Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa
File:                     3137302e3233332e31382e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          IoF9pgkXHFT3Ydwzp6j6hVCeWLlvrrNQ3xIFvzQPFh4=
Subject key identifier:   9A:F9:94:F3:F5:22:6A:AB:CD:74:03:4E:87:2E:4B:4F:5D:C3:62:D2
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       67088B71DAB421B90C58A5163EFBFDD66855C003
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:55 +0000
ROA not before:           Thu 10 Aug 2023 12:17:55 +0000
ROA not after:            Thu 08 Aug 2024 12:22:55 +0000
asID:                     61717
IP address blocks:        170.233.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:08:8b:71:da:b4:21:b9:0c:58:a5:16:3e:fb:fd:d6:68:55:c0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:55 2023 GMT
            Not After : Aug  8 12:22:55 2024 GMT
        Subject: CN=9AF994F3F5226AABCD74034E872E4B4F5DC362D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:15:28:38:32:1a:5d:9a:ed:ab:eb:b0:e6:
                    8e:24:0d:4d:59:8b:0f:33:da:cd:d4:0a:99:78:f4:
                    89:17:98:bd:88:e3:48:b4:57:dd:5c:81:63:60:53:
                    3b:be:9c:ad:b3:78:6b:b3:84:77:56:90:86:0e:63:
                    ac:c5:05:5e:3c:5c:4d:f4:54:8e:f2:99:b8:71:bd:
                    5f:6b:1d:59:ee:7a:aa:4e:06:c6:bc:88:0a:d4:7d:
                    02:70:aa:c3:58:4d:ee:63:00:ce:cb:07:18:08:6e:
                    96:ff:5c:e6:53:af:9c:85:a8:b8:f3:3c:8b:d6:cc:
                    ee:41:8a:b2:69:9c:26:45:39:3a:e1:89:0a:87:d1:
                    2d:81:fa:c6:e3:0c:b4:46:b9:52:e2:5e:87:42:a4:
                    9e:d6:84:fd:df:9d:b3:ec:33:af:ba:35:7e:db:c8:
                    df:22:08:37:c3:b2:4f:28:4e:48:00:85:d4:12:d2:
                    8f:70:84:ce:50:61:a8:5a:c3:62:1a:7f:04:18:33:
                    3e:e3:f2:7b:26:1f:e7:83:d2:70:2f:c7:69:8b:79:
                    65:88:da:b9:57:7c:4c:0f:e4:fa:67:02:c9:5b:ef:
                    b3:e0:04:53:72:be:3c:a3:85:e8:10:6d:5a:35:71:
                    e6:a0:92:47:1d:2e:9e:f0:0a:48:c7:3c:fa:57:9b:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:94:F3:F5:22:6A:AB:CD:74:03:4E:87:2E:4B:4F:5D:C3:62:D2
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:5f:e2:1d:8c:7f:a1:eb:f7:fc:f1:25:54:19:bb:19:4d:
         9e:1c:95:88:69:3c:b8:ac:34:c8:0b:e1:6f:88:1d:ca:a1:c0:
         d6:79:54:ee:6c:05:0b:df:d7:29:93:e3:0c:42:bc:d1:01:d3:
         71:e8:9b:c4:db:62:b9:f1:c9:53:ad:98:4f:df:cd:79:be:92:
         4e:5f:8a:73:07:c4:c8:a2:75:b1:b0:29:47:7f:1b:7e:67:1a:
         f0:b5:32:93:47:db:11:04:96:19:63:27:72:6c:73:60:07:77:
         80:c3:68:da:d5:7b:1f:d9:b5:cb:0c:82:fd:51:07:66:41:fd:
         75:90:8d:02:ef:03:db:45:3d:71:32:34:0b:26:04:98:70:44:
         51:af:90:f8:34:3b:4d:f7:79:e8:ec:13:f3:c9:3d:e1:6d:56:
         8f:c4:85:ab:ca:a3:db:21:fe:c8:d1:cc:3f:61:22:f2:aa:25:
         0e:9c:92:7d:4e:b6:81:ae:9e:e0:5b:98:24:75:36:b3:af:67:
         d4:04:53:80:68:27:62:07:65:34:54:a6:29:dd:50:35:3a:97:
         53:d5:46:22:4b:62:6c:02:2d:55:fe:52:37:e2:e0:00:43:b5:
         6c:cb:8d:2f:b0:fb:c0:62:c5:18:44:fb:d1:d1:1a:c4:07:bb:
         7d:94:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org