Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32342d3234203d3e20323635303631.roa
File:                     3137302e3233312e35382e302f32342d3234203d3e20323635303631.roa (raw, json)
Hash identifier:          qGba9qZO/eTrb+XN/nj1nYWeiLD3bmNQKUN2ft/oRU0=
Subject key identifier:   AF:3E:1C:D4:13:45:F7:A9:02:CA:DD:7D:67:2C:BE:FA:91:09:87:0B
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       4F6948C2FF5567B7A7513BF8EBBE1182598C6B10
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32342d3234203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:53 +0000
ROA not before:           Tue 28 Mar 2023 14:42:53 +0000
ROA not after:            Tue 26 Mar 2024 14:47:53 +0000
asID:                     265061
IP address blocks:        170.231.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:48:c2:ff:55:67:b7:a7:51:3b:f8:eb:be:11:82:59:8c:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:53 2023 GMT
            Not After : Mar 26 14:47:53 2024 GMT
        Subject: CN=AF3E1CD41345F7A902CADD7D672CBEFA9109870B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:b0:f7:3b:49:b5:31:c2:71:54:8b:b8:7a:
                    8f:5f:aa:95:0b:26:27:e5:d0:85:77:2e:88:91:aa:
                    9e:9a:7d:b2:b8:5d:09:0b:cc:5b:b1:e8:4c:f3:85:
                    f9:29:63:ac:a0:e4:06:d8:70:e4:e8:1d:a1:30:3f:
                    f9:2e:50:ce:77:47:01:f1:df:c1:11:4e:82:6a:c6:
                    52:06:42:04:16:f6:25:ce:95:4f:99:53:01:28:83:
                    e6:a8:00:d9:e9:f3:bf:13:fe:df:84:22:fe:39:66:
                    f7:06:46:dc:b2:d5:d5:79:31:c0:c6:f0:66:dd:f4:
                    2d:73:33:f3:80:18:d4:7e:7f:c5:ae:01:92:8d:0a:
                    47:94:6e:ee:8e:ad:06:ca:bf:a0:f5:5c:6d:50:d0:
                    94:b5:1e:13:0c:4a:0c:ca:3d:45:ba:16:b4:ff:2d:
                    ce:23:d9:42:6e:24:d9:ed:1f:4f:eb:63:07:d2:57:
                    a6:5e:25:7a:4b:d0:f9:10:56:c0:a7:c0:db:dc:15:
                    10:66:86:d9:a0:33:68:80:8e:f1:4f:7c:01:36:cd:
                    a1:41:6a:e8:3f:4b:81:44:de:5c:ac:73:4b:46:77:
                    1f:80:15:ad:2b:17:6a:ee:52:64:66:60:6b:eb:97:
                    c9:35:64:0f:c5:91:da:6b:37:2f:b1:b1:61:af:d3:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:1C:D4:13:45:F7:A9:02:CA:DD:7D:67:2C:BE:FA:91:09:87:0B
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32342d3234203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:72:62:87:67:8e:21:cc:29:76:35:c6:89:20:a5:85:b6:c9:
         92:cb:d6:cf:2c:e1:95:21:83:d1:75:ef:ee:b5:22:0e:49:d6:
         df:c9:cb:f7:bf:c0:db:a0:98:86:98:99:26:65:03:86:16:e5:
         77:44:22:40:fa:a9:aa:4b:65:a6:68:d6:50:d5:73:d3:37:9f:
         7e:05:aa:1e:a8:18:58:80:e0:a7:1e:2a:4d:62:d8:c3:7d:e3:
         c0:f4:04:87:63:4d:ed:61:33:52:4c:ce:57:93:24:15:ee:67:
         bf:e0:54:a0:29:c6:5c:f3:3b:fd:f8:80:98:98:c1:a5:be:30:
         3c:af:82:d3:e3:4b:90:63:45:e5:79:bf:b9:5f:ff:f0:54:10:
         08:a7:03:78:95:d4:82:17:9b:d2:c2:d2:e4:ee:f1:11:3c:7c:
         b0:a3:6a:fd:6d:63:79:9b:00:ef:0d:a6:f9:46:d5:4e:a8:e0:
         ab:35:18:b3:af:31:52:9b:50:a3:22:e2:d3:5a:82:1d:36:9a:
         97:d6:73:bc:1f:97:e7:22:ee:38:93:5d:94:31:97:46:be:40:
         b9:f0:b1:72:cd:ec:95:9b:2c:fa:f0:0b:3b:70:e3:bd:eb:c5:
         2b:ee:8a:16:00:63:aa:c5:d6:59:3c:e3:0d:11:74:87:29:77:
         cc:4d:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org