Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131332e302f32342d3234203d3e20323634393639.roa
File:                     3137302e302e3131332e302f32342d3234203d3e20323634393639.roa (raw, json)
Hash identifier:          FwzVgmTjFphrjRgTwxR+dBPKWhRCLnXiAJJSbW3gxnc=
Subject key identifier:   B3:98:A5:A4:CF:45:04:12:09:CD:AE:59:CD:14:DC:57:C3:72:7C:03
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       52CE2DDE9E7C3FE7EB13B7FD791A4F10A82825C0
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131332e302f32342d3234203d3e20323634393639.roa
Signing time:             Fri 23 Feb 2024 13:38:00 +0000
ROA not before:           Fri 23 Feb 2024 13:33:00 +0000
ROA not after:            Fri 21 Feb 2025 13:38:00 +0000
asID:                     264969
IP address blocks:        170.0.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:2d:de:9e:7c:3f:e7:eb:13:b7:fd:79:1a:4f:10:a8:28:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Feb 23 13:33:00 2024 GMT
            Not After : Feb 21 13:38:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:cd:fa:a6:68:92:92:32:21:60:3f:6b:05:
                    04:09:f7:e8:30:94:a9:4f:36:c0:7e:b7:85:6b:02:
                    76:18:d9:7b:12:45:44:89:ed:86:4a:18:01:12:e7:
                    18:b1:3a:91:db:98:89:51:ae:13:5f:92:57:70:2c:
                    53:6f:92:77:ed:77:21:9a:aa:73:12:7f:df:63:d9:
                    46:28:48:32:00:26:b2:e2:39:c0:f1:5a:66:a7:47:
                    e0:37:a9:fb:e9:d2:e5:b8:72:50:76:76:47:85:b2:
                    8f:67:00:fa:4a:cc:cf:7c:55:4f:a7:c2:04:08:d0:
                    b0:91:e6:86:f0:d7:02:c3:05:38:45:bc:94:00:a3:
                    b6:33:24:58:13:49:8d:fd:f5:f7:ce:46:da:f8:95:
                    d4:dd:a1:3b:cf:3e:82:77:91:a2:5d:65:17:f7:90:
                    f5:af:79:45:be:e6:60:2d:8b:7b:6e:21:b3:0a:8e:
                    c0:d5:5b:6f:7e:a7:93:a8:0b:92:25:6a:66:6c:3a:
                    bb:37:4b:62:9b:50:b9:28:eb:f6:86:94:1f:b2:dd:
                    6a:33:64:31:b8:1c:72:cd:41:48:14:34:35:06:23:
                    b6:43:dd:70:bb:42:63:4b:d2:2f:8f:b4:36:40:95:
                    4f:51:f0:71:cc:57:0d:1a:dd:6c:6e:27:2d:44:dd:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:98:A5:A4:CF:45:04:12:09:CD:AE:59:CD:14:DC:57:C3:72:7C:03
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131332e302f32342d3234203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:ed:03:c1:2b:ee:fa:4a:f8:0a:ff:53:be:c3:85:7e:ba:
         33:20:ab:29:80:98:83:55:91:4b:a8:ea:e0:06:97:bf:98:55:
         d2:f3:1d:93:6c:1d:48:59:ae:e5:fb:20:a1:7c:f0:c0:34:f8:
         e4:7e:6d:87:07:be:f9:2e:53:58:82:a8:ab:2d:4d:11:12:78:
         5f:26:ec:3a:b5:3b:75:70:de:a5:11:49:8f:a5:b0:7d:04:9d:
         dd:f4:57:27:0e:b3:72:dd:8b:72:a4:12:b1:de:c6:cd:5d:1d:
         a5:c5:e7:87:15:e9:2c:ec:42:73:13:76:99:a7:7f:ea:25:fc:
         8c:ba:0b:5f:b2:97:ee:18:71:41:b8:8a:5d:8d:53:e3:29:68:
         4e:2d:e5:83:0f:b6:37:a3:33:7f:dd:e3:49:dd:a3:92:46:a4:
         ef:28:1d:c2:79:2e:cf:6b:7c:99:14:05:b0:2c:2d:1c:c2:bf:
         46:29:21:86:b3:b9:7b:5d:bb:6b:44:94:6a:9c:a7:ea:fb:0d:
         83:b8:80:1e:f1:25:c7:a0:ae:21:de:df:7c:40:47:44:10:9c:
         ff:03:08:40:de:c9:43:60:f8:54:8f:1c:dd:4a:6d:6a:33:ed:
         27:71:f2:75:1d:88:04:b3:bd:75:d5:d2:fc:d1:cf:99:0c:a6:
         57:99:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org