Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131352e302f32342d3234203d3e20323634393639.roa
File:                     3137302e302e3131352e302f32342d3234203d3e20323634393639.roa (raw, json)
Hash identifier:          RwlzDxiT49cO3Oeh6qY2FtXNRtNTUpfEwh2Rxw2pEnY=
Subject key identifier:   96:F6:9D:16:5B:6F:F1:47:1E:E8:76:E6:22:45:0D:05:19:AE:88:29
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       4EC3EA445386320C24A2D87A016CBD5EC452F5E3
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131352e302f32342d3234203d3e20323634393639.roa
Signing time:             Fri 23 Feb 2024 13:40:00 +0000
ROA not before:           Fri 23 Feb 2024 13:35:00 +0000
ROA not after:            Fri 21 Feb 2025 13:40:00 +0000
asID:                     264969
IP address blocks:        170.0.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c3:ea:44:53:86:32:0c:24:a2:d8:7a:01:6c:bd:5e:c4:52:f5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Feb 23 13:35:00 2024 GMT
            Not After : Feb 21 13:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:3f:df:b0:fe:ed:e3:10:00:d6:3d:1b:58:
                    3f:c0:74:c5:fe:63:cc:b3:d6:6f:2b:a0:37:40:4c:
                    2b:14:98:69:b4:71:ba:15:f9:56:5a:ec:30:05:d2:
                    28:a7:7a:bc:ba:67:11:71:32:f4:0d:6b:fb:c0:ae:
                    a5:ee:73:3c:0d:a4:0b:df:a3:7f:ea:11:7d:24:08:
                    e1:3d:66:2c:a0:c8:f7:c0:05:2e:ab:61:e3:e9:10:
                    0a:39:df:79:73:37:6c:16:09:d4:a4:2b:e0:bc:b3:
                    0a:07:9f:64:27:2c:e4:54:a5:31:dd:44:76:78:9b:
                    e1:61:82:a8:53:b6:f1:53:db:c0:a4:a0:bb:60:e7:
                    76:89:6f:cb:75:c0:a1:f0:1c:16:1c:d5:f5:6c:30:
                    ce:5f:ee:07:ce:d4:d7:71:df:fd:72:35:69:2b:29:
                    31:7d:f3:3b:ee:bd:ba:32:73:14:a0:5d:ef:5d:44:
                    1e:2e:f3:1e:6f:16:6e:21:09:41:83:ec:4e:20:ee:
                    9e:35:c7:59:b4:80:6b:5f:60:3e:10:b3:d2:99:51:
                    b1:d5:65:dc:e6:ed:4f:27:59:02:be:1b:d3:b4:2a:
                    fa:0d:40:ec:6f:1d:8d:fc:c8:5a:33:f0:75:0a:ee:
                    dd:8e:c9:13:04:72:25:b8:8f:63:91:bb:61:ca:e0:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:9D:16:5B:6F:F1:47:1E:E8:76:E6:22:45:0D:05:19:AE:88:29
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131352e302f32342d3234203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e2:26:f3:11:91:c7:a3:a4:51:44:f8:45:8a:be:58:12:cd:
         0c:dc:df:f1:f4:6d:ce:f9:1b:2d:35:4a:c4:f9:b2:09:cb:86:
         80:28:b4:0f:a1:ea:dd:ea:85:d1:2f:93:46:71:3b:2e:d9:cf:
         dc:0f:fc:ac:19:36:f6:e9:de:be:46:ee:6b:26:5e:56:19:bb:
         6f:28:60:4a:18:23:c4:2f:30:93:47:d7:62:ac:bb:bd:bc:e5:
         ae:79:c0:25:0d:23:0a:73:35:67:56:5c:08:63:59:05:9d:04:
         eb:6b:04:54:57:c4:60:47:b8:e5:79:5c:30:2b:d5:14:f3:f2:
         ea:19:61:52:bc:37:d7:2a:04:d8:e0:80:7d:31:87:6a:0e:36:
         4f:d3:dc:d8:18:06:33:2a:15:ba:5c:c2:10:f6:c4:ae:4f:31:
         a4:a7:b9:70:e3:dd:fd:ac:e4:72:02:89:2c:6e:80:f8:d4:28:
         72:09:ee:49:d0:c9:1a:8e:4f:31:a3:31:b9:75:39:f7:d4:2a:
         f8:7f:a0:99:59:19:a6:06:4a:5d:52:e6:4f:a9:56:e2:7a:d7:
         c4:c7:bd:0c:a4:a1:e2:fd:7c:fa:9e:cd:69:75:be:0b:c5:4c:
         55:b1:89:79:7b:df:5a:6c:0c:41:43:ed:9c:96:f2:af:c8:a1:
         0c:b9:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org