Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32342d3234203d3e20323634393639.roa
File:                     3137302e302e3131322e302f32342d3234203d3e20323634393639.roa (raw, json)
Hash identifier:          C6rPEazR/e3u5Mhg4+341oCnhsRKvIZGRro5mpDS8ys=
Subject key identifier:   BA:EC:50:9B:E3:55:A1:AE:96:FC:45:C0:09:5D:88:CE:E3:5F:62:F0
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       242EC89F63C2DBCB7DD71F563F3AC10EA00BBD19
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32342d3234203d3e20323634393639.roa
Signing time:             Fri 23 Feb 2024 13:40:00 +0000
ROA not before:           Fri 23 Feb 2024 13:35:00 +0000
ROA not after:            Fri 21 Feb 2025 13:40:00 +0000
asID:                     264969
IP address blocks:        170.0.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:c8:9f:63:c2:db:cb:7d:d7:1f:56:3f:3a:c1:0e:a0:0b:bd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Feb 23 13:35:00 2024 GMT
            Not After : Feb 21 13:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:f9:5d:0f:4a:b4:b6:71:e0:45:19:39:e6:
                    88:07:2b:af:7c:94:b1:52:97:c0:ed:ae:85:63:59:
                    4b:21:f6:63:4d:4a:11:29:b1:51:92:22:c5:67:07:
                    15:9d:ed:73:3f:b2:5b:b1:00:c3:6e:b8:57:89:fd:
                    3b:6e:60:3a:d2:72:ae:22:f0:0d:61:5a:11:3d:95:
                    73:0e:ea:86:7c:76:20:fc:dc:f4:34:4e:e0:17:76:
                    0a:49:fa:d3:fb:b0:40:f9:79:a9:13:80:1c:8f:16:
                    11:30:46:a7:fd:a1:fc:f6:24:80:b5:1a:9b:2c:00:
                    c3:6a:a0:82:12:f8:ca:66:17:90:53:15:cc:ef:6a:
                    9c:c1:00:9e:d9:30:42:22:45:83:66:48:bd:c3:bc:
                    cc:ed:f0:1f:da:77:ef:22:a6:72:e0:c4:6c:0e:9e:
                    c4:fb:36:ff:7d:45:7a:8e:79:c2:56:4a:a2:40:3d:
                    af:42:53:e3:96:d4:d3:bf:4a:5f:c9:79:46:bf:9a:
                    3d:b7:ad:1e:45:5a:f1:6f:9d:3e:f3:d9:6e:f1:6c:
                    7e:35:92:0f:48:1e:2f:95:f0:66:6d:a4:e9:c6:9f:
                    c9:a3:3b:8e:8b:26:2d:32:15:c0:ed:e9:79:81:c0:
                    43:f9:40:30:a9:8b:9b:19:a7:e0:83:48:4e:80:68:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:50:9B:E3:55:A1:AE:96:FC:45:C0:09:5D:88:CE:E3:5F:62:F0
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32342d3234203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:e9:e7:57:9e:a4:11:43:64:61:ca:b7:40:3e:bb:c9:d6:
         e9:3c:1a:18:2c:d3:12:aa:4f:95:80:f8:2e:c0:b6:22:31:01:
         e3:3d:b2:bb:e0:bf:58:14:77:94:c1:be:5e:73:a6:5e:fc:34:
         20:7c:ae:c7:0d:f7:ea:bb:3c:aa:ac:e2:cd:59:29:7f:ac:ca:
         ca:c2:85:fb:b0:64:11:a5:ac:d8:35:c3:cc:a7:41:42:0b:ab:
         73:2b:9a:ea:9b:7c:5b:0a:1e:32:f5:54:0f:5b:6e:c4:bf:ad:
         3c:84:b8:c4:54:f5:31:0d:13:34:cd:57:e5:2f:bf:17:d9:94:
         2c:3f:95:52:7c:26:a8:a8:4e:ae:08:1c:4b:da:cf:da:2c:09:
         2b:3d:b5:e6:37:0d:83:55:3a:77:f6:d9:87:b1:68:b7:5a:cc:
         72:bf:b7:f4:69:6e:5f:72:b8:f1:40:41:05:b5:6e:92:f4:f5:
         2b:0b:40:59:44:14:7d:f4:4c:0f:78:e6:db:31:24:4d:2b:55:
         ff:0c:9d:4d:9a:82:0d:fc:16:f6:41:e2:c6:c2:dc:da:0b:f5:
         a3:98:b9:8e:03:5a:74:e7:50:00:18:9d:ea:73:74:34:05:68:
         aa:ce:23:62:53:b0:50:88:bf:7d:05:7b:f9:82:82:ee:cc:51:
         cf:b3:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org