Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31382e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          /mraLFWi533da540Eu16XrwFetAADkMtI9yBm6SmYHE=
Subject key identifier:   32:35:09:C5:EF:54:49:23:15:F0:1B:BA:FA:01:67:11:50:B9:D7:26
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       74A1CD268DDD1725C4B787C061C0053CC85B9218
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:55 +0000
ROA not before:           Thu 10 Aug 2023 12:17:55 +0000
ROA not after:            Thu 08 Aug 2024 12:22:55 +0000
asID:                     61717
IP address blocks:        170.233.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a1:cd:26:8d:dd:17:25:c4:b7:87:c0:61:c0:05:3c:c8:5b:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:55 2023 GMT
            Not After : Aug  8 12:22:55 2024 GMT
        Subject: CN=323509C5EF54492315F01BBAFA01671150B9D726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:d9:93:29:f8:b3:f6:1a:0e:6b:2a:11:d5:
                    4a:b2:cc:81:66:4e:c2:56:b1:51:21:d1:fc:fb:10:
                    16:6a:d3:02:e6:18:6a:84:67:98:06:11:df:57:ad:
                    ae:77:7c:ef:2b:bd:48:18:e8:50:35:a6:ae:28:17:
                    d4:11:79:17:e4:64:d2:db:9b:71:a8:68:35:49:47:
                    a1:55:c1:6d:f8:4d:3c:2c:b2:7b:81:17:0a:31:ba:
                    c8:64:bb:85:4a:a5:49:db:91:e3:21:f1:8f:85:8b:
                    05:5f:23:22:e3:d6:80:b2:6a:0b:6b:95:0b:fd:fb:
                    fc:b1:f9:7f:52:0c:06:e8:ea:69:a0:f5:c6:df:d9:
                    be:7b:b8:ad:08:0a:58:c8:c6:e4:73:08:51:37:2d:
                    ca:07:c9:79:96:26:38:9d:c2:b9:1a:fb:80:6c:41:
                    01:1b:67:01:05:b2:f6:35:9c:bb:f3:90:4e:fc:ab:
                    84:de:0d:11:1c:e5:6a:fa:34:cc:74:aa:87:83:de:
                    36:c9:b7:62:2b:a3:82:ee:ae:6c:15:ff:81:5e:d1:
                    f2:a2:8d:d3:97:d9:cb:1c:cf:68:8b:91:7f:b7:1f:
                    15:7d:ca:db:4a:63:af:cc:fd:f9:fc:36:c5:77:8d:
                    06:fd:0e:98:0d:fe:5a:e8:cd:3f:af:e4:7a:20:8e:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:09:C5:EF:54:49:23:15:F0:1B:BA:FA:01:67:11:50:B9:D7:26
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:49:52:dc:c0:d5:e5:09:17:dd:6b:45:2a:ba:cb:9d:ba:
         c7:c8:b8:9f:0e:52:0f:f1:1e:87:70:b7:2f:6e:87:89:5a:fc:
         45:0c:8f:47:9e:a4:34:c1:f6:1c:b7:0c:76:17:9b:1a:27:e1:
         d5:c8:a6:46:da:11:c8:0a:94:2e:01:f2:44:ce:be:53:d7:19:
         a9:c3:6d:00:03:27:f4:b6:9d:a3:7b:a7:6e:3c:2f:55:43:71:
         ce:1d:22:51:fc:fd:9c:7a:d3:d8:e8:2d:80:7a:67:54:02:83:
         cb:4b:5f:ec:c1:f1:08:7b:4e:c9:c4:9c:c0:fe:59:47:7e:4e:
         a5:30:8e:2d:15:a9:72:cb:fa:f6:24:24:ca:62:21:0f:35:d3:
         c2:bb:0c:3e:03:e0:f2:10:94:d5:5b:52:b0:ea:cc:23:2a:a8:
         3b:85:eb:0e:aa:e0:1c:9f:69:7f:23:1e:19:bb:be:da:4c:f7:
         c5:77:c1:52:f8:ae:a8:e8:6e:82:40:97:94:cc:35:cb:2c:ff:
         0e:3b:8f:4f:d4:17:0f:71:1e:d5:40:e5:b3:d2:b6:c0:6d:74:
         f9:39:5c:c7:04:91:78:41:b5:f4:17:d4:85:52:cc:a1:c8:9d:
         72:9c:23:7a:71:9a:ad:e4:83:d9:74:88:9b:9f:e3:04:63:5a:
         92:eb:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org