Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          iaeO4/a6GaT8zKnXJGQcLnmHAwOkNL2EFxM/T/6ZM38=
Subject key identifier:   C6:04:B3:55:F2:7B:4B:D0:15:58:9E:29:DF:38:10:2A:33:2C:A6:32
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       5E849542723648585EA98845B3D8F46B87B726DE
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:47 +0000
ROA not before:           Thu 04 Apr 2024 12:30:47 +0000
ROA not after:            Thu 03 Apr 2025 12:35:47 +0000
asID:                     262485
IP address blocks:        170.238.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:84:95:42:72:36:48:58:5e:a9:88:45:b3:d8:f4:6b:87:b7:26:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:47 2024 GMT
            Not After : Apr  3 12:35:47 2025 GMT
        Subject: CN=C604B355F27B4BD015589E29DF38102A332CA632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:0d:51:ce:c1:8c:ae:33:af:3a:dd:41:c3:
                    6b:43:7f:e5:c6:60:4e:32:40:a9:c4:3d:86:40:24:
                    aa:08:ba:7c:dd:8f:4e:f9:8c:d2:c6:11:98:73:fb:
                    bc:7c:26:30:19:f4:3f:28:53:6c:fb:a5:15:32:bc:
                    a0:b4:0d:b2:77:d0:9f:5b:ba:d5:84:86:7b:f0:75:
                    0d:77:cb:c4:68:9b:d6:b4:49:25:e3:3e:ca:47:05:
                    6b:a1:b2:37:0c:55:05:22:f8:45:e1:2f:ce:aa:cd:
                    90:73:35:3e:46:4a:91:66:21:56:bf:f2:85:71:5d:
                    1e:1b:e1:41:a2:28:d3:b7:e5:e1:71:78:e5:d2:5f:
                    b8:3d:13:53:d7:d0:b9:db:4d:f1:7b:e5:e1:80:05:
                    b1:e8:52:26:8a:89:a5:af:0e:77:bd:f8:fa:0c:bc:
                    c7:81:8d:7e:4d:61:c4:fc:49:10:06:9b:2d:9e:6c:
                    c5:fa:5d:4a:e5:11:d4:a4:65:1f:a9:c6:a1:bb:5f:
                    e6:f6:b8:cd:29:e1:8a:84:98:9d:a8:94:08:1b:9b:
                    3a:45:9c:90:b0:94:94:76:33:5d:c9:30:a3:a4:82:
                    58:63:dc:93:29:61:7d:f8:ab:f6:94:43:13:56:f7:
                    f5:39:09:82:c2:b5:62:66:70:51:e5:1f:ae:79:64:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:B3:55:F2:7B:4B:D0:15:58:9E:29:DF:38:10:2A:33:2C:A6:32
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:20:99:e4:7c:8f:dc:04:0d:94:fc:4b:54:56:35:9b:8d:
         9b:ed:c9:d9:0f:1e:35:d9:96:43:c2:44:13:06:b7:a8:f3:23:
         ba:e3:86:8b:80:31:2a:7e:99:e0:a9:40:4a:bb:06:9c:73:26:
         11:b1:f9:dc:9d:f7:58:e5:2a:7f:44:2b:0e:1f:77:bd:13:6e:
         26:24:db:12:a9:af:42:b3:a1:ed:05:25:ab:d6:a4:b8:4e:ad:
         e7:fd:14:d8:a0:3e:95:06:09:cc:57:93:ec:a3:ef:bb:d8:01:
         39:57:9d:98:d4:56:94:41:fb:9e:a4:b3:a7:14:7e:2d:e9:42:
         1a:a2:ac:d3:7b:4c:82:47:dc:2c:82:f2:14:d3:ca:24:48:34:
         04:cc:22:a0:2f:63:bb:9f:71:f3:8a:6e:b8:2e:8c:f9:24:8f:
         30:67:11:20:7a:68:4c:99:51:4d:dd:3c:0d:29:02:fb:fb:1d:
         01:38:fb:ff:b2:9f:6c:9d:0b:fa:08:89:ee:00:6f:f2:91:7c:
         36:3f:51:da:ec:90:2c:c6:c1:6f:3d:a3:98:45:1a:e7:07:ad:
         99:06:b5:ef:2b:19:74:de:1b:81:7b:f3:09:ea:be:df:60:ea:
         1c:9a:90:78:87:db:b0:bc:e3:44:9d:db:af:57:12:c8:44:7f:
         c9:78:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org