Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          QgU7Ydn3L6yu48UXy1dyTQsFbJzf2TaJQxzLWd2w8LU=
Subject key identifier:   16:50:31:43:7B:2C:25:B3:98:FC:67:2C:F2:9D:CE:F3:67:F6:D9:3A
Certificate issuer:       /CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
Certificate serial:       48DE643413ADD170AF3B5782DD84366C8A90BFF3
Authority key identifier: 8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:57:30 +0000
ROA not before:           Sat 27 Apr 2024 13:52:30 +0000
ROA not after:            Sat 26 Apr 2025 13:57:30 +0000
asID:                     264022
IP address blocks:        170.245.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:de:64:34:13:ad:d1:70:af:3b:57:82:dd:84:36:6c:8a:90:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
        Validity
            Not Before: Apr 27 13:52:30 2024 GMT
            Not After : Apr 26 13:57:30 2025 GMT
        Subject: CN=165031437B2C25B398FC672CF29DCEF367F6D93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:2e:e6:42:99:2d:1c:bf:bf:c9:2a:2b:a4:
                    63:66:ab:10:0e:70:69:b8:8a:b8:a0:38:f3:12:62:
                    70:34:ac:dc:fd:ae:3c:9f:a8:0d:99:80:91:ca:a1:
                    bf:8f:63:40:ed:72:5e:79:12:6d:88:7a:00:85:54:
                    91:15:f7:7d:e8:79:ae:77:b8:76:ef:fe:cd:df:ac:
                    75:9e:57:03:29:98:3a:b4:26:50:82:e4:f6:ba:c9:
                    18:d9:de:9c:c2:8e:fc:d7:f4:21:e3:fa:cc:67:00:
                    93:29:cd:2c:d9:f3:6c:7d:62:aa:52:12:c5:55:47:
                    61:d1:6d:38:09:64:61:b0:c3:7b:4b:eb:d5:cc:cc:
                    f9:f2:9f:18:ed:c3:5d:3a:66:88:3b:65:a7:0d:36:
                    38:c2:78:10:f8:1b:6a:34:95:58:52:af:30:68:6f:
                    a5:93:fe:cf:7e:d8:01:b1:1f:70:00:1d:6a:43:da:
                    29:5c:e6:18:13:3d:32:34:9e:24:a0:c8:20:c0:b5:
                    50:d4:4b:a8:e0:f5:cb:d5:6a:d5:b1:d8:83:24:8c:
                    d6:8c:96:c2:60:4a:97:fc:7b:f8:38:d8:91:4d:b0:
                    a3:2c:ae:12:6e:e5:56:b6:d4:f3:f7:32:41:74:5b:
                    dd:6b:4a:8e:9a:1a:3a:82:e7:b6:e0:4d:36:e4:9b:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:31:43:7B:2C:25:B3:98:FC:67:2C:F2:9D:CE:F3:67:F6:D9:3A
            X509v3 Authority Key Identifier:
                keyid:8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:46:73:83:d4:2e:0e:1c:cd:4a:8d:a1:8c:a2:8c:81:41:77:
         ca:06:a1:51:0f:65:45:30:b7:e3:3a:5a:47:24:0a:fc:93:be:
         91:a6:37:24:24:69:b4:05:a6:cc:bd:ba:f0:a4:e5:0e:5a:73:
         1e:4f:7c:cb:b5:e8:01:99:86:d2:74:5d:4a:6f:de:c2:53:8e:
         57:9e:d8:1e:b1:eb:f3:d1:fd:ed:3f:09:3d:8a:47:91:78:41:
         17:10:71:bd:b9:01:14:2d:f3:63:39:24:87:a7:68:91:1b:88:
         df:4a:6e:9c:04:35:54:3e:c5:c7:d7:8e:68:32:95:c7:29:1f:
         f7:af:6b:22:bb:21:96:e4:78:3e:f3:be:86:00:33:d2:45:65:
         4b:98:c3:8a:fc:08:f7:01:8e:92:93:83:49:b0:e3:d0:e1:6c:
         e6:e1:1f:d2:6a:34:0f:36:6d:c6:33:96:62:c4:fa:14:8a:cc:
         71:69:f7:1c:6e:d2:0c:1b:0e:61:a7:95:56:91:98:a6:a0:3e:
         dc:41:d5:23:95:d2:f2:b4:d0:ac:d3:e3:36:af:50:74:0b:79:
         a6:7f:e0:f0:8c:2d:53:56:96:c3:e9:5c:d3:70:ec:cd:e2:7f:
         96:2e:f5:1e:b2:87:4a:86:8e:4b:52:30:da:64:82:58:9d:b4:
         07:f3:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org