Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa
File:                     3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa (raw, json)
Hash identifier:          MhX7REBXPddr4ZUp1DFg/pJpWvRsAToGRNCb4vd2KwA=
Subject key identifier:   99:00:41:48:1C:E7:93:1F:E0:5A:91:69:02:24:86:E2:DE:AF:39:14
Certificate issuer:       /CN=45E9E748FA23E0B32B8866766DD8E684BEFA7670
Certificate serial:       71B040E1838CB10924270A0F84514D28193AA170
Authority key identifier: 45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa
Signing time:             Wed 30 Aug 2023 15:05:13 +0000
ROA not before:           Wed 30 Aug 2023 15:00:13 +0000
ROA not after:            Wed 28 Aug 2024 15:05:13 +0000
asID:                     265198
IP address blocks:        170.233.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:40:e1:83:8c:b1:09:24:27:0a:0f:84:51:4d:28:19:3a:a1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E9E748FA23E0B32B8866766DD8E684BEFA7670
        Validity
            Not Before: Aug 30 15:00:13 2023 GMT
            Not After : Aug 28 15:05:13 2024 GMT
        Subject: CN=990041481CE7931FE05A9169022486E2DEAF3914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:5c:b9:3a:bf:38:24:f5:d0:66:2b:31:2c:
                    44:78:ff:81:36:39:ce:c3:c9:bf:34:60:d0:3e:e2:
                    89:2f:38:c4:b9:24:eb:cb:dc:cc:af:e4:7b:3e:ad:
                    5f:29:a9:42:4d:1f:77:5e:85:d2:6b:95:17:88:a8:
                    ba:95:c8:52:48:73:2d:39:cf:68:cb:03:e4:63:28:
                    c8:15:52:ca:c7:cd:46:fc:69:53:da:a1:7f:8c:91:
                    bf:63:0b:e8:0d:c4:09:de:d0:6f:b5:b7:8c:54:a6:
                    ba:f6:37:e6:11:45:6d:75:fd:e2:6b:61:c1:61:ce:
                    31:5e:11:e2:f1:43:89:99:6d:51:f8:5b:ae:2e:a9:
                    80:44:88:24:80:d6:6e:95:78:4b:28:83:49:ca:8a:
                    ca:a9:91:da:5d:8d:69:73:6e:ca:e0:ff:da:47:df:
                    1a:5a:9a:6e:df:3c:da:c5:40:cd:6a:71:d9:06:74:
                    23:f6:1f:22:96:19:63:56:3c:16:6b:18:d7:99:04:
                    9b:7d:50:8f:d3:bd:a5:fa:c1:d6:59:d1:d8:ae:a7:
                    dc:c5:91:e2:8f:40:d1:1e:7a:7b:b3:21:82:71:d3:
                    cf:a7:6c:a5:0f:95:70:c4:cf:b4:99:41:4b:39:de:
                    f0:3f:81:6b:d0:a1:4c:4d:b7:70:01:3a:68:8b:b3:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:41:48:1C:E7:93:1F:E0:5A:91:69:02:24:86:E2:DE:AF:39:14
            X509v3 Authority Key Identifier:
                keyid:45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:7d:0a:7d:c7:7d:c6:6e:25:d4:c2:2f:5d:80:ac:88:f0:
         ec:87:b7:98:fe:d5:73:b9:d0:31:04:6f:67:79:9d:0a:9e:52:
         31:97:31:b7:c0:d7:61:f4:2f:5a:c4:ba:33:4a:65:54:44:dc:
         35:52:c3:ae:fb:ac:ce:34:26:17:28:55:21:e8:77:06:26:94:
         30:cd:d7:ea:e0:4a:53:02:24:8e:35:5c:74:51:ff:01:d8:8d:
         a5:1a:a9:4b:36:89:47:8c:df:12:db:67:36:82:b4:d6:10:c4:
         12:bb:36:4d:4c:05:d4:39:c8:85:7d:a3:00:83:a1:81:d8:ec:
         9a:dd:2f:92:69:d5:00:ab:e3:81:9d:c8:5f:cf:8d:ae:7a:22:
         94:83:d6:07:0a:12:d6:74:49:53:93:98:ab:62:2c:2f:26:2d:
         86:ff:de:5d:40:a9:4c:18:cb:39:56:9c:f2:32:57:ae:44:73:
         1c:15:b8:b2:89:de:1b:60:39:dc:86:2b:3d:8d:26:3d:35:9d:
         b9:e4:bb:b6:fe:3a:92:0a:78:6c:1b:8d:94:62:a1:42:23:4e:
         34:e6:e8:ea:b8:9e:bd:ee:72:78:17:55:8b:f5:e4:42:2b:92:
         15:7d:07:2a:cc:4b:13:36:ff:5a:b0:53:98:56:1a:7e:0b:36:
         47:d6:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org