Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32332d3233203d3e20323636353032.roa
File:                     3137302e3234342e3137322e302f32332d3233203d3e20323636353032.roa (raw, json)
Hash identifier:          cGVvzpL7cBMgNtHcaBMaI4f1S1SFUgwhdov1RpYjbCQ=
Subject key identifier:   6C:20:CD:C3:57:DC:A1:F4:B2:35:9D:0F:F5:E4:DF:4D:E5:6B:F0:CE
Certificate issuer:       /CN=16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733
Certificate serial:       1E7FFD10F9C2883C3E9E4A27CF351ECDA5EB9AAC
Authority key identifier: 16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32332d3233203d3e20323636353032.roa
Signing time:             Sat 09 Sep 2023 13:34:10 +0000
ROA not before:           Sat 09 Sep 2023 13:29:10 +0000
ROA not after:            Sat 07 Sep 2024 13:34:10 +0000
asID:                     266502
IP address blocks:        170.244.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:fd:10:f9:c2:88:3c:3e:9e:4a:27:cf:35:1e:cd:a5:eb:9a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733
        Validity
            Not Before: Sep  9 13:29:10 2023 GMT
            Not After : Sep  7 13:34:10 2024 GMT
        Subject: CN=6C20CDC357DCA1F4B2359D0FF5E4DF4DE56BF0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:35:94:4b:3b:5f:25:68:c1:b3:f1:82:55:
                    81:c7:59:dd:d0:52:ed:bd:b4:7e:70:fe:29:a5:6b:
                    75:0e:60:0d:65:b2:9a:de:db:d1:b5:36:64:63:e2:
                    86:eb:56:13:74:38:b5:38:c8:a1:59:02:ac:39:e2:
                    86:b3:37:51:37:cc:f1:5a:aa:9a:c3:e5:88:42:3c:
                    4a:2b:97:df:47:21:ec:c2:cb:fd:2b:bb:b1:6b:03:
                    64:dd:ed:9d:19:1a:1f:a5:8e:4e:a1:43:85:58:bd:
                    a5:72:87:ab:20:14:b7:e8:1c:63:fb:1f:2d:5b:53:
                    af:bd:f0:c2:35:65:62:12:5a:bf:42:fc:79:f8:59:
                    32:3a:fb:78:7b:90:65:a1:fe:da:2d:9a:de:16:68:
                    c5:f2:a9:fd:a9:88:93:88:d1:3f:29:26:e8:9e:71:
                    f7:d4:f9:e4:62:c6:f0:e9:fe:cf:03:16:86:86:4a:
                    ec:f9:bd:27:1f:71:23:66:62:d4:91:84:fc:0c:e0:
                    7c:dc:f1:16:d8:10:66:11:13:74:fa:d4:7f:3a:fa:
                    d8:80:27:8c:d1:38:d9:72:ab:3b:6f:61:ef:4f:de:
                    c3:c9:a8:8a:46:3a:16:2c:cd:21:5b:84:3e:c4:30:
                    eb:0b:92:cc:cc:ba:b9:86:de:49:a9:86:1a:9c:c7:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:CD:C3:57:DC:A1:F4:B2:35:9D:0F:F5:E4:DF:4D:E5:6B:F0:CE
            X509v3 Authority Key Identifier:
                keyid:16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32332d3233203d3e20323636353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:55:34:da:b9:d8:53:c1:eb:0c:ed:5a:19:3a:97:7c:02:6f:
         9f:9f:90:cb:a1:69:ef:6a:6c:7b:39:b2:66:a2:45:04:15:72:
         9a:37:04:e3:a9:c8:91:ea:c4:fc:b2:22:df:ba:2e:92:1c:29:
         6e:fa:66:83:32:6c:3a:27:d4:6f:84:51:29:06:bb:a2:54:86:
         11:8f:4d:d2:0e:31:5e:cb:0c:6b:3f:42:bc:2b:59:68:ea:8a:
         b0:45:0e:f1:0c:d1:4a:b4:9d:66:50:c3:62:0c:8c:a5:31:6a:
         f3:46:b8:a7:2e:19:d4:6e:2c:38:8b:8a:e3:40:d8:db:a5:44:
         c0:86:52:1b:b3:63:8c:40:5b:a7:52:fa:7a:24:da:ec:a0:03:
         4d:b7:e9:4e:16:7b:68:22:94:e1:41:e9:ed:c2:9c:d2:47:94:
         a8:ba:26:b0:26:f9:fa:82:8e:32:92:59:09:2a:cf:fe:6a:3c:
         0a:d5:71:78:a3:2b:60:7a:5a:c6:31:bc:51:48:40:9b:32:74:
         49:f9:42:6b:e0:20:91:84:8c:36:7c:3f:a6:c8:66:27:d3:78:
         93:a4:d6:65:e3:73:ad:fa:30:cc:0f:7f:7a:73:bb:cd:8d:cc:
         2c:e4:15:43:ee:c8:f1:e6:97:48:3c:75:c0:fd:d2:c8:dd:a9:
         e3:52:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org