Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32332d3233203d3e203631373137.roa
File:                     3137302e3233332e31362e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          zVOungexmt88DrRFDMY6V4pxme7OFLXhVJiPJFepQnI=
Subject key identifier:   91:70:A7:7D:F6:3B:74:2C:00:A2:24:99:AF:CF:D5:0F:C5:BC:F4:B0
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       4A1FE2738B058666903CF3F29FA8AB7F6BFB6EC7
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32332d3233203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:56 +0000
ROA not before:           Thu 10 Aug 2023 12:17:56 +0000
ROA not after:            Thu 08 Aug 2024 12:22:56 +0000
asID:                     61717
IP address blocks:        170.233.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1f:e2:73:8b:05:86:66:90:3c:f3:f2:9f:a8:ab:7f:6b:fb:6e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:56 2023 GMT
            Not After : Aug  8 12:22:56 2024 GMT
        Subject: CN=9170A77DF63B742C00A22499AFCFD50FC5BCF4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:87:e8:f8:cb:3d:f5:10:48:06:27:b1:5b:
                    3e:5b:18:64:39:c9:5c:cf:dc:e1:96:64:9b:38:f8:
                    0f:74:0b:3f:09:43:6d:56:95:16:1d:78:01:d9:0e:
                    fe:60:22:01:22:8e:04:12:29:cd:e3:69:25:c5:85:
                    99:96:f8:84:b2:12:61:cd:8b:4a:b8:30:4a:7d:bd:
                    ee:ce:6f:b3:0e:e3:3c:05:57:ae:8e:c7:b3:91:30:
                    57:79:28:4b:f2:5e:77:3f:0e:db:5e:bf:a0:6b:d7:
                    73:bc:b3:f5:1d:3c:e3:fa:71:a7:2b:02:44:c8:e0:
                    5f:00:51:58:c4:d3:a9:ec:47:b4:56:ae:a4:f5:fe:
                    5e:26:db:a3:f4:14:ae:02:33:89:af:2d:cf:ce:09:
                    3a:38:f2:6e:dc:9f:ad:b2:ad:c1:dc:f9:51:e2:ae:
                    af:ab:b5:0e:10:70:2e:56:83:5e:3a:fb:cb:1d:28:
                    49:a9:4c:8d:87:7d:56:be:6a:8f:b9:6b:71:51:36:
                    a6:79:d0:65:c2:5a:0f:f6:85:5e:a1:ef:ba:e7:68:
                    5f:5d:3f:4f:e5:80:b8:36:25:29:7c:6d:69:1b:58:
                    d4:ae:1e:4e:1b:cd:4a:9c:2e:08:30:f9:fd:a5:1b:
                    3e:8d:fe:20:ee:63:de:fc:f4:97:8b:99:8b:22:52:
                    a0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:A7:7D:F6:3B:74:2C:00:A2:24:99:AF:CF:D5:0F:C5:BC:F4:B0
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:ef:33:b8:ce:4f:51:1b:38:6b:f3:d8:8d:e3:ab:5c:a1:
         8b:37:7c:33:84:b3:30:bf:de:da:ba:21:21:26:b4:9a:5d:8d:
         2e:4e:74:39:91:38:a9:57:54:6f:10:fc:3b:9a:80:a9:11:a0:
         ac:23:04:b4:6f:dd:db:57:3c:19:af:c2:d6:99:3a:b6:51:ee:
         4a:36:20:28:32:51:13:b7:6e:bf:85:10:28:9e:66:ef:29:c8:
         ed:01:66:49:e6:b7:98:b1:54:2e:2a:bf:e2:18:bb:38:74:e1:
         f7:ca:72:7f:ea:eb:23:7d:18:37:52:51:17:1d:b5:ab:4b:c8:
         e3:ff:3b:b9:7e:dd:05:f9:db:f0:b1:c7:05:0f:b4:90:db:75:
         ef:80:79:b6:2e:2b:94:d8:96:6a:3d:9c:c4:04:6c:d9:db:bf:
         80:0c:52:73:a8:76:ae:31:5d:81:f4:19:e1:29:e7:9e:d3:65:
         9c:53:77:33:84:7d:ef:9e:b9:5d:04:2c:6f:76:fa:51:aa:ea:
         15:be:93:b8:e9:4e:ec:67:30:8c:ec:4d:2e:3d:5d:58:59:ed:
         29:e8:0e:d6:d3:6c:25:e3:71:8f:93:6c:99:97:28:91:3f:c8:
         6c:b5:6b:56:2f:34:00:87:94:94:46:f7:80:1e:67:b4:8b:16:
         21:34:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org