Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa
File:                     3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa (raw, json)
Hash identifier:          0ahoUN8H40TZ8LwNrm8IqtwRH3v4i5e2XgBs/OgZECQ=
Subject key identifier:   1F:94:17:3A:28:12:48:D7:67:B9:C6:1E:7B:7A:45:BA:BE:54:AA:95
Certificate issuer:       /CN=043A136A1C8758CC468D95236A1355C4ADAF676C
Certificate serial:       5704D72B962F0168353CFC21822270819D8BC9B9
Authority key identifier: 04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa
Signing time:             Wed 14 Feb 2024 16:54:23 +0000
ROA not before:           Wed 14 Feb 2024 16:49:23 +0000
ROA not after:            Wed 12 Feb 2025 16:54:23 +0000
asID:                     264270
IP address blocks:        170.84.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:d7:2b:96:2f:01:68:35:3c:fc:21:82:22:70:81:9d:8b:c9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043A136A1C8758CC468D95236A1355C4ADAF676C
        Validity
            Not Before: Feb 14 16:49:23 2024 GMT
            Not After : Feb 12 16:54:23 2025 GMT
        Subject: CN=1F94173A281248D767B9C61E7B7A45BABE54AA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:c5:68:99:6a:b7:d1:58:a6:d3:53:a7:a5:
                    2c:d3:27:a9:4e:d1:f3:ad:9f:99:59:fc:b8:af:d4:
                    e6:05:ce:99:65:0d:42:0b:f2:26:71:01:eb:76:04:
                    a4:8a:ba:46:d9:0f:ab:7f:db:9d:92:af:d2:dc:b7:
                    fa:6c:59:58:5c:c7:79:a4:67:2b:82:b8:85:00:a9:
                    89:1a:35:0b:0e:87:e3:ac:91:42:47:27:71:29:55:
                    c8:0b:ee:d5:6f:0b:11:00:ee:5d:b6:75:43:e2:32:
                    f0:be:e2:09:ed:83:08:69:93:fa:11:86:80:e7:07:
                    9e:95:80:eb:a6:00:ec:db:04:48:31:03:0e:9c:3a:
                    37:b2:ac:26:fd:69:cf:f5:e4:d3:80:d8:de:12:89:
                    ab:bd:e0:c2:fa:45:4c:61:03:ad:dd:7a:21:46:6d:
                    d6:ef:0f:9e:71:08:35:d5:47:5d:22:cf:6e:0a:ea:
                    ff:68:de:fc:a9:0e:a4:36:f8:8d:af:44:c9:90:26:
                    02:72:ff:23:7e:ee:57:63:80:82:49:a4:08:3d:90:
                    96:24:6c:d4:40:54:df:d3:61:0a:58:d1:fa:3c:33:
                    6b:63:fe:4e:ed:50:c8:de:5c:dd:01:d8:f4:62:37:
                    14:d5:e8:40:c2:5e:4e:a3:77:e9:87:d8:12:ec:35:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:17:3A:28:12:48:D7:67:B9:C6:1E:7B:7A:45:BA:BE:54:AA:95
            X509v3 Authority Key Identifier:
                keyid:04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/043A136A1C8758CC468D95236A1355C4ADAF676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:1b:8e:ce:50:ae:3e:05:a2:cc:82:7b:aa:a6:39:06:53:
         73:5c:40:b7:33:78:8f:4f:cd:cd:46:06:b0:fe:c7:9f:5d:7a:
         00:c0:80:5e:1d:bb:22:37:b9:f5:f0:a9:31:67:eb:89:6f:1c:
         5c:43:70:d7:cc:1f:d5:e1:c3:97:f4:f5:ae:3f:8a:f6:45:35:
         68:d6:8a:c5:7f:a0:8f:1d:99:0d:a8:83:ae:c4:63:1e:a5:19:
         89:d2:40:70:d4:dd:69:f6:4b:3e:91:52:d6:f4:b1:7d:a7:be:
         b5:ae:8d:99:83:cd:48:b2:e8:66:d3:14:4f:c2:cf:5b:ab:e1:
         d4:8b:8c:67:0a:6f:79:b7:3d:9e:af:07:d8:7a:ef:8b:c9:42:
         8d:e8:2d:86:0e:b4:63:d6:c9:1a:0b:c2:00:09:c6:c7:bb:9c:
         c0:05:09:37:c1:b1:a4:81:ae:18:ef:f1:88:1f:83:e2:aa:54:
         55:d5:9c:64:8a:c6:d2:6a:df:d1:a8:f6:b5:33:c0:f4:60:fd:
         5d:7c:16:ed:cd:e5:60:af:e2:92:93:28:de:9b:00:c8:a6:6a:
         d7:c3:c0:7f:bb:b8:db:1f:b8:e7:79:d5:f2:53:76:b3:68:21:
         fb:9e:9f:14:5a:ea:e3:cd:71:cc:49:29:e3:d1:6a:2b:37:76:
         2f:a7:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org