Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa
File:                     3137302e38312e3232362e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          LvLsV/cHvANpnjAG56g00aKpLPRUO5ZqC1VR7TkJn1I=
Subject key identifier:   D1:0F:A4:98:D7:2F:E3:37:FA:18:51:F2:1F:F7:21:81:9B:9A:0D:4F
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       084E134B7D04B48E194E3778B64D9633B52B88DC
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:54 +0000
ROA not before:           Thu 14 Dec 2023 13:15:54 +0000
ROA not after:            Thu 12 Dec 2024 13:20:54 +0000
asID:                     61666
IP address blocks:        170.81.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4e:13:4b:7d:04:b4:8e:19:4e:37:78:b6:4d:96:33:b5:2b:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:54 2023 GMT
            Not After : Dec 12 13:20:54 2024 GMT
        Subject: CN=D10FA498D72FE337FA1851F21FF721819B9A0D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:04:f2:4e:03:da:3b:1e:76:a4:98:cd:98:
                    9e:8c:bc:88:9b:f2:49:24:c4:50:ba:b7:65:60:e7:
                    b7:e1:c9:10:cd:0b:e9:de:b5:75:59:bb:e9:0d:82:
                    4c:cb:0b:c8:31:86:6f:e5:cc:eb:bb:f2:f4:f0:9d:
                    53:64:df:db:a1:be:bd:9e:72:fc:de:b1:17:56:85:
                    da:94:38:70:2c:1c:51:6f:20:cf:4f:57:71:7d:44:
                    ef:63:52:6a:6a:85:46:17:f0:c1:71:49:71:a6:b5:
                    4c:07:a7:2e:49:25:69:d9:dc:ce:3c:b7:8b:b9:dd:
                    89:68:dc:35:ba:a9:c5:6f:9d:c2:c3:0d:f0:fd:17:
                    b6:41:2e:1b:21:42:6c:70:e3:32:d0:55:55:53:29:
                    05:e2:01:3b:94:23:c3:0c:48:12:e0:27:de:f5:93:
                    7c:ec:03:de:c7:c8:5d:7f:2a:07:93:cc:80:0d:d4:
                    21:9b:0c:c7:c6:8a:0e:79:ec:44:c3:55:74:6f:40:
                    b3:08:06:98:e7:78:cc:a9:bb:f4:41:83:8f:c9:a0:
                    37:4a:da:c5:9c:0c:be:4a:7b:2a:99:7e:bf:ad:3c:
                    82:3a:c0:51:91:97:49:fc:5d:60:c4:60:d6:2a:73:
                    5e:ed:18:af:a2:aa:4d:3a:bb:d1:00:be:ef:b7:43:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:A4:98:D7:2F:E3:37:FA:18:51:F2:1F:F7:21:81:9B:9A:0D:4F
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:b3:ad:99:04:d0:9d:64:c7:34:63:58:85:25:27:45:5a:
         82:8d:01:3c:9b:0c:06:4e:a8:0c:26:6f:a9:fe:df:c0:76:ff:
         88:45:7b:84:a5:de:af:8f:39:aa:13:31:7f:c7:ff:e7:4d:75:
         4a:7e:c0:29:26:0d:22:6a:d4:55:9d:1a:e3:1d:7c:19:d1:af:
         54:e7:fd:99:45:5b:fd:3a:10:15:b0:96:c6:de:5d:39:44:01:
         57:ea:f5:6b:c9:05:fe:b2:2a:24:bf:3a:35:64:1e:d0:84:75:
         b3:89:eb:b4:e6:af:c0:e8:f3:5d:6c:b5:fe:bc:39:0c:71:64:
         42:bf:d0:7d:1e:b3:cf:59:7c:49:0c:b7:c2:4d:7b:d9:6f:4f:
         c8:a1:80:4d:a5:cd:67:b5:06:04:99:ad:84:6a:6c:f0:72:93:
         7e:15:59:8b:48:5a:95:40:be:20:99:31:50:7a:39:0a:f7:16:
         27:2e:b1:df:b7:48:ad:c7:44:98:3e:35:1e:66:c3:aa:02:47:
         ee:72:17:f4:a0:14:53:b3:30:91:ee:2d:30:5e:f9:3b:ba:25:
         3a:72:41:da:43:20:35:24:ae:83:7a:89:4b:dd:62:f5:8a:d0:
         b2:2d:70:de:e1:1b:64:52:60:5d:1f:5a:14:85:c1:19:b2:4e:
         91:1b:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org