Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          kzWtIC8uVjrp+zFIT7O2JPJE9vogwZlx4hxgR5jWR8U=
Subject key identifier:   56:E3:41:2C:EB:C4:07:F7:AC:8B:4D:56:A1:7B:ED:50:5A:FE:77:41
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       757D645CFB94DC65D5D40B10EE30516E945F1C5F
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:45 +0000
ROA not before:           Thu 04 Apr 2024 12:30:45 +0000
ROA not after:            Thu 03 Apr 2025 12:35:45 +0000
asID:                     262485
IP address blocks:        170.238.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:64:5c:fb:94:dc:65:d5:d4:0b:10:ee:30:51:6e:94:5f:1c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:45 2024 GMT
            Not After : Apr  3 12:35:45 2025 GMT
        Subject: CN=56E3412CEBC407F7AC8B4D56A17BED505AFE7741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:29:d7:05:c3:56:28:d5:47:55:ee:ae:5d:
                    c5:c8:26:a7:88:90:8e:01:82:5f:86:6b:8f:c1:8e:
                    73:28:b2:0d:5b:e7:b0:50:61:60:30:64:a4:bd:a1:
                    69:80:99:58:6e:18:ca:8b:d5:df:49:06:16:15:7e:
                    a9:16:33:df:f5:cc:f1:1d:3c:72:c7:05:7e:cc:f2:
                    ee:8d:ad:55:81:45:59:ad:43:6b:f8:e3:c7:25:2a:
                    7d:10:dd:d6:4f:f2:83:2e:5e:0f:0a:30:c9:5f:36:
                    89:66:b7:a9:6a:7f:c3:bf:5a:d6:a4:11:2c:c7:d4:
                    7d:c0:59:b3:a8:cd:46:85:a8:fc:16:4d:d5:e4:df:
                    04:49:dc:e6:e4:7b:9b:20:06:e2:f4:11:30:63:a1:
                    95:96:17:42:b1:7b:4e:c2:31:0d:8e:e9:92:f7:61:
                    70:9a:b8:11:e9:4e:12:45:65:d1:b1:82:1b:38:82:
                    f9:49:bc:97:42:41:bd:66:03:e7:51:c5:64:97:b3:
                    93:49:6a:56:94:86:d2:97:56:85:6c:2d:d4:6a:fb:
                    a0:6a:6f:24:34:00:6a:ac:84:3b:fd:02:51:43:74:
                    aa:a6:5f:3e:80:7b:28:95:49:c7:32:fc:0b:97:9e:
                    98:9f:f2:ec:9a:a0:e1:ff:74:6b:82:f3:74:b2:bd:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:41:2C:EB:C4:07:F7:AC:8B:4D:56:A1:7B:ED:50:5A:FE:77:41
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:8c:e4:b7:70:8b:4b:eb:51:92:d0:fa:2e:10:ea:8d:ac:
         51:1f:ce:d2:be:8d:f9:d5:a2:aa:7c:ea:91:32:f9:82:d5:84:
         d2:79:19:ea:32:b9:19:2d:87:99:53:cf:8c:b7:09:3c:59:41:
         42:6b:d4:fe:92:f1:77:16:2f:0b:ac:9a:be:63:bd:bd:b3:c4:
         7d:5c:01:52:ed:1e:48:a6:f7:7f:18:fa:ce:48:68:17:8b:d5:
         02:a2:3e:46:2a:76:22:96:a5:79:7e:8c:35:bc:08:71:7e:b5:
         42:9e:ae:26:e1:65:15:13:f5:eb:f2:64:88:25:1a:11:08:76:
         14:1f:01:bc:ec:29:6d:db:c4:2e:c9:0e:1a:d9:c5:ca:a8:c3:
         58:73:2f:27:98:23:98:4e:d3:d8:0c:bb:97:c0:cb:3d:36:4e:
         74:a6:d9:45:48:be:07:76:78:e5:23:cf:98:21:e7:32:11:c9:
         cf:03:c9:26:f1:34:0d:55:5a:e1:61:93:46:58:df:cc:17:cf:
         a1:53:a7:58:7b:e9:66:ae:88:21:fe:58:4d:3a:f4:ba:83:63:
         79:04:11:13:89:bb:ea:1a:63:1e:d1:f4:2e:ef:e2:b4:53:de:
         49:41:78:cd:cb:60:4a:0e:f5:3e:f4:58:0e:b9:9d:0c:40:18:
         f5:a1:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org