Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3332203d3e203533313831.roa
File:                     3137302e3233332e3130342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          FmiCzavmx2YZ1uiQ81wcsKo/sT/8QMe9DDgnW6tu2so=
Subject key identifier:   F5:1B:4B:6B:3C:74:54:4D:DF:88:98:01:5E:92:D8:C9:32:45:BF:F0
Certificate issuer:       /CN=0796979B1EB6929CCF726A0BD121B88402FC0C15
Certificate serial:       4589DBA20CA961CA5B943917D9F82548DA85FDB2
Authority key identifier: 07:96:97:9B:1E:B6:92:9C:CF:72:6A:0B:D1:21:B8:84:02:FC:0C:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3332203d3e203533313831.roa
Signing time:             Tue 14 Mar 2023 23:20:00 +0000
ROA not before:           Tue 14 Mar 2023 23:15:00 +0000
ROA not after:            Tue 12 Mar 2024 23:20:00 +0000
asID:                     53181
IP address blocks:        170.233.104.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:db:a2:0c:a9:61:ca:5b:94:39:17:d9:f8:25:48:da:85:fd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0796979B1EB6929CCF726A0BD121B88402FC0C15
        Validity
            Not Before: Mar 14 23:15:00 2023 GMT
            Not After : Mar 12 23:20:00 2024 GMT
        Subject: CN=F51B4B6B3C74544DDF8898015E92D8C93245BFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:38:cf:2a:b4:8c:c0:f5:d7:b1:9e:65:3a:
                    a5:2a:ea:78:4e:c5:1e:a2:0a:02:13:e1:c8:07:b7:
                    da:69:6d:81:06:b5:69:be:3c:7a:6a:82:e0:96:e7:
                    63:77:21:a3:0c:23:43:97:51:47:df:f6:8f:93:92:
                    34:76:94:42:99:a3:c9:1e:a9:22:00:0f:c0:ab:73:
                    47:ee:48:23:86:ce:c2:a4:04:c1:4e:b5:65:83:f3:
                    fc:f7:97:9f:d6:45:38:4c:09:e7:91:f2:ec:34:67:
                    90:a5:3b:8e:7b:fc:3a:27:ce:92:5c:2d:8b:f7:68:
                    63:2f:ed:21:e4:ed:4b:d9:ff:15:cd:e3:47:c9:bc:
                    d3:3e:82:54:5e:47:16:09:d0:7f:13:7c:d9:95:c2:
                    85:88:40:73:59:3e:58:af:a2:db:6e:6f:34:aa:59:
                    71:71:82:cd:f5:18:40:4d:77:a9:5f:a9:f4:82:a2:
                    81:a0:ab:19:b9:b9:7a:dd:e9:75:86:ae:a9:29:e1:
                    45:c0:63:44:c7:bc:cb:c6:43:8c:a7:fb:39:f2:19:
                    f7:9a:65:f0:33:5d:0b:f0:9c:c0:d9:c9:b3:6e:54:
                    75:71:d3:e2:cf:ec:7c:c1:3f:5c:0c:b6:e4:3f:51:
                    bb:e9:e7:89:b6:06:3e:ff:9b:ee:48:14:88:00:96:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:4B:6B:3C:74:54:4D:DF:88:98:01:5E:92:D8:C9:32:45:BF:F0
            X509v3 Authority Key Identifier:
                keyid:07:96:97:9B:1E:B6:92:9C:CF:72:6A:0B:D1:21:B8:84:02:FC:0C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0796979B1EB6929CCF726A0BD121B88402FC0C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:d2:d3:08:32:1d:2c:a5:81:f7:83:b8:ce:1d:f0:1d:d9:
         41:c9:fc:ef:40:37:e3:0a:25:e4:7e:95:29:08:2d:62:29:a2:
         09:e6:b0:9b:a1:18:2b:9f:a6:5c:a6:9e:53:35:46:27:f9:77:
         28:cf:92:c2:eb:0f:d1:e6:e8:20:fa:ce:55:db:53:38:e7:bc:
         b6:61:3a:15:d8:55:2c:c5:2c:f8:eb:ae:f8:e4:41:5f:60:3e:
         9b:fe:99:92:1b:6e:df:bc:8b:b2:41:5d:22:f0:e4:16:2b:d5:
         7c:00:42:e9:db:cf:03:76:78:a0:45:ee:a8:cd:8b:12:b6:ee:
         03:fd:f0:0c:b8:34:e8:f4:05:a4:9e:3a:ad:36:b3:f8:22:54:
         6e:4e:e9:56:05:df:cb:46:b1:e3:65:7f:08:db:aa:95:1a:33:
         52:76:05:f5:4c:0e:30:8f:21:e7:2e:f5:a8:6c:3d:66:78:dd:
         b3:fc:d2:66:37:90:4d:72:37:8a:d6:8a:44:00:0f:b8:da:d4:
         10:2f:f5:55:e0:60:29:8c:d4:40:43:fb:2b:3f:f4:6d:2d:2a:
         25:97:de:f6:d0:4b:c2:3e:21:a8:7f:56:23:16:2a:33:02:fe:
         b9:da:78:ca:81:35:10:06:1e:4e:f8:05:bb:40:e3:2c:9d:fe:
         e1:60:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org