Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3137302e3234362e33322e302f32322d3234203d3e20323634333930.roa
File:                     3137302e3234362e33322e302f32322d3234203d3e20323634333930.roa (raw, json)
Hash identifier:          VyUsot6LHn9OF8qw759f8G10W4oTNvNzqyJ+ma+deGc=
Subject key identifier:   FB:08:58:11:FC:E8:79:32:AB:F6:07:5B:F5:1B:78:25:3C:9D:44:1C
Certificate issuer:       /CN=18F419A180314B79E88307605FA439DF04529F3D
Certificate serial:       117A3A2CF1C31D1EB454A69165AA30D1A905F406
Authority key identifier: 18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3137302e3234362e33322e302f32322d3234203d3e20323634333930.roa
Signing time:             Wed 28 Feb 2024 10:25:53 +0000
ROA not before:           Wed 28 Feb 2024 10:20:53 +0000
ROA not after:            Wed 26 Feb 2025 10:25:53 +0000
asID:                     264390
IP address blocks:        170.246.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:3a:2c:f1:c3:1d:1e:b4:54:a6:91:65:aa:30:d1:a9:05:f4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F419A180314B79E88307605FA439DF04529F3D
        Validity
            Not Before: Feb 28 10:20:53 2024 GMT
            Not After : Feb 26 10:25:53 2025 GMT
        Subject: CN=FB085811FCE87932ABF6075BF51B78253C9D441C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:18:22:05:b8:73:20:2e:79:01:3e:49:5b:
                    6b:a5:4f:43:33:e3:d9:5e:74:5b:71:95:d3:d8:40:
                    30:ac:dc:d3:29:36:ad:a5:74:60:96:ce:7c:e7:ff:
                    f5:81:8e:fa:47:83:e0:ab:b2:27:14:92:23:27:5e:
                    69:ab:d5:3f:41:27:35:5d:52:3e:c8:8c:e5:05:25:
                    b2:cf:eb:4c:2c:68:ee:3b:72:4f:98:2f:c5:ce:30:
                    a1:15:2d:c0:f2:98:11:9a:aa:7b:dc:64:4e:71:37:
                    78:65:55:ee:33:58:14:78:8c:98:49:6d:e7:76:47:
                    72:73:9d:ff:51:be:b4:fe:16:3b:ac:c3:06:5b:45:
                    03:9b:31:6c:45:b5:73:e3:9e:8e:ea:6a:3a:46:71:
                    b2:93:ee:36:f1:f8:96:90:3e:2d:f7:18:8a:a3:77:
                    3e:28:cc:71:6f:70:98:46:38:68:ee:36:ef:f4:08:
                    3b:ff:c4:87:40:12:61:d3:ca:6a:e6:ed:2a:d3:19:
                    51:df:34:3c:df:34:50:47:2a:56:85:b1:be:2c:9a:
                    1c:ca:23:e9:45:a7:31:be:09:eb:8a:75:5e:2e:56:
                    ca:4a:2e:aa:34:e9:c5:cc:21:84:dc:ce:b0:7d:41:
                    cc:ce:4a:73:f5:52:6e:39:b7:44:aa:a5:fa:6d:ce:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:58:11:FC:E8:79:32:AB:F6:07:5B:F5:1B:78:25:3C:9D:44:1C
            X509v3 Authority Key Identifier:
                keyid:18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/18F419A180314B79E88307605FA439DF04529F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/3137302e3234362e33322e302f32322d3234203d3e20323634333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:87:c1:e3:77:bf:22:fb:07:ca:05:ce:fb:e1:02:98:5c:51:
         d7:3d:fd:f5:96:9b:e4:06:e4:0d:03:57:8d:c3:6a:16:21:66:
         26:00:5f:dd:59:cb:d7:06:c2:6a:20:f2:3f:3e:a1:5f:5f:7a:
         bb:e4:0c:0d:e8:e8:3e:4c:03:59:74:6c:86:45:3f:55:7e:ed:
         bd:37:f3:40:42:a6:85:4e:6a:0d:56:79:95:e8:8a:41:7e:f2:
         b0:a8:d5:86:95:1b:6f:6b:2f:52:ab:2c:8d:95:d8:71:b2:70:
         ef:00:9e:b0:c3:8f:fa:b5:8c:94:20:43:d7:5c:4f:8c:17:9f:
         a3:80:c6:49:b8:ee:f9:77:ea:12:48:26:81:99:22:23:b1:6c:
         6d:26:39:54:47:38:18:a7:c2:46:db:4d:d0:75:7e:29:b3:93:
         fa:92:e2:f5:31:a4:16:c7:ca:67:39:8c:b8:b6:ae:39:d5:49:
         cc:cf:b3:1a:ce:e8:9e:cc:8d:93:6c:fb:68:54:bb:5d:be:72:
         3b:40:96:0a:80:f3:d5:a3:3e:da:19:0d:f4:8d:52:bd:b0:09:
         e5:b7:bf:0a:7d:44:cd:34:aa:71:69:27:3f:88:7c:52:e2:0c:
         7b:76:0f:86:29:9d:3c:3f:7c:12:01:10:54:09:c6:c4:dc:91:
         be:29:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org