Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
File:                     3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (raw, json)
Hash identifier:          D0H5H24HGn78Llgc6NF69kbkyLcQD6Z7KGMZDM0HUyU=
Subject key identifier:   5C:B8:E7:D9:B6:D1:0F:57:8A:76:5E:80:37:F9:3B:64:97:D2:8F:4B
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       0540B411364ABF535E55CBD973726734D8D86691
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
Signing time:             Tue 26 Mar 2024 14:25:24 +0000
ROA not before:           Tue 26 Mar 2024 14:20:24 +0000
ROA not after:            Tue 25 Mar 2025 14:25:24 +0000
asID:                     28642
IP address blocks:        170.246.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:40:b4:11:36:4a:bf:53:5e:55:cb:d9:73:72:67:34:d8:d8:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Mar 26 14:20:24 2024 GMT
            Not After : Mar 25 14:25:24 2025 GMT
        Subject: CN=5CB8E7D9B6D10F578A765E8037F93B6497D28F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:66:92:8f:67:41:9a:65:a0:90:d2:59:aa:
                    83:6f:6c:50:e6:8d:7b:2b:fd:34:18:0a:25:09:88:
                    30:b7:d8:1a:d2:f8:3a:05:87:e4:b9:1a:78:00:e5:
                    9e:9a:56:70:13:08:c8:3a:54:ac:ee:6a:1c:5e:f7:
                    05:1c:00:a6:4a:e3:f9:8f:16:26:88:12:3d:74:76:
                    73:5a:8d:49:e5:91:45:b9:a4:74:f7:63:dc:42:df:
                    17:79:c0:b5:f2:e0:a6:8f:9d:eb:f9:6c:71:44:f9:
                    1c:1e:e7:b5:96:9f:98:e9:b7:ac:37:1c:e1:17:cc:
                    da:b9:c5:ea:72:ee:4c:f7:b9:f7:b5:26:a5:1e:ae:
                    89:61:9b:2e:58:85:ba:57:41:b9:d3:8d:61:99:a5:
                    c2:ea:69:3b:11:ce:9e:04:21:9d:d7:81:9a:fe:fd:
                    37:a6:fe:6f:83:fb:b9:41:92:3b:af:6d:2d:62:39:
                    6b:18:bc:08:31:a6:62:2a:a9:70:bb:64:0d:53:b9:
                    c2:1b:08:e1:43:39:91:9a:25:08:b4:e1:03:b0:0c:
                    03:ca:d8:e2:fa:ab:ff:b2:7c:ba:55:ac:b1:fe:88:
                    f7:94:9f:d6:95:07:69:d6:5b:7f:d1:07:c1:c9:03:
                    87:af:cc:e1:ee:a0:3b:c6:6e:59:3e:0a:8d:ab:1d:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:E7:D9:B6:D1:0F:57:8A:76:5E:80:37:F9:3B:64:97:D2:8F:4B
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:1c:ad:09:78:f4:9c:77:89:ea:a0:95:a4:d3:43:02:12:
         38:34:0b:a8:e3:b6:1c:ca:01:26:05:06:0f:4d:32:1f:8e:64:
         e3:24:96:21:bc:7c:73:22:bd:16:17:8c:b6:e8:34:5d:6c:87:
         07:af:ed:03:03:44:e4:c5:94:40:bf:af:15:b7:e2:99:c8:e5:
         ad:81:8e:28:19:79:fd:c4:d5:32:6b:d4:4c:37:b4:46:66:4a:
         ea:32:0e:94:c3:81:6c:10:b9:ea:24:8b:a5:a0:2f:79:1d:59:
         b2:8b:76:2c:f1:07:34:f9:d2:2f:84:fc:b9:9f:df:9c:ff:4a:
         9a:d2:89:b6:2d:43:4a:82:bd:04:ca:ce:b3:44:ef:a6:3d:9d:
         e2:d8:6f:fe:2e:4f:d2:70:d0:13:66:4b:3a:f4:60:33:cf:59:
         76:66:e1:74:d2:a1:d7:5c:46:f5:89:ca:99:ab:5e:d6:52:8c:
         89:e2:fe:22:09:7b:c9:c8:ca:42:c4:35:a6:5c:08:da:8e:44:
         38:ba:96:47:19:2e:a3:95:8c:6d:cb:a7:fc:29:1b:3d:cc:03:
         83:6f:2f:d1:4e:a7:83:66:e6:56:0f:18:ba:97:c2:9a:14:d6:
         19:03:3f:0d:46:9d:18:d0:87:11:70:45:fb:9c:f4:d0:ff:53:
         3b:ed:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org