Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa
File:                     3137302e3234372e36382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          /1zXgrmoTxAT0QLoSDHmqLAqkyCzOmjxwpwVNXopcGI=
Subject key identifier:   C5:FF:72:CD:8E:FA:FE:15:99:69:F4:CE:62:06:E7:FC:08:34:B9:47
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       1C9FBC45CA6D8EBA4F51D65EB0A0273E7E783F3C
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        170.247.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:bc:45:ca:6d:8e:ba:4f:51:d6:5e:b0:a0:27:3e:7e:78:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=C5FF72CD8EFAFE159969F4CE6206E7FC0834B947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:09:e3:3d:f4:af:b8:d3:b9:39:dd:e0:11:
                    26:03:4b:99:be:8f:4c:e0:e7:b4:92:70:58:12:bd:
                    5a:64:e6:61:a3:a8:1f:97:f5:da:c1:04:c6:b1:19:
                    23:ee:54:b8:e9:35:ed:1c:71:39:f7:73:ca:bc:8d:
                    b1:61:c0:66:8a:d5:61:4a:ab:a2:04:68:95:cb:48:
                    66:31:8e:21:25:b8:d0:91:32:5c:6e:77:2e:18:97:
                    1b:62:64:01:76:6d:03:a4:e4:a2:ba:49:83:4c:60:
                    59:bf:d6:bd:4d:9d:9e:b0:63:ff:31:6a:70:3c:54:
                    73:2f:74:b5:d2:60:27:50:9b:82:95:7a:bb:ee:a8:
                    bd:60:b8:4b:c6:a8:ee:68:e1:aa:3a:b6:d1:55:37:
                    e0:bc:b6:7c:f1:56:1e:21:22:c2:22:49:71:56:c1:
                    f4:ac:f2:bb:fc:cf:33:fa:31:c0:8d:bd:f7:db:1e:
                    03:e2:76:23:25:74:c7:25:82:39:96:2a:e2:f3:52:
                    bb:8c:f7:98:00:8f:50:40:24:83:b2:e6:9b:b4:29:
                    b2:05:8a:6d:ec:0d:3a:7f:55:c0:ba:4e:4d:94:89:
                    0a:4a:87:08:92:23:01:ac:f3:11:b1:b8:88:1a:a5:
                    e4:46:7c:31:df:2c:f0:2d:39:b1:39:2f:73:67:a7:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:72:CD:8E:FA:FE:15:99:69:F4:CE:62:06:E7:FC:08:34:B9:47
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137302e3234372e36382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:53:9e:b6:d0:89:41:9d:76:71:5c:5b:2a:5b:3f:77:53:
         b5:7a:da:75:ab:82:52:07:63:21:b1:d6:32:98:f8:de:25:27:
         d9:33:8e:24:0e:4a:1c:07:ac:70:43:f9:3f:6b:5f:f1:f3:a1:
         3e:a1:62:71:3e:52:ea:98:49:55:78:a2:ea:1c:28:8c:f3:ce:
         a7:f6:5d:ef:66:d0:42:e6:81:e8:83:c4:81:82:d2:a8:d8:cf:
         68:34:9a:0a:4f:c3:6c:b5:1e:3d:71:b2:6b:b3:4c:04:d0:51:
         56:6c:4b:d5:bf:b5:f9:a6:c7:4f:17:5b:d9:99:52:d1:16:44:
         cc:52:36:dd:63:bf:27:5b:70:29:99:68:ef:69:8f:65:97:9f:
         5b:5d:5b:59:31:00:69:40:45:3b:96:14:c4:63:84:5e:66:f9:
         dd:44:17:83:5d:07:d1:67:97:a8:cb:99:98:d7:69:4c:cf:37:
         1f:ab:ad:21:2d:fd:f8:05:02:62:aa:58:c4:64:9e:04:4f:8d:
         b3:d4:7b:76:d0:56:14:c4:e3:cc:6b:0c:07:e6:47:18:8f:f5:
         72:b3:c7:e9:6e:fd:d5:5e:15:23:f4:67:7f:2e:64:0a:12:9e:
         42:fc:cd:8d:ce:42:dc:f7:12:99:be:eb:8e:ba:98:6b:f9:46:
         54:ff:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 02:17:08 2024 by rpki-client on console-fra.rpki-client.org