Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131342e302f32342d3234203d3e20323634393639.roa
File:                     3137302e302e3131342e302f32342d3234203d3e20323634393639.roa (raw, json)
Hash identifier:          K5FeJxrNAVKid1ihe/bN3W8b0xLXIbxQYBB1Y4mEIgQ=
Subject key identifier:   5A:F2:BD:42:A6:2A:6B:02:E9:2B:F8:76:7A:C6:8B:82:F0:AF:78:36
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       4743D94804D56ACFEB88DFB4BF905F2F2D4DB19C
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131342e302f32342d3234203d3e20323634393639.roa
Signing time:             Fri 23 Feb 2024 13:38:00 +0000
ROA not before:           Fri 23 Feb 2024 13:33:00 +0000
ROA not after:            Fri 21 Feb 2025 13:38:00 +0000
asID:                     264969
IP address blocks:        170.0.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:d9:48:04:d5:6a:cf:eb:88:df:b4:bf:90:5f:2f:2d:4d:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Feb 23 13:33:00 2024 GMT
            Not After : Feb 21 13:38:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:32:f5:5e:d9:96:c3:3d:4f:0b:9c:f1:b5:
                    6a:44:30:da:42:06:eb:eb:c9:80:60:17:f8:c7:e4:
                    64:80:75:a2:de:ae:99:82:a6:22:c0:3e:2a:f3:9c:
                    07:31:d3:18:7a:4a:5d:72:a4:49:a4:4b:44:85:90:
                    d6:43:8b:35:c8:d3:34:30:1d:3c:9b:78:53:9d:1f:
                    43:39:cb:11:f2:c9:10:d4:a8:53:50:92:80:0d:dc:
                    6a:3d:b7:f3:0c:3c:b6:49:d7:cb:68:d6:fc:a5:6c:
                    47:5d:7a:c0:75:0d:e8:0f:56:08:59:60:ba:56:72:
                    73:60:48:d8:e5:2f:e2:dc:f6:b6:9e:00:77:c5:69:
                    64:c4:e3:1d:53:ab:01:d6:96:26:e7:ad:03:0f:52:
                    df:16:bf:09:ef:33:10:82:5a:12:a2:1e:d9:24:cb:
                    c8:d3:8a:41:83:06:e6:b6:ed:fa:74:1b:4e:66:c8:
                    ec:a9:6a:fa:f9:b4:65:d8:fd:32:e3:b7:7b:01:03:
                    7f:56:b7:3e:79:eb:4f:a1:20:3f:43:d4:3d:6c:9e:
                    cb:11:da:3a:ea:a2:46:4f:a0:1e:9a:d5:98:16:4d:
                    95:2a:c8:67:8d:1d:0f:f5:3d:71:92:9d:2a:02:14:
                    a5:a2:ed:70:0b:a4:38:12:06:d7:b0:25:9b:e8:c8:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:BD:42:A6:2A:6B:02:E9:2B:F8:76:7A:C6:8B:82:F0:AF:78:36
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131342e302f32342d3234203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:49:01:c5:5e:5f:51:bb:16:b7:53:72:91:6e:1f:54:85:78:
         13:28:2f:1e:9b:7b:6b:0a:b3:3a:8b:74:a1:64:0d:ca:13:39:
         42:fb:92:6d:3c:ad:f7:a6:d8:bb:b1:f8:75:fe:9c:9c:91:9d:
         95:0c:1d:5e:9c:99:67:c1:58:03:13:08:b8:4c:90:b2:96:fd:
         1a:ea:ca:28:d3:9d:cd:07:3b:92:88:14:33:7a:e7:2e:96:2a:
         b4:39:9a:ea:47:36:87:28:04:12:ea:75:61:ca:c3:71:82:de:
         64:44:4c:4d:35:51:44:1d:7c:b4:85:af:d9:25:8e:d6:4e:b4:
         c8:db:db:5c:21:b5:09:59:4c:b3:3e:46:1e:a2:d3:39:35:18:
         4a:3c:7a:bb:39:1e:2f:a3:ab:a8:38:6e:74:25:52:8f:9d:76:
         bd:44:da:fa:25:6d:71:bc:ff:7c:50:dd:6d:43:03:dc:f6:1a:
         6e:77:a7:10:ad:4d:a7:6c:e3:56:79:08:b5:c6:d6:57:ed:89:
         65:0e:0f:4f:62:c5:32:30:e7:6d:5a:ef:8a:dd:78:c2:46:1d:
         3d:5b:9b:47:0d:42:8d:a9:01:2c:f1:9c:59:5a:c8:85:58:30:
         51:04:6d:d1:01:0d:a7:55:7b:e6:6a:9e:ab:a5:d4:6c:eb:b3:
         18:96:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org