Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e37392e3138342e302f32322d3234203d3e203533313335.roa
File:                     3137302e37392e3138342e302f32322d3234203d3e203533313335.roa (raw, json)
Hash identifier:          7vbth8PiYdY1B5Mrsc2WyR9wfBJlVoERs7zX3mJz/54=
Subject key identifier:   DD:2F:1A:4E:9C:AE:D3:AB:14:0A:E3:C1:0C:37:9C:57:D4:54:9E:05
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       1FAD6372BC9FB163BC253647E9ECD82B296CC021
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e37392e3138342e302f32322d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     53135
IP address blocks:        170.79.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:63:72:bc:9f:b1:63:bc:25:36:47:e9:ec:d8:2b:29:6c:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=DD2F1A4E9CAED3AB140AE3C10C379C57D4549E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:42:26:66:75:99:ab:4b:e7:2f:43:3f:75:
                    e3:e7:5c:c2:1a:d5:eb:b4:02:97:7b:85:a7:c1:7c:
                    b8:bf:50:7d:d5:9d:87:0a:da:64:05:94:b8:47:b4:
                    f9:40:ae:22:35:75:ab:f2:06:42:d8:5d:67:6d:b1:
                    5e:68:90:dc:7f:6c:37:62:87:54:0e:27:0e:a9:07:
                    32:86:a5:92:20:66:48:ff:2a:f2:87:4c:3b:23:2a:
                    a3:8f:94:8f:7d:b3:8b:b8:92:0b:c1:3e:1f:ed:23:
                    89:24:04:7b:a7:b7:4b:a2:7c:fa:2b:15:d7:1a:e3:
                    18:84:90:da:1d:08:99:90:ae:2d:c2:f2:bd:8e:cf:
                    58:f9:89:49:8d:98:7f:19:a0:f6:d1:b9:12:f3:d8:
                    b6:17:db:de:90:b5:81:e5:d1:86:ee:6b:69:b9:9f:
                    61:04:89:40:fa:19:4b:06:de:eb:22:9e:18:e3:bc:
                    9b:20:f1:8c:7a:a8:40:7e:f8:cd:86:0c:a8:23:77:
                    9a:dc:6e:31:30:5f:d8:bf:c0:86:1f:e8:44:bd:d6:
                    25:ee:d5:3c:42:1b:37:39:e9:bc:e4:d8:9d:67:74:
                    76:4e:02:de:a5:94:db:65:aa:6f:00:4d:f4:59:b8:
                    ad:78:5c:06:e9:88:2c:a9:8e:3a:26:d6:71:ed:3e:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2F:1A:4E:9C:AE:D3:AB:14:0A:E3:C1:0C:37:9C:57:D4:54:9E:05
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e37392e3138342e302f32322d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:87:70:b8:85:d3:53:8b:3b:8b:bb:6d:46:ad:5f:e1:04:
         29:eb:bc:08:e7:b1:72:ab:98:ff:7a:c6:2c:c9:99:a5:26:99:
         13:6e:13:93:40:f2:f1:d5:66:50:d6:cc:86:27:ec:5c:ab:aa:
         0e:db:f2:72:fc:37:dc:21:fb:85:81:d4:e3:e8:c9:94:1a:9c:
         52:a4:56:be:10:81:ab:41:cd:57:5c:2d:c5:c2:19:52:7b:40:
         c4:34:4c:32:c3:8e:0a:1b:ca:f9:f5:8e:e3:6d:58:a8:5e:6c:
         05:d7:5d:a0:6b:db:b0:3c:f5:07:35:4e:a3:a8:47:20:9e:a5:
         19:07:af:28:1e:e9:b3:3d:59:10:3c:40:8b:7d:9b:98:6e:7b:
         85:ff:4c:22:51:5c:f0:80:ab:76:8a:14:df:0a:5b:d9:ab:9e:
         e9:9b:99:b2:d1:6e:23:b8:f4:0e:98:25:43:d6:2f:44:92:f5:
         db:76:0e:b6:cf:a8:4c:cd:6a:ec:c8:c6:ca:fe:de:c5:e8:88:
         b6:f8:d5:4e:21:b9:09:d9:0f:f2:77:86:70:29:e7:ff:a3:b3:
         71:60:bd:95:34:07:30:6c:4c:2f:27:1f:9c:60:22:c7:de:13:
         6e:52:01:e9:cb:ce:03:38:53:6d:24:01:54:14:1f:8a:ab:76:
         06:45:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org