Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31362e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          fB97wIevi1S9DVHVvgFE0vLcumEqisjo7cXXI3yu0GA=
Subject key identifier:   42:A7:66:8F:79:17:82:2F:1A:C4:92:6F:AE:B8:23:3E:05:E1:27:F7
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       781045B370C8EEDCBE7F5D5BA73D89E3FBA4E2AA
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:55 +0000
ROA not before:           Thu 10 Aug 2023 12:17:55 +0000
ROA not after:            Thu 08 Aug 2024 12:22:55 +0000
asID:                     61717
IP address blocks:        170.233.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:10:45:b3:70:c8:ee:dc:be:7f:5d:5b:a7:3d:89:e3:fb:a4:e2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:55 2023 GMT
            Not After : Aug  8 12:22:55 2024 GMT
        Subject: CN=42A7668F7917822F1AC4926FAEB8233E05E127F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:7b:68:45:68:2a:eb:53:73:24:1f:1f:b7:
                    d8:ba:f2:fd:d5:9a:93:34:59:23:3c:56:f0:c6:b6:
                    89:e2:0b:9a:e0:23:e1:f9:5a:ff:65:b0:c8:f8:13:
                    40:91:eb:9d:14:40:01:68:3b:d4:0f:77:bc:2d:8b:
                    3c:0e:eb:37:d0:0d:79:94:99:2c:23:2f:7a:69:16:
                    f8:20:b3:65:77:bd:3b:c4:65:b5:fd:ae:b3:d3:da:
                    67:fc:86:1f:42:5b:4f:2c:4f:02:14:a3:f6:f4:97:
                    74:a3:5a:c7:ab:2b:bb:5d:2e:46:ab:6f:da:77:f2:
                    00:86:d3:c1:8b:1e:76:7f:20:d9:6b:d6:33:51:3d:
                    33:c8:d5:ae:1a:5f:f7:e5:f3:21:b3:a8:2e:5f:bf:
                    30:f7:cc:db:88:20:2e:22:a5:55:14:c6:1f:b6:22:
                    91:1c:9d:f9:59:d6:b8:cc:63:7f:57:68:6f:c2:ef:
                    44:32:10:2e:b5:14:9a:38:93:b3:2f:49:6e:58:0b:
                    10:56:15:13:82:bb:79:e6:5c:58:74:b7:cc:f1:91:
                    d4:10:90:25:26:cc:60:c7:bc:3d:29:90:c7:5c:5e:
                    69:b5:6c:20:0d:7d:bc:8d:ed:44:43:af:8e:6d:47:
                    c8:96:d4:47:dc:31:9e:cc:28:a6:36:47:49:77:67:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:66:8F:79:17:82:2F:1A:C4:92:6F:AE:B8:23:3E:05:E1:27:F7
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31362e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:8b:9c:b3:5d:ef:39:43:56:fa:18:ed:7c:1a:4b:0b:8f:
         90:37:6e:a7:0c:91:bd:ed:30:a6:23:5e:12:50:0f:74:59:0b:
         50:f0:7d:5e:84:8a:e9:f3:ce:f7:ae:6b:44:26:c3:2a:a2:7b:
         63:f9:b9:23:74:b7:e4:af:0c:68:82:ae:80:b3:6b:08:3c:7b:
         01:2e:d0:ee:28:d0:d6:c0:88:d6:c2:db:dc:05:69:9d:fe:70:
         dc:89:4a:7a:f9:90:d1:00:09:ea:f4:ab:7e:2f:e0:c2:83:ad:
         6a:87:d4:89:32:6d:99:34:1f:10:28:6d:12:f3:a3:f5:d3:41:
         1d:73:f5:d5:08:21:5f:38:62:58:e8:b4:1c:32:1f:4c:2a:f8:
         a7:c6:d4:d7:32:f6:8c:09:35:df:aa:1a:83:12:db:ba:07:3a:
         61:79:71:36:f8:ab:c6:a2:e3:27:18:60:e9:1c:f2:87:3c:99:
         10:39:7b:18:b5:7f:8e:fe:d2:17:e8:b3:e4:2d:b8:64:44:20:
         00:7f:2f:6a:4c:d8:a9:3c:46:d9:1e:ed:fd:f3:4f:dc:0b:ef:
         1b:df:da:c7:4a:62:ba:a9:8d:d6:9c:1a:b2:f4:37:6a:5d:ad:
         d2:0b:c4:f3:05:b1:4f:e2:08:c4:22:e2:37:ac:ff:ad:eb:4b:
         5b:91:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org