1:7e:7f:be:3a:
         1c:98:6b:cf:e7:2c:a5:6c:bb:b9:2e:89:d6:4a:21:ce:5c:1d:
         29:bb:38:47:74:8d:f2:a9:2d:57:7c:75:f7:0e:84:95:fe:70:
         30:8a:27:22:92:e3:04:4f:e3:d3:11:2c:35:2c:f0:e2:7b:90:
         b8:0c:99:b2:f4:6d:0b:d8:90:6c:d5:6c:72:ab:25:6c:c4:fa:
         44:c0:ef:a3:1d:f8:f3:c0:d6:52:09:da:8b:34:79:d5:35:96:
         f1:2a:b7:fe:ae:bd:6e:dd:00:26:97:b8:13:60:54:13:00:ba:
         b8:61:d5:48:70:88:54:f7:ba:12:3d:0a:eb:2f:e9:f5:4b:aa:
         a0:49:87:7f:e1:3d:83:9c:53:13:39:47:05:a7:22:f2:92:a0:
         85:fe:f4:db:14:dd:b2:df:b5:ed:df:23:51:99:2d:db:fe:47:
         f0:fa:dd:0e:c5:00:a7:0c:6d:db:58:f9:b6:47:c6:f3:02:fc:
         f6:e2:df:a0:11:ac:45:c8:5b:9a:e5:55:c3:34:d8:82:15:e7:
         1f:8c:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org