Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131352e302f32342d3234203d3e20323633393033.roa
File:                     3137302e3234372e3131352e302f32342d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          hx+orBD2BmWF2XPUeleEGHFH3AFOL1pu1BXYZPNz9iU=
Subject key identifier:   50:05:79:B8:12:B2:0C:F4:39:B6:18:53:2F:E5:7F:2E:D0:F9:97:AD
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       23D8EC0BDC0EFA0BB82F191D6348CA781500CBAE
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131352e302f32342d3234203d3e20323633393033.roa
Signing time:             Fri 23 Dec 2022 16:40:54 +0000
ROA not before:           Fri 23 Dec 2022 16:35:54 +0000
ROA not after:            Fri 22 Dec 2023 16:40:54 +0000
asID:                     263903
IP address blocks:        170.247.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d8:ec:0b:dc:0e:fa:0b:b8:2f:19:1d:63:48:ca:78:15:00:cb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Dec 23 16:35:54 2022 GMT
            Not After : Dec 22 16:40:54 2023 GMT
        Subject: CN=500579B812B20CF439B618532FE57F2ED0F997AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:e6:7e:1a:8a:da:d4:d0:69:50:09:cc:18:
                    50:bf:05:25:f5:c7:3c:f2:0d:86:00:63:07:a1:32:
                    1c:3c:8f:6e:c4:cc:2e:86:e8:1f:04:c9:7b:98:03:
                    5b:21:5f:12:5d:52:85:11:c2:56:ee:ba:ef:ae:a1:
                    dc:85:51:52:72:5a:f8:0c:dc:c0:fd:1d:04:51:22:
                    83:06:02:7c:28:92:7c:0e:f9:7c:5c:7a:c8:c1:25:
                    b4:b7:5c:db:28:f4:09:8f:86:0b:e4:07:96:66:0a:
                    32:84:b9:73:db:ad:d7:25:63:29:62:ad:b6:55:c6:
                    87:ac:b2:97:4b:4d:f3:9f:4c:b2:02:8d:17:f8:47:
                    be:23:80:bb:c8:cf:db:b4:3b:02:9d:a3:42:33:b3:
                    9d:1b:f9:c0:c6:b0:4a:ad:ed:b4:2e:42:b9:23:53:
                    42:4a:5b:37:c9:5b:48:d7:dc:db:01:41:26:32:71:
                    a9:49:af:9d:c9:e8:d5:87:dd:3d:67:8d:47:2e:a2:
                    a7:48:b4:4c:13:8b:3d:61:ba:08:29:34:a7:34:d5:
                    23:77:c9:87:f2:89:06:03:d2:b8:62:91:24:d1:cb:
                    14:fd:c1:08:fb:6a:bf:a2:52:7c:74:62:6a:06:9d:
                    21:66:93:d4:2c:1b:14:1b:25:ab:a4:ef:1b:33:7e:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:79:B8:12:B2:0C:F4:39:B6:18:53:2F:E5:7F:2E:D0:F9:97:AD
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3137302e3234372e3131352e302f32342d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:73:c2:2a:06:c4:73:6d:a8:54:25:22:ee:30:9d:0c:18:
         84:71:7b:b1:c9:fd:32:27:fd:92:56:f4:cb:04:6e:03:61:44:
         1c:57:5c:53:7c:e4:18:1b:36:2c:a2:23:d3:59:99:dd:6c:13:
         76:55:87:ee:76:f2:1a:13:77:59:c3:dd:a4:5c:59:9d:92:7b:
         f1:fe:cc:2f:bf:a0:77:c5:e5:fa:80:82:44:3f:ca:40:b0:70:
         ed:59:99:21:bc:e2:f4:71:07:c3:29:e5:22:bb:4e:10:d5:48:
         fa:ff:7f:2c:11:cb:ff:05:27:45:dc:b4:1a:c7:83:b1:b7:23:
         8e:28:18:24:65:70:41:82:3f:31:a9:cc:6e:eb:25:f0:bf:32:
         d2:bd:dd:49:5e:03:f2:6a:51:bd:cb:6e:0b:db:1f:03:af:c6:
         aa:fb:50:fd:b1:c9:c4:a1:c0:49:ab:b6:fc:37:1f:50:5a:d1:
         cf:c3:d2:5e:af:03:2b:5d:4c:14:b4:29:33:32:1e:2c:56:f6:
         4f:f4:47:03:73:79:26:73:bb:0b:fb:59:c1:a0:69:f4:80:7a:
         75:25:b1:ed:21:10:13:a5:ee:ab:7e:ac:93:60:3a:6c:90:71:
         3e:27:33:04:29:01:13:bd:f4:16:36:0d:b1:f8:32:39:58:73:
         ef:cb:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org