Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31392e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          rj2EL1xKXfoAMf0nZYUGR4wFBhf489RvnsONxpiaN6E=
Subject key identifier:   3B:6D:9C:C2:DA:C7:C4:18:48:60:94:72:84:2D:D1:C5:15:C7:04:0A
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       32D9674EF070006EEC7808AB4B7C6F75E631D173
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:57 +0000
ROA not before:           Thu 10 Aug 2023 12:17:57 +0000
ROA not after:            Thu 08 Aug 2024 12:22:57 +0000
asID:                     61717
IP address blocks:        170.233.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:67:4e:f0:70:00:6e:ec:78:08:ab:4b:7c:6f:75:e6:31:d1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:57 2023 GMT
            Not After : Aug  8 12:22:57 2024 GMT
        Subject: CN=3B6D9CC2DAC7C41848609472842DD1C515C7040A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:82:e1:77:49:d0:e6:fe:33:17:cd:be:15:
                    02:fc:2a:7a:f3:f1:49:63:9e:53:eb:fb:be:92:c2:
                    4a:34:0f:89:23:74:63:c4:12:d4:3f:48:c1:88:b4:
                    72:53:ba:02:f9:93:a0:24:78:71:65:4e:64:63:e2:
                    f5:0a:d0:b9:d6:5a:a3:df:1d:16:32:e3:58:f4:58:
                    94:fb:35:cc:6e:68:4b:fb:78:81:bf:ee:95:d4:74:
                    81:a1:23:a8:0c:b8:35:fe:0b:58:ae:2e:1b:53:e1:
                    2f:9e:b3:36:08:aa:06:92:bb:a1:cc:ce:e3:55:2a:
                    8d:15:ba:3d:ed:9e:5d:d8:a8:13:15:84:b6:12:8d:
                    55:c5:bd:bb:74:9c:3d:03:19:8e:aa:6a:11:4b:c6:
                    df:9d:67:01:d7:65:fc:0a:99:6d:08:4d:20:ca:a1:
                    d2:22:ac:e9:84:51:83:99:a3:31:19:90:3e:cb:e2:
                    5e:66:ac:37:42:49:76:32:e9:35:bb:33:40:7c:09:
                    93:81:e6:c5:14:68:5a:0a:6c:3f:d7:5c:6c:ab:5e:
                    dc:e1:ad:3e:b9:6d:a6:12:f2:73:0e:cc:ec:50:48:
                    28:f0:96:1e:3b:85:3a:c3:be:68:bb:4b:a5:8b:a8:
                    b9:88:46:28:3a:2f:b4:64:a4:30:19:9e:91:77:e4:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6D:9C:C2:DA:C7:C4:18:48:60:94:72:84:2D:D1:C5:15:C7:04:0A
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:0d:2d:0b:aa:87:7d:a0:fd:2e:5f:ef:3d:bb:0e:f8:04:3f:
         86:95:bf:0f:2b:eb:00:44:67:59:46:fb:de:ef:85:52:77:00:
         0c:4a:32:5c:50:3c:14:34:d4:cf:2b:84:7d:b1:01:98:96:4a:
         7a:a9:7f:ae:19:1c:3d:63:ec:46:ce:9b:77:e6:f3:b8:e4:1c:
         d6:96:07:37:b9:5e:27:50:20:2e:20:9b:79:ff:dd:db:f0:e0:
         da:f7:cd:1d:d3:b6:05:cc:4b:c9:f1:d6:50:0b:14:2d:b4:34:
         0d:5b:6f:88:ef:33:73:d6:1a:3e:3b:f7:d9:69:3d:b1:81:34:
         c8:bc:ac:eb:64:70:e2:3b:1c:84:83:70:67:92:38:50:6e:36:
         26:41:14:8a:81:cf:e0:5d:5f:04:67:03:e0:cd:bd:e4:44:66:
         a0:ff:15:fb:f2:b4:d9:ee:4e:1a:d2:e4:18:b8:59:ee:f2:db:
         d2:0b:94:d4:a1:c4:fd:d0:3e:eb:92:07:26:72:9d:56:63:51:
         de:8a:38:43:16:f6:1c:a6:d5:3e:2b:5a:47:24:89:c3:62:1a:
         2a:d6:d4:96:f8:3d:60:c0:28:ad:29:20:9c:97:4b:ad:7d:f1:
         c5:e4:7a:cb:dc:5b:4b:e9:ce:0a:49:5d:91:28:92:6c:31:ad:
         f2:4b:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org