Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
File:                     3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          X0u8SJoZNb/zUDjPT6SfU8yrNj/MOqDmXhBrYyu5hTA=
Subject key identifier:   71:51:43:38:4D:B3:AB:88:2F:CC:1D:61:88:33:51:40:A7:A1:FF:E9
Certificate issuer:       /CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
Certificate serial:       672C2913297085CEC29380D349050FE25DEF0706
Authority key identifier: B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
Signing time:             Thu 05 Oct 2023 20:46:56 +0000
ROA not before:           Thu 05 Oct 2023 20:41:56 +0000
ROA not after:            Thu 03 Oct 2024 20:46:56 +0000
asID:                     52756
IP address blocks:        170.245.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2c:29:13:29:70:85:ce:c2:93:80:d3:49:05:0f:e2:5d:ef:07:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Validity
            Not Before: Oct  5 20:41:56 2023 GMT
            Not After : Oct  3 20:46:56 2024 GMT
        Subject: CN=715143384DB3AB882FCC1D6188335140A7A1FFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:a7:18:7f:94:b1:bf:cd:7a:8c:96:e4:45:
                    ce:7b:96:da:c8:ea:8b:24:b5:fe:59:74:4f:d2:29:
                    c6:63:e3:87:e0:b8:b2:9d:09:99:3b:0e:7a:c3:b1:
                    e2:ef:ab:95:8b:b1:6c:78:8e:b2:4d:72:a5:c5:bd:
                    1f:55:90:ab:05:70:d4:fc:c3:c0:4c:1a:49:b8:fe:
                    51:76:21:74:8b:7e:46:71:75:f7:a8:9d:5b:0e:73:
                    b7:8c:1b:ea:40:88:72:01:5d:ec:a7:6b:b5:cc:de:
                    bb:55:fe:76:22:e4:10:af:70:2a:16:03:55:78:ca:
                    dd:0a:3d:6d:1b:aa:ed:d8:2c:3c:54:a0:59:54:2c:
                    07:85:0c:00:40:b9:03:c1:f6:18:0e:3b:92:ae:3b:
                    f7:8e:94:f7:e9:c0:3c:4f:55:cd:9b:db:15:25:02:
                    24:1c:bb:61:5e:ec:a4:ec:13:85:53:d0:16:16:2d:
                    50:79:2b:6d:6b:a9:a9:4f:53:5e:f3:2c:e5:97:f1:
                    62:43:74:46:40:33:f1:99:6c:b3:ad:8c:09:c2:e9:
                    a1:4b:54:f0:02:7f:f5:56:d8:e5:1b:9d:d1:df:67:
                    1d:a4:65:a7:81:0d:54:6c:2c:56:33:a2:04:6a:a7:
                    fc:58:79:21:4c:37:d3:aa:5b:62:a6:b3:9f:d9:86:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:43:38:4D:B3:AB:88:2F:CC:1D:61:88:33:51:40:A7:A1:FF:E9
            X509v3 Authority Key Identifier:
                keyid:B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:ef:a5:66:42:c9:d7:68:c7:90:02:71:16:d0:0f:2f:76:
         07:99:6c:02:a6:57:72:30:e1:a4:da:0d:64:a0:86:65:10:06:
         ae:6d:24:53:45:9f:c0:f5:75:5f:c9:31:b3:96:18:c1:d9:41:
         74:3f:14:a8:8c:14:a4:0f:7d:35:03:40:49:28:e3:66:32:d5:
         70:dd:55:65:54:4a:fa:90:98:53:22:0c:27:f0:ed:ba:fc:0f:
         29:df:dd:b9:e2:6a:e8:c1:00:4d:42:94:8d:f8:0e:0c:75:3d:
         6d:20:9e:79:a5:86:d2:91:de:de:6b:be:f2:92:51:7d:bc:96:
         39:7f:ee:01:cd:1b:c0:d1:ed:96:d5:29:44:53:93:7e:d2:3b:
         8f:68:0c:bd:85:8a:2f:71:b1:c1:a5:2f:5f:2d:48:0c:77:21:
         1c:1a:c3:fd:dc:f1:a5:d2:e8:de:41:32:9f:59:32:57:bd:1a:
         60:b6:f9:80:c2:37:a7:ab:22:01:a8:77:70:f6:fd:f4:12:9f:
         7d:89:c6:c8:60:df:9f:8f:37:17:c0:68:77:5d:65:c0:fb:ac:
         e3:ca:c1:70:9c:1e:17:bc:54:b3:b4:be:9d:48:19:bd:5b:59:
         c6:d5:f0:af:92:1b:bf:1f:b5:59:c6:36:a6:65:81:e2:b5:48:
         c6:b9:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org